Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          ZfeYSVeGM8HNoJwvGLKyiA9saIe8KFoZO4WkCe35OnY=
Subject key identifier:   B3:85:4B:15:3B:B6:67:BE:31:05:AE:FF:16:C3:B3:2E:1F:0A:24:23
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       01A00281ABE0ACA7673BD0471B94A972EE15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1A2E
Signing time:             Fri 14 Aug 2026 23:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:47 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: 6N9j6Mdrpy6ZSQW6/hmyWjnvQMWRO/WiTbEeUm/1NiI=)
                          5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
                          6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          8: ZmP2ZObUuyHKnhCp3yW1kDTHCgs.roa (hash: Vxkxt++oIeUph0DYbZ+8qTmMgtiVFmJg9DjiNvyd4sc=)
                          9: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:ab:e0:ac:a7:67:3b:d0:47:1b:94:a9:72:ee:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Aug 14 23:00:47 2026 GMT
            Not After : Aug 15 23:00:47 2026 GMT
        Subject: CN=b3854b153bb667be3105aeff16c3b32e1f0a2423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:36:01:c4:4e:9a:98:50:44:0b:f8:9f:45:
                    55:e2:0f:aa:f0:c7:2b:77:51:b1:37:34:62:de:15:
                    ab:b5:b9:5e:36:05:4a:c5:28:f2:0b:8d:da:b8:55:
                    36:17:a4:ee:bd:bf:01:0d:65:1c:50:53:0b:20:21:
                    9e:2c:ed:da:c7:67:54:16:49:1a:98:dd:ab:25:c3:
                    9e:80:86:e0:f5:e1:e0:95:ce:bf:7b:50:78:17:ec:
                    3b:35:b1:6a:cd:1b:ef:80:c8:9a:20:ef:f8:2b:e9:
                    b4:39:92:42:50:93:8c:b6:c2:e0:83:95:f5:dd:6e:
                    6c:8d:e6:50:62:18:35:cb:dd:18:a6:a8:05:07:61:
                    ca:8e:f6:0f:e3:75:b6:b1:52:12:bc:ea:3d:44:2b:
                    3a:d4:91:7d:49:db:3e:bf:6b:bb:d8:40:0b:94:00:
                    7f:8a:e5:8c:cf:59:62:cd:5b:34:d6:ff:4d:7e:21:
                    bf:91:85:6a:cc:e1:d3:3d:bf:aa:59:d5:55:ea:9a:
                    e3:b4:6b:f8:f9:e7:c2:4b:14:93:9c:93:d5:8d:d9:
                    15:27:42:34:e6:05:ce:72:9b:31:c3:ad:78:d3:3a:
                    3f:9c:00:34:0b:53:e8:73:f8:7d:b9:dd:5a:77:f5:
                    91:68:25:00:be:36:70:3e:38:b4:12:de:1f:d9:09:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:85:4B:15:3B:B6:67:BE:31:05:AE:FF:16:C3:B3:2E:1F:0A:24:23
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:e8:06:df:8d:36:2b:93:a5:d4:c5:ed:ed:7a:2b:d6:c9:
         18:9a:a1:04:f5:99:6c:1e:e5:d2:31:c0:b9:05:1b:c2:e5:b0:
         3d:ba:ff:ce:87:1c:f9:e0:3a:40:d9:ba:eb:4a:d2:41:22:57:
         7c:7e:21:15:6a:50:09:eb:b0:85:37:e3:78:00:15:9c:16:9c:
         3e:b3:9d:fa:a9:1b:49:87:25:bf:92:37:65:56:b5:0b:87:be:
         07:f1:89:18:4a:89:e7:c9:6b:c6:f6:d1:03:89:e1:43:2e:d6:
         55:0c:f9:29:8a:ba:45:14:cc:d7:05:4b:b1:1a:de:4d:46:5a:
         5d:bd:eb:06:41:ac:00:31:7e:8d:3e:00:df:1c:17:9b:5e:10:
         1b:d4:e9:53:da:dc:22:f4:6e:62:74:dc:8a:54:d5:86:6e:9b:
         6d:12:ea:85:1e:5e:8b:71:f1:63:c6:72:2a:e6:af:82:83:a6:
         30:9c:dd:3f:07:00:97:74:c2:77:9a:4e:91:ce:10:7d:57:cb:
         71:9f:1d:1c:f9:24:2c:73:c6:e0:69:d8:f6:3d:c3:69:71:70:
         74:5f:fe:fd:a5:2f:1d:c4:7b:2b:65:a1:75:55:af:4e:dd:30:
         3a:f1:8f:20:f4:60:e6:63:ad:a3:bf:f7:a6:37:6e:20:72:a5:
         98:84:54:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgavgrKdnO9BHG5Spcu4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjYwODE0MjMwMDQ3WhcNMjYwODE1MjMwMDQ3WjAzMTEwLwYDVQQD
EyhiMzg1NGIxNTNiYjY2N2JlMzEwNWFlZmYxNmMzYjMyZTFmMGEyNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa82AcROmphQRAv4n0VV4g+q8Mcr
d1GxNzRi3hWrtbleNgVKxSjyC43auFU2F6Tuvb8BDWUcUFMLICGeLO3ax2dUFkka
mN2rJcOegIbg9eHglc6/e1B4F+w7NbFqzRvvgMiaIO/4K+m0OZJCUJOMtsLgg5X1
3W5sjeZQYhg1y90YpqgFB2HKjvYP43W2sVISvOo9RCs61JF9Sds+v2u72EALlAB/
iuWMz1lizVs01v9NfiG/kYVqzOHTPb+qWdVV6prjtGv4+efCSxSTnJPVjdkVJ0I0
5gXOcpsxw6140zo/nAA0C1Poc/h9ud1ad/WRaCUAvjZwPji0Et4f2QlGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOFSxU7tme+MQWu/xbDsy4fCiQjMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0LoBt+N
NiuTpdTF7e16K9bJGJqhBPWZbB7l0jHAuQUbwuWwPbr/zocc+eA6QNm660rSQSJX
fH4hFWpQCeuwhTfjeAAVnBacPrOd+qkbSYclv5I3ZVa1C4e+B/GJGEqJ58lrxvbR
A4nhQy7WVQz5KYq6RRTM1wVLsRreTUZaXb3rBkGsADF+jT4A3xwXm14QG9TpU9rc
IvRuYnTcilTVhm6bbRLqhR5ei3HxY8ZyKuavgoOmMJzdPwcAl3TCd5pOkc4QfVfL
cZ8dHPkkLHPG4GnY9j3DaXFwdF/+/aUvHcR7K2WhdVWvTt0wOvGPIPRg5mOto7/3
pjduIHKlmIRUYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:26:36 2026 by rpki-client