Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File:                     mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier:          CqwShoX6Kwgv4NtiBYqzrr8iBnjqJEjLPTKR7ydvSXE=
Subject key identifier:   5E:74:E7:AA:A3:7F:E1:12:72:46:6D:13:7A:D4:69:3C:ED:04:22:A6
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer:       /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial:       01A02BEB723535BC5AEBE60523FCACCA379E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number:          0502
Signing time:             Sun 23 Aug 2026 00:00:45 +0000
Manifest this update:     Sun 23 Aug 2026 00:00:45 +0000
Manifest next update:     Mon 24 Aug 2026 00:00:45 +0000
Files and hashes:         1: V40XeqVh6l4DbCmS7UQsikJ2-iM.roa (hash: 5u4CbQ5JG4yrJVoWscvPthJuNktPYvJ7kXfZHFgxd10=)
                          2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: I9RKdxau5cqIRM8NP0r+M3jHAPqdwaZr9buKVAvHOzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2b:eb:72:35:35:bc:5a:eb:e6:05:23:fc:ac:ca:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
        Validity
            Not Before: Aug 23 00:00:45 2026 GMT
            Not After : Aug 24 00:00:45 2026 GMT
        Subject: CN=5e74e7aaa37fe11272466d137ad4693ced0422a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:f2:09:5c:2b:05:2d:0f:76:0a:7d:94:e6:
                    e3:48:e8:ef:55:cf:59:7e:0e:5f:27:0e:9b:a2:d4:
                    df:54:d4:46:6a:e9:4f:75:56:ed:a2:f9:4b:ec:ac:
                    e0:35:84:2f:c9:ee:ed:02:2d:54:a5:38:39:09:f3:
                    08:f0:e1:44:66:ab:3f:c9:75:a1:aa:a3:c3:38:fc:
                    78:18:6f:bb:48:16:05:9e:42:a9:3f:ca:58:ab:58:
                    78:01:fa:fd:7e:18:fb:63:3f:a2:ba:a9:e8:f4:2c:
                    a7:9e:70:98:88:2f:12:48:2c:0c:0d:70:e0:7e:47:
                    b8:c5:ed:d5:89:38:a0:c1:e5:8d:76:a2:17:b8:7a:
                    1f:04:2c:e7:6c:cd:56:d9:45:2f:27:b3:2e:a2:ce:
                    df:d8:21:e3:00:ee:cc:34:72:c2:74:45:6a:10:e3:
                    3f:42:b0:7e:c4:7b:7c:ef:66:e0:2b:33:8f:4b:4a:
                    e7:68:62:46:30:9f:9a:6d:50:52:3d:bf:b7:9f:db:
                    fb:6e:92:6f:51:78:a6:c8:5a:71:92:ff:70:58:b9:
                    61:c5:45:f1:f8:98:a2:3f:bc:d1:ed:99:85:ee:79:
                    d8:09:99:51:c7:ab:a5:d2:36:7c:05:6b:42:5d:09:
                    e1:79:d6:45:27:29:d2:63:a3:d4:e0:e9:0f:71:64:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:E7:AA:A3:7F:E1:12:72:46:6D:13:7A:D4:69:3C:ED:04:22:A6
            X509v3 Authority Key Identifier:
                keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:22:28:6c:50:36:4c:77:d5:e2:f8:05:5a:8d:dc:c0:8e:ac:
         7e:1f:18:c3:2d:56:f5:e8:da:30:bb:81:9e:f5:65:b6:bc:0b:
         5d:9d:66:ab:9c:8b:66:1d:a8:a9:27:56:ed:f4:13:72:4d:23:
         3e:61:01:81:e3:6b:a3:03:76:8c:37:e2:3d:3b:a4:52:44:a5:
         5e:d1:16:91:4f:85:54:d7:01:b3:bc:ea:2d:a1:d8:69:dd:97:
         a4:19:dc:a9:91:44:56:c9:c8:e6:9b:9b:65:62:2b:8c:19:62:
         94:9c:de:28:18:39:0e:38:7f:c6:6f:af:4d:a0:68:d8:1f:06:
         d6:9d:5f:44:80:e2:d3:d6:87:9f:6b:af:21:39:f2:7c:38:e7:
         71:27:3f:94:82:e8:31:c7:2d:f7:62:c5:eb:9c:f9:fc:86:d0:
         ae:f0:19:b1:a7:48:59:e5:93:10:cd:88:f4:8b:7a:f0:5a:dd:
         53:51:ce:be:4b:4a:16:8d:cb:d9:6b:c3:7b:4e:07:2a:80:8d:
         13:e3:5d:66:ee:69:14:f4:86:a2:d1:81:33:bc:1f:1a:df:52:
         cb:61:9b:83:53:e8:74:da:56:74:a5:b8:0e:e2:3a:3b:96:eb:
         3d:8a:32:4b:a8:c0:a1:85:19:3e:8a:ed:9b:c2:a3:e6:a1:9a:
         71:02:0a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAr63I1Nbxa6+YFI/ysyjeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTViODBjNDVkZmI1ZWE3YWFhN2RkMWQ4ZWQ4YjE0Zjlj
MWRjNDUwHhcNMjYwODIzMDAwMDQ1WhcNMjYwODI0MDAwMDQ1WjAzMTEwLwYDVQQD
Eyg1ZTc0ZTdhYWEzN2ZlMTEyNzI0NjZkMTM3YWQ0NjkzY2VkMDQyMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts3yCVwrBS0Pdgp9lObjSOjvVc9Z
fg5fJw6botTfVNRGaulPdVbtovlL7KzgNYQvye7tAi1UpTg5CfMI8OFEZqs/yXWh
qqPDOPx4GG+7SBYFnkKpP8pYq1h4Afr9fhj7Yz+iuqno9CynnnCYiC8SSCwMDXDg
fke4xe3ViTigweWNdqIXuHofBCznbM1W2UUvJ7Muos7f2CHjAO7MNHLCdEVqEOM/
QrB+xHt872bgKzOPS0rnaGJGMJ+abVBSPb+3n9v7bpJvUXimyFpxkv9wWLlhxUXx
+JiiP7zR7ZmF7nnYCZlRx6ul0jZ8BWtCXQnhedZFJynSY6PU4OkPcWTtBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5056qjf+ESckZtE3rUaTztBCKmMB8GA1UdIwQY
MBaAFJhVuAxF37Xqeqp90djtixT5wdxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYTZiYjQtMjRiOC00MDg2LWEyOWQt
ZWU2YzUwOWI2MjIxLzEvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zYTZiYjQtMjRiOC00MDg2LWEyOWQtZWU2YzUwOWI2MjIx
LzEvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCIobFA2
THfV4vgFWo3cwI6sfh8Ywy1W9ejaMLuBnvVltrwLXZ1mq5yLZh2oqSdW7fQTck0j
PmEBgeNrowN2jDfiPTukUkSlXtEWkU+FVNcBs7zqLaHYad2XpBncqZFEVsnI5pub
ZWIrjBlilJzeKBg5Djh/xm+vTaBo2B8G1p1fRIDi09aHn2uvITnyfDjncSc/lILo
Mcct92LF65z5/IbQrvAZsadIWeWTEM2I9It68FrdU1HOvktKFo3L2WvDe04HKoCN
E+NdZu5pFPSGotGBM7wfGt9Sy2Gbg1PodNpWdKW4DuI6O5brPYoyS6jAoYUZPort
m8Kj5qGacQIKpA==
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:19 2026 by rpki-client