Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File:                     9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier:          +1Aw2lH08K9rOyX0zLvkbe2O38vhk7p0UzgnpiHxzqs=
Subject key identifier:   37:94:80:01:C7:6D:90:B1:5F:84:7B:11:B0:59:C1:80:C5:4C:3D:57
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer:       /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial:       01A001702C7A3FF33D8BA927C281601B2458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number:          0C6D
Signing time:             Fri 14 Aug 2026 18:02:03 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:03 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:03 +0000
Files and hashes:         1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
                          2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: gAQOwQ55MXzagkaB3Rje+8tw6iOc0Y8ym4klQ8YmbVg=)
                          3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
                          4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
                          5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:2c:7a:3f:f3:3d:8b:a9:27:c2:81:60:1b:24:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
        Validity
            Not Before: Aug 14 18:02:03 2026 GMT
            Not After : Aug 15 18:02:03 2026 GMT
        Subject: CN=37948001c76d90b15f847b11b059c180c54c3d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:e2:b8:33:d6:ea:42:e9:57:f8:52:7b:dd:
                    ff:de:93:0c:c0:de:94:4f:39:be:0f:5b:b5:ed:7a:
                    6a:30:03:6e:62:4d:8c:39:b1:cc:45:18:2c:ce:43:
                    f8:1a:43:74:5d:bc:45:8e:59:5c:9c:bb:db:b8:42:
                    95:6a:42:21:6a:28:0a:c8:32:5e:44:a3:e3:94:21:
                    35:57:85:16:16:1a:32:b6:f8:db:b1:4e:7a:f1:7f:
                    df:6d:d8:1f:87:f2:6d:ed:09:bc:63:38:f1:b6:7b:
                    e6:7e:f2:66:96:e2:6f:aa:4e:e5:be:9c:43:a5:5a:
                    53:74:52:4c:35:37:02:28:bf:39:05:43:18:73:ea:
                    b7:b8:b4:86:64:d7:1a:2b:74:52:48:45:5e:24:b5:
                    16:23:2d:0d:93:b3:80:1a:b8:1b:99:77:1c:72:90:
                    51:5a:ed:43:1a:0a:ef:a9:e8:98:09:93:b4:c2:d1:
                    23:7f:c2:70:f2:f8:b1:8e:21:33:fb:2e:0b:5b:b0:
                    3a:28:88:39:5b:99:f4:6e:69:45:34:91:30:60:57:
                    7d:84:fa:24:df:06:f9:ca:9c:20:67:5f:e3:e0:47:
                    3d:51:96:b2:e0:5e:f5:46:59:91:0f:eb:8a:c3:d8:
                    3d:9b:36:3a:1e:a6:06:5f:e5:1d:45:44:52:8b:ce:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:94:80:01:C7:6D:90:B1:5F:84:7B:11:B0:59:C1:80:C5:4C:3D:57
            X509v3 Authority Key Identifier:
                keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:78:7f:ed:a4:d8:91:27:a4:c6:20:b1:9d:3c:03:8e:d3:
         01:d2:8e:5f:37:f4:40:74:b2:2e:57:93:78:fc:cf:f2:28:16:
         56:1f:eb:cc:05:87:1b:0d:2b:3b:d9:0f:4a:a5:9b:4b:89:69:
         99:08:bf:37:b0:d2:5f:c2:7c:e5:7d:27:6c:86:fb:de:4a:30:
         44:97:2e:99:d4:4a:f6:d3:d4:fe:4f:1e:b6:45:a4:83:32:9c:
         cf:ca:26:db:fa:6a:96:02:59:c5:70:6f:b1:ac:2c:c8:45:fe:
         4b:8f:b9:7e:1e:f0:25:06:3d:78:58:cd:09:1c:5c:bf:df:19:
         d6:69:b6:aa:05:a8:d9:5c:90:d4:40:07:8c:f0:ed:9f:9d:15:
         aa:b1:5c:f5:1e:a7:41:d0:fc:2a:04:d3:3a:67:d3:ab:c0:b8:
         41:41:52:f3:83:2c:e5:aa:b7:bd:37:a7:a8:e0:28:78:f2:a6:
         80:e3:10:1f:70:fa:95:17:44:ef:5c:8e:8c:73:e2:40:53:f6:
         49:b0:93:59:c3:8c:0f:95:7a:1f:d5:51:d2:f4:b4:85:52:d1:
         d0:48:33:84:c8:19:02:0b:1e:7e:46:81:4f:1e:52:57:0d:ed:
         64:57:b6:21:57:ce:b6:e2:54:0d:80:e6:8e:a9:4e:c2:b3:16:
         da:de:d3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcCx6P/M9i6knwoFgGyRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjYwODE0MTgwMjAzWhcNMjYwODE1MTgwMjAzWjAzMTEwLwYDVQQD
EygzNzk0ODAwMWM3NmQ5MGIxNWY4NDdiMTFiMDU5YzE4MGM1NGMzZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3iuDPW6kLpV/hSe93/3pMMwN6U
Tzm+D1u17XpqMANuYk2MObHMRRgszkP4GkN0XbxFjllcnLvbuEKVakIhaigKyDJe
RKPjlCE1V4UWFhoytvjbsU568X/fbdgfh/Jt7Qm8YzjxtnvmfvJmluJvqk7lvpxD
pVpTdFJMNTcCKL85BUMYc+q3uLSGZNcaK3RSSEVeJLUWIy0Nk7OAGrgbmXcccpBR
Wu1DGgrvqeiYCZO0wtEjf8Jw8vixjiEz+y4LW7A6KIg5W5n0bmlFNJEwYFd9hPok
3wb5ypwgZ1/j4Ec9UZay4F71RlmRD+uKw9g9mzY6HqYGX+UdRURSi862MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeUgAHHbZCxX4R7EbBZwYDFTD1XMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgu94f+2k
2JEnpMYgsZ08A47TAdKOXzf0QHSyLleTePzP8igWVh/rzAWHGw0rO9kPSqWbS4lp
mQi/N7DSX8J85X0nbIb73kowRJcumdRK9tPU/k8etkWkgzKcz8om2/pqlgJZxXBv
sawsyEX+S4+5fh7wJQY9eFjNCRxcv98Z1mm2qgWo2VyQ1EAHjPDtn50VqrFc9R6n
QdD8KgTTOmfTq8C4QUFS84Ms5aq3vTenqOAoePKmgOMQH3D6lRdE71yOjHPiQFP2
SbCTWcOMD5V6H9VR0vS0hVLR0EgzhMgZAgsefkaBTx5SVw3tZFe2IVfOtuJUDYDm
jqlOwrMW2t7T2A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:53 2026 by rpki-client