Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          WWVagnAxraUMeYyDImXp8FFtg6NOClQ884/rLq6WRGM=
Subject key identifier:   A7:0F:90:94:32:69:39:56:68:8F:3F:4E:37:6C:0B:82:7F:F6:E2:8D
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019FFDFFFF06824CBE17E61152F7F77A616E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 02:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 02:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 02:00:40 +0000
Files and hashes:         1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: Wfzbhb/VtBq05t+0dFNQc1+A6u3gHEr7SV+2UXefzig=)
                          2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:ff:ff:06:82:4c:be:17:e6:11:52:f7:f7:7a:61:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Aug 14 02:00:40 2026 GMT
            Not After : Aug 15 02:00:40 2026 GMT
        Subject: CN=a70f909432693956688f3f4e376c0b827ff6e28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:89:a8:21:12:c7:45:38:ca:02:0e:d0:9b:
                    b7:8c:01:95:cf:6d:62:4f:8a:b2:5e:c5:39:1d:ff:
                    18:d0:5d:a5:f7:4e:a4:75:97:57:96:1f:c0:4b:17:
                    57:7b:72:ec:06:74:ee:3b:1e:44:cf:e6:ef:96:7f:
                    0a:6a:14:e5:c5:04:27:eb:0c:3c:ee:9a:05:3f:eb:
                    40:6f:2a:75:37:d6:7d:7f:68:d8:61:6e:8e:d8:3d:
                    2d:fd:b2:33:3d:8f:d9:9a:8a:7e:3c:90:82:af:9c:
                    fe:d1:0f:d3:cb:ca:f0:3f:cd:7c:d9:2c:d8:ff:d6:
                    39:b3:21:0e:4f:54:de:80:70:e4:60:47:6b:31:0d:
                    ec:65:de:64:8d:09:e5:54:cd:f5:56:0d:21:69:c8:
                    2d:2b:f9:d4:06:e6:33:8a:ac:16:2a:66:f2:09:fd:
                    50:d6:da:9d:61:b7:b4:07:61:c7:d6:b3:b1:4a:bb:
                    26:a8:e3:1c:13:54:fe:71:b1:53:53:2b:6c:72:b0:
                    d3:32:26:09:6e:91:10:18:d6:ef:de:d6:01:ed:2e:
                    c7:67:8f:0f:f0:3b:42:4c:41:a7:7c:38:fe:93:24:
                    3f:c1:fb:f8:3a:46:02:c4:c7:ca:d3:6f:d7:ce:d5:
                    90:4d:2e:d8:42:a4:84:1f:0c:be:7a:40:e1:52:65:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:90:94:32:69:39:56:68:8F:3F:4E:37:6C:0B:82:7F:F6:E2:8D
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:50:51:a0:44:66:ea:f2:4a:22:c6:a5:86:d2:50:a6:ef:
         aa:b8:f7:8f:df:63:27:90:c2:70:d0:9d:a9:96:ea:9a:5d:17:
         43:c0:dd:b2:0e:e9:7f:78:f9:ec:5d:9d:40:eb:65:a7:22:b5:
         f5:93:ec:e1:0d:43:60:be:20:85:ce:cb:3f:67:d3:ac:6e:34:
         fd:ff:8c:1c:68:03:bf:c9:cc:01:be:26:56:8d:59:33:53:89:
         db:c7:27:75:20:1c:e3:4e:be:4c:6c:ca:6f:1f:ae:14:ef:b7:
         ea:db:e5:9e:1e:34:fd:6e:d5:a6:a3:74:9c:56:be:8d:31:db:
         fb:d3:af:63:0a:5c:6e:1f:e6:1b:54:1f:e6:c2:2a:62:01:d4:
         15:64:b8:71:64:00:e1:90:90:71:52:45:68:6b:6d:4f:55:fb:
         c9:0b:8c:1b:92:8b:70:da:1b:91:55:85:ec:73:ed:5c:4a:f0:
         55:24:29:a6:fb:a3:e3:b0:e7:3d:ad:f6:de:a6:38:18:00:2c:
         fc:59:16:59:21:f3:7f:9b:2a:fb:c4:b4:1f:4d:e5:7f:18:dc:
         08:8e:ec:41:39:c7:0e:16:64:89:92:69:4e:28:23:89:44:15:
         87:14:4d:00:2b:a3:3d:d1:56:30:ba:e3:1c:e1:83:67:ce:16:
         62:3a:60:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9//8Ggky+F+YRUvf3emFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZGRhZjIxMzI1N2QxNzZkZjUwYWE2ZTc3NjQ4YTBjYzcy
YTVmYTEwHhcNMjYwODE0MDIwMDQwWhcNMjYwODE1MDIwMDQwWjAzMTEwLwYDVQQD
EyhhNzBmOTA5NDMyNjkzOTU2Njg4ZjNmNGUzNzZjMGI4MjdmZjZlMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZCJqCESx0U4ygIO0Ju3jAGVz21i
T4qyXsU5Hf8Y0F2l906kdZdXlh/ASxdXe3LsBnTuOx5Ez+bvln8KahTlxQQn6ww8
7poFP+tAbyp1N9Z9f2jYYW6O2D0t/bIzPY/Zmop+PJCCr5z+0Q/Ty8rwP8182SzY
/9Y5syEOT1TegHDkYEdrMQ3sZd5kjQnlVM31Vg0hacgtK/nUBuYziqwWKmbyCf1Q
1tqdYbe0B2HH1rOxSrsmqOMcE1T+cbFTUytscrDTMiYJbpEQGNbv3tYB7S7HZ48P
8DtCTEGnfDj+kyQ/wfv4OkYCxMfK02/XztWQTS7YQqSEHwy+ekDhUmVaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcPkJQyaTlWaI8/TjdsC4J/9uKNMB8GA1UdIwQY
MBaAFJ/dryEyV9F231CqbndkigzHKl+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAt
MzBiNzY0ZWI0OTAwLzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAtMzBiNzY0ZWI0OTAw
LzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVedQUaBE
ZurySiLGpYbSUKbvqrj3j99jJ5DCcNCdqZbqml0XQ8Ddsg7pf3j57F2dQOtlpyK1
9ZPs4Q1DYL4ghc7LP2fTrG40/f+MHGgDv8nMAb4mVo1ZM1OJ28cndSAc406+TGzK
bx+uFO+36tvlnh40/W7VpqN0nFa+jTHb+9OvYwpcbh/mG1Qf5sIqYgHUFWS4cWQA
4ZCQcVJFaGttT1X7yQuMG5KLcNobkVWF7HPtXErwVSQppvuj47DnPa323qY4GAAs
/FkWWSHzf5sq+8S0H03lfxjcCI7sQTnHDhZkiZJpTigjiUQVhxRNACujPdFWMLrj
HOGDZ84WYjpg7A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 06:13:20 2026 by rpki-client