Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File:                     rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier:          9CD2LAIhX9jQewMG3Mj9avapHVQ4H98unuYY00yrkts=
Subject key identifier:   6E:BC:C1:29:70:60:6C:15:53:A7:34:5C:CC:A8:BA:0B:B3:7C:FC:36
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer:       /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial:       01A0024AD4CCA74EB21AE59EC8F5B9636D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number:          101E
Signing time:             Fri 14 Aug 2026 22:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:53 +0000
Files and hashes:         1: p8Q1T6owao0UtFaI0uzL9fVOIDk.roa (hash: ETVPkMleWg5Tmk9ZZqBQNGmyAM72infgVzIH2DgSiBI=)
                          2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: kA1xAIYxEtQCw4kJz+igaJUnaQif7UoSTEBIl6kIljY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:d4:cc:a7:4e:b2:1a:e5:9e:c8:f5:b9:63:6d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
        Validity
            Not Before: Aug 14 22:00:53 2026 GMT
            Not After : Aug 15 22:00:53 2026 GMT
        Subject: CN=6ebcc12970606c1553a7345ccca8ba0bb37cfc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:a2:48:6c:3f:ae:07:bf:5f:3a:15:9d:86:
                    f2:e9:b1:dd:39:d3:f9:de:9a:10:4f:a9:a9:66:57:
                    6b:62:ea:b3:dd:b3:52:0c:d6:5a:91:77:77:d7:19:
                    e9:3a:de:42:e9:d9:c3:80:cb:b2:8e:4e:f6:52:84:
                    e2:40:e4:e6:45:56:0e:96:dc:92:fe:9d:58:94:92:
                    90:51:d8:2f:99:40:64:06:d9:9c:9b:a1:05:d0:25:
                    a9:21:e0:8d:c1:fc:75:5b:33:c2:02:24:fc:ae:ab:
                    0e:3e:ca:ce:7b:ea:98:89:05:f1:d4:05:bb:ed:69:
                    bf:21:27:55:da:22:d3:a8:48:90:7a:fb:0a:82:f0:
                    30:d3:b5:f6:b3:61:c5:59:0d:cc:ff:60:74:48:d5:
                    c4:a4:fb:fd:5e:84:36:50:ac:ea:04:9c:8c:3c:86:
                    c5:75:39:9c:c9:27:6d:18:e9:19:5c:d2:8b:94:70:
                    b1:9e:76:2f:7c:21:22:be:a4:00:e3:59:13:fe:b0:
                    3d:19:0c:08:a9:91:92:f5:7f:46:95:fd:df:32:15:
                    65:64:8c:7b:94:d0:f8:b1:3c:17:01:e8:0b:86:66:
                    a5:91:5c:91:61:00:fe:b4:5c:89:17:7c:a3:da:9c:
                    4b:ee:a2:95:d2:d5:b1:04:1c:ca:cd:8c:72:05:3a:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BC:C1:29:70:60:6C:15:53:A7:34:5C:CC:A8:BA:0B:B3:7C:FC:36
            X509v3 Authority Key Identifier:
                keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:ff:c5:1d:97:c0:5a:e3:66:76:98:a2:df:64:68:4f:43:
         ac:8c:8a:19:49:56:49:3f:5a:97:50:48:82:cd:0b:23:43:1b:
         b2:c3:5a:5f:54:af:c9:f4:a2:51:da:43:18:bb:3a:22:86:36:
         b4:3d:92:c7:6c:77:32:59:1e:1b:76:54:93:2d:40:01:de:35:
         c0:c8:b5:d0:fe:2a:7b:23:f9:97:65:85:0d:c2:82:7e:88:65:
         7f:47:fe:9d:97:5a:73:ac:9e:49:d6:9b:eb:9c:a0:0c:2a:42:
         f7:f8:16:5e:c9:06:1b:c1:6d:5b:73:0c:01:bf:5b:7f:64:99:
         1e:7a:f4:b2:1d:fb:c7:86:7c:85:58:bf:50:5a:32:db:6a:f1:
         0f:10:27:42:53:01:69:8d:f6:14:7a:02:7b:94:bc:51:77:59:
         ff:c6:40:51:81:dc:f6:d3:d3:62:fd:5e:96:b5:16:09:22:9f:
         dd:ca:9c:fe:f0:5d:96:97:b0:45:82:82:2f:ad:51:71:4e:06:
         08:db:43:87:ff:16:dc:a3:71:0d:8d:f4:f7:eb:99:f8:08:b6:
         df:d3:3f:35:e2:5c:33:a2:65:eb:37:92:c7:09:33:1e:77:d9:
         e1:e4:73:61:a4:da:59:9e:86:b7:7b:5b:a7:73:00:f9:5a:2c:
         e9:45:4a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACStTMp06yGuWeyPW5Y21yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2YxODdjMTI3ODJmYzRkODQ0NzYyMjM1OTkzMzI5YzQ1
NjNhMGQwHhcNMjYwODE0MjIwMDUzWhcNMjYwODE1MjIwMDUzWjAzMTEwLwYDVQQD
Eyg2ZWJjYzEyOTcwNjA2YzE1NTNhNzM0NWNjY2E4YmEwYmIzN2NmYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtyiSGw/rge/XzoVnYby6bHdOdP5
3poQT6mpZldrYuqz3bNSDNZakXd31xnpOt5C6dnDgMuyjk72UoTiQOTmRVYOltyS
/p1YlJKQUdgvmUBkBtmcm6EF0CWpIeCNwfx1WzPCAiT8rqsOPsrOe+qYiQXx1AW7
7Wm/ISdV2iLTqEiQevsKgvAw07X2s2HFWQ3M/2B0SNXEpPv9XoQ2UKzqBJyMPIbF
dTmcySdtGOkZXNKLlHCxnnYvfCEivqQA41kT/rA9GQwIqZGS9X9Glf3fMhVlZIx7
lND4sTwXAegLhmalkVyRYQD+tFyJF3yj2pxL7qKV0tWxBBzKzYxyBTpgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG68wSlwYGwVU6c0XMyouguzfPw2MB8GA1UdIwQY
MBaAFK5/GHwSeC/E2ER2IjWZMynEVjoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYt
MDU4Nzc2MDRhMDFkLzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYtMDU4Nzc2MDRhMDFk
LzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLz/xR2X
wFrjZnaYot9kaE9DrIyKGUlWST9al1BIgs0LI0MbssNaX1SvyfSiUdpDGLs6IoY2
tD2Sx2x3MlkeG3ZUky1AAd41wMi10P4qeyP5l2WFDcKCfohlf0f+nZdac6yeSdab
65ygDCpC9/gWXskGG8FtW3MMAb9bf2SZHnr0sh37x4Z8hVi/UFoy22rxDxAnQlMB
aY32FHoCe5S8UXdZ/8ZAUYHc9tPTYv1elrUWCSKf3cqc/vBdlpewRYKCL61RcU4G
CNtDh/8W3KNxDY309+uZ+Ai239M/NeJcM6Jl6zeSxwkzHnfZ4eRzYaTaWZ6Gt3tb
p3MA+Vos6UVKKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:50 2026 by rpki-client