Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File:                     U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier:          drmbiTjsVfY5Fkvgbw+X+vvZcvh7ASTCo9Fb/UfgiEU=
Subject key identifier:   52:72:3A:59:31:C4:B0:43:83:7A:33:3B:E3:14:39:AD:B0:D6:0A:94
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer:       /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial:       01A003CC07500614F294C56575F25783B0E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number:          0C8D
Signing time:             Sat 15 Aug 2026 05:01:37 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:37 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:37 +0000
Files and hashes:         1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: ArmhQPlp3TNuBzhs9t0sHP30ZGBcE21hXUfIqIIffng=)
                          2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cc:07:50:06:14:f2:94:c5:65:75:f2:57:83:b0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
        Validity
            Not Before: Aug 15 05:01:37 2026 GMT
            Not After : Aug 16 05:01:37 2026 GMT
        Subject: CN=52723a5931c4b043837a333be31439adb0d60a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:56:6d:db:31:54:31:db:f2:66:0a:34:3c:
                    99:c9:94:ba:8d:fc:81:b5:de:40:90:83:17:53:b3:
                    dc:8c:e4:d5:6a:bb:3e:ab:68:d4:25:fe:3a:3c:b1:
                    b5:78:d4:34:49:ba:7e:aa:59:e6:6e:73:e1:8c:eb:
                    b8:b4:7a:38:6a:20:fb:a9:fe:63:6a:7f:c9:73:51:
                    d0:f5:5c:8b:fd:ca:b1:db:3f:06:6e:50:92:61:44:
                    2f:f8:8f:76:ed:dc:ae:68:a2:59:15:00:7f:01:8b:
                    2d:f5:9a:86:d0:0d:e5:6e:3d:07:5b:12:9a:80:99:
                    19:b7:44:76:39:1b:c4:c4:3a:3c:4b:e8:6c:4e:c0:
                    2e:71:12:5d:f8:fe:61:b7:a5:7b:92:61:17:13:e5:
                    25:64:a8:f0:28:d4:f7:2f:42:09:5e:08:31:c5:da:
                    db:35:b6:b9:93:ff:28:12:df:31:32:53:a7:55:f0:
                    c3:5e:bf:d0:b6:01:bc:e5:c4:86:c1:e6:db:12:d0:
                    0e:20:65:b2:5d:29:e1:a7:55:9c:57:a0:f5:e3:87:
                    cc:c5:ab:b9:c2:3c:2f:6d:1a:23:9a:9c:c5:7c:16:
                    33:69:9e:a9:57:ac:78:35:89:ba:97:f5:7e:9a:4d:
                    94:f0:64:12:46:4a:d9:15:4d:05:b0:45:09:cd:4c:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:3A:59:31:C4:B0:43:83:7A:33:3B:E3:14:39:AD:B0:D6:0A:94
            X509v3 Authority Key Identifier:
                keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:72:e8:ea:77:72:cc:63:fe:a9:05:35:40:a9:2b:31:b6:
         f3:d6:3a:c0:60:23:ef:f9:3f:50:de:c9:ef:16:5b:47:91:88:
         1f:ad:18:b1:81:74:62:97:f2:72:0a:fd:8a:52:80:47:c5:07:
         7d:6d:e2:95:96:c6:0a:1d:7c:8c:4b:4a:d0:20:ef:0c:7c:62:
         48:1b:6a:05:36:5a:e7:09:e8:16:b5:df:33:b0:f6:b0:af:4e:
         f3:dc:f4:fd:28:25:8b:d6:d3:5f:9b:71:08:aa:33:b9:77:fd:
         a4:f8:b6:8c:8b:fd:bf:00:59:e3:f2:2d:25:28:da:ba:b3:77:
         bd:29:5d:15:8b:ea:2e:94:b9:84:43:a0:dd:49:41:d9:fe:81:
         dc:31:65:a2:eb:8c:bd:ce:2e:41:4d:9d:ab:b4:43:7c:01:8c:
         a6:e0:02:a3:cd:70:9e:66:f4:4c:c8:97:0e:78:53:62:be:22:
         ef:92:55:94:b1:87:40:cf:a3:14:57:92:91:c5:20:5e:d5:29:
         c3:0e:45:b5:51:cf:d1:d7:b3:9c:7e:e6:97:f3:24:06:d8:51:
         bd:c5:dd:29:fb:d0:7c:7c:94:ed:d7:c1:52:92:c3:9c:0a:62:
         36:f4:05:0e:12:6b:c9:76:80:f9:bc:19:ad:4e:1a:21:0a:c2:
         3e:83:0f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADzAdQBhTylMVldfJXg7DhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZTNhZWRkOTFiZTgyNDUxMzQyZGNkMWM5ODI4MzQ1ZGI2
NjFhNWYwHhcNMjYwODE1MDUwMTM3WhcNMjYwODE2MDUwMTM3WjAzMTEwLwYDVQQD
Eyg1MjcyM2E1OTMxYzRiMDQzODM3YTMzM2JlMzE0MzlhZGIwZDYwYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wdWbdsxVDHb8mYKNDyZyZS6jfyB
td5AkIMXU7PcjOTVars+q2jUJf46PLG1eNQ0Sbp+qlnmbnPhjOu4tHo4aiD7qf5j
an/Jc1HQ9VyL/cqx2z8GblCSYUQv+I927dyuaKJZFQB/AYst9ZqG0A3lbj0HWxKa
gJkZt0R2ORvExDo8S+hsTsAucRJd+P5ht6V7kmEXE+UlZKjwKNT3L0IJXggxxdrb
Nba5k/8oEt8xMlOnVfDDXr/QtgG85cSGwebbEtAOIGWyXSnhp1WcV6D144fMxau5
wjwvbRojmpzFfBYzaZ6pV6x4NYm6l/V+mk2U8GQSRkrZFU0FsEUJzUymgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJyOlkxxLBDg3ozO+MUOa2w1gqUMB8GA1UdIwQY
MBaAFFPjrt2RvoJFE0Lc0cmCg0XbZhpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1PdTNaRy1na1VUUXR6UnlZS0RSZHRtR2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNGU4YjItYzc2Zi00NjI5LTk1YWQt
YTdkOTQ1YWYxNGU1LzEvVS1PdTNaRy1na1VUUXR6UnlZS0RSZHRtR2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNGU4YjItYzc2Zi00NjI5LTk1YWQtYTdkOTQ1YWYxNGU1
LzEvVS1PdTNaRy1na1VUUXR6UnlZS0RSZHRtR2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPxy6Op3
csxj/qkFNUCpKzG289Y6wGAj7/k/UN7J7xZbR5GIH60YsYF0Ypfycgr9ilKAR8UH
fW3ilZbGCh18jEtK0CDvDHxiSBtqBTZa5wnoFrXfM7D2sK9O89z0/Sgli9bTX5tx
CKozuXf9pPi2jIv9vwBZ4/ItJSjaurN3vSldFYvqLpS5hEOg3UlB2f6B3DFlouuM
vc4uQU2dq7RDfAGMpuACo81wnmb0TMiXDnhTYr4i75JVlLGHQM+jFFeSkcUgXtUp
ww5FtVHP0deznH7ml/MkBthRvcXdKfvQfHyU7dfBUpLDnApiNvQFDhJryXaA+bwZ
rU4aIQrCPoMPEA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:26 2026 by rpki-client