Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File:                     H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier:          yDLy2CXyfbtouXW5KoQTVCdOqvEjhKDBX+h5mn4vDOY=
Subject key identifier:   11:A2:59:75:63:66:AD:EF:8A:DD:98:E0:AD:45:CC:68:53:E8:F5:30
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer:       /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial:       01A001A5FBD1136D6B5848060308CBE8C54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number:          084C
Signing time:             Fri 14 Aug 2026 19:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:50 +0000
Files and hashes:         1: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (hash: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY=)
                          2: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: 8z9Ax2AL4F7+N68rfNJFdYWWkhSQqEMihvweH+EGUSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:fb:d1:13:6d:6b:58:48:06:03:08:cb:e8:c5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
        Validity
            Not Before: Aug 14 19:00:50 2026 GMT
            Not After : Aug 15 19:00:50 2026 GMT
        Subject: CN=11a259756366adef8add98e0ad45cc6853e8f530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:32:a0:98:5e:95:d2:57:39:ff:59:04:50:
                    c5:b1:b7:00:55:39:bb:97:cc:7d:27:12:eb:6d:ac:
                    a2:08:bc:b8:d6:df:ad:e7:4e:fc:73:19:a3:f9:05:
                    b6:28:cc:15:b4:00:ad:c3:b3:f1:cf:df:6d:d5:13:
                    0b:50:3a:70:5f:5f:ce:0c:91:5c:41:57:e1:c8:f9:
                    4e:6f:da:78:1b:0b:68:e4:e7:82:b4:4c:fd:87:db:
                    05:9b:5b:52:3b:48:d0:50:49:9e:f1:ad:fb:db:cb:
                    50:f7:ef:ac:4e:d9:12:b5:94:12:b0:bb:f3:bb:02:
                    c6:6e:1b:d8:9c:9b:d7:81:6b:98:c3:7e:d5:cd:02:
                    4e:d9:eb:b9:c0:99:8d:e4:2d:63:6b:04:af:a1:6f:
                    f2:8b:9a:39:b7:88:e0:49:1c:17:c9:7d:7b:a3:d4:
                    7f:e3:3c:27:56:ec:ec:8a:ff:03:b0:ae:06:36:1c:
                    07:ed:8e:a5:37:67:96:d2:e6:a8:f6:eb:fe:92:a5:
                    bb:6c:58:77:c9:39:aa:b7:b4:96:dc:7c:9d:6b:ec:
                    88:9b:ca:6a:07:70:5f:96:32:b0:ae:69:ab:92:a5:
                    a5:be:e1:30:b2:07:9c:8e:fe:1f:cf:75:28:a2:a1:
                    b1:6b:d5:32:15:1b:0a:2c:9c:1d:c4:9d:89:56:fc:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:59:75:63:66:AD:EF:8A:DD:98:E0:AD:45:CC:68:53:E8:F5:30
            X509v3 Authority Key Identifier:
                keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:40:64:e2:7e:85:66:50:d9:f6:8e:42:83:25:cd:0d:0e:
         81:89:0e:54:73:ef:a8:32:03:43:d9:94:f4:47:fe:ed:d7:2b:
         50:dd:28:a5:5b:8b:51:a9:98:d8:96:ad:d4:d1:64:3e:25:6d:
         51:26:d8:c7:a9:27:88:d5:b0:f2:91:25:f2:2f:bf:90:12:3f:
         2f:5b:ad:94:17:e3:84:48:5f:df:30:97:14:3a:72:c6:83:e5:
         17:a5:f4:a5:91:9d:70:65:e7:7c:29:da:6e:1f:32:da:2c:45:
         1e:15:da:09:1d:f0:43:8e:66:4f:4d:47:e2:8c:1e:29:97:19:
         20:9f:41:f5:d1:59:d2:06:56:a6:49:d0:49:2c:42:56:73:12:
         ea:ea:00:9c:16:86:65:f0:70:7d:05:e8:fb:fb:73:7c:08:70:
         0e:9c:dc:43:c0:6d:97:9e:75:12:76:1b:dd:8c:92:70:d5:17:
         64:00:20:66:90:f5:91:ab:6e:e2:a1:7e:80:f7:fb:db:79:14:
         ee:5f:29:58:d1:7b:67:ef:f5:84:24:68:49:a0:a6:bf:44:4c:
         86:6e:cb:7f:28:01:5c:87:b0:a0:d3:46:17:7d:59:b8:26:5d:
         50:94:4a:b0:4c:c9:10:20:ff:ab:27:df:f3:60:ae:db:9a:d4:
         db:15:ae:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpfvRE21rWEgGAwjL6MVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDgyZTVlNDEyYzFkZWJiNzc2ZGVkZmFmNDVjMzMxNzRl
NzY0MmUwHhcNMjYwODE0MTkwMDUwWhcNMjYwODE1MTkwMDUwWjAzMTEwLwYDVQQD
EygxMWEyNTk3NTYzNjZhZGVmOGFkZDk4ZTBhZDQ1Y2M2ODUzZThmNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgcyoJheldJXOf9ZBFDFsbcAVTm7
l8x9JxLrbayiCLy41t+t5078cxmj+QW2KMwVtACtw7Pxz99t1RMLUDpwX1/ODJFc
QVfhyPlOb9p4Gwto5OeCtEz9h9sFm1tSO0jQUEme8a3728tQ9++sTtkStZQSsLvz
uwLGbhvYnJvXgWuYw37VzQJO2eu5wJmN5C1jawSvoW/yi5o5t4jgSRwXyX17o9R/
4zwnVuzsiv8DsK4GNhwH7Y6lN2eW0uao9uv+kqW7bFh3yTmqt7SW3Hyda+yIm8pq
B3BfljKwrmmrkqWlvuEwsgecjv4fz3UooqGxa9UyFRsKLJwdxJ2JVvyJtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGiWXVjZq3vit2Y4K1FzGhT6PUwMB8GA1UdIwQY
MBaAFB9ILl5BLB3rt3be369FwzF052QuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDIt
ZDJlMzM3MmFjMjljLzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDItZDJlMzM3MmFjMjlj
LzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfZAZOJ+
hWZQ2faOQoMlzQ0OgYkOVHPvqDIDQ9mU9Ef+7dcrUN0opVuLUamY2Jat1NFkPiVt
USbYx6kniNWw8pEl8i+/kBI/L1utlBfjhEhf3zCXFDpyxoPlF6X0pZGdcGXnfCna
bh8y2ixFHhXaCR3wQ45mT01H4oweKZcZIJ9B9dFZ0gZWpknQSSxCVnMS6uoAnBaG
ZfBwfQXo+/tzfAhwDpzcQ8Btl551EnYb3YyScNUXZAAgZpD1katu4qF+gPf723kU
7l8pWNF7Z+/1hCRoSaCmv0RMhm7LfygBXIewoNNGF31ZuCZdUJRKsEzJECD/qyff
82Cu25rU2xWubQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:36 2026 by rpki-client