Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File:                     8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier:          sIuxx4vEdcjw4EV7YtQM1nsPuRQLh7YD2Fwkcm3Jy0k=
Subject key identifier:   AF:2A:CE:D0:22:A7:14:C2:53:3A:81:53:71:F5:14:6E:F8:64:BD:1D
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer:       /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial:       01A001019AEF73D5F2395F6787853BA8A15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 16:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:17 +0000
Files and hashes:         1: 5zhW36lGyfogiaElUfbWbhXt_NE.roa (hash: +j+wJnENL0rL/JlQ6DSpZDDPY7E8b83UH4Sgu3v056w=)
                          2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: VhWlKggTQPPs0RVVbDyfKrp4fL4rNyXjDS35xxUlAdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:9a:ef:73:d5:f2:39:5f:67:87:85:3b:a8:a1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
        Validity
            Not Before: Aug 14 16:01:17 2026 GMT
            Not After : Aug 15 16:01:17 2026 GMT
        Subject: CN=af2aced022a714c2533a815371f5146ef864bd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:1b:ba:c6:93:5c:95:6a:1a:13:6c:44:51:
                    5a:1e:7a:a3:17:ed:ba:3e:0b:ac:f1:97:bf:cd:18:
                    7e:98:3e:aa:88:e0:c7:55:22:ce:18:a7:c8:17:c4:
                    41:7a:24:1c:d0:8a:3f:ef:d1:79:4e:c9:30:a2:62:
                    ab:ef:de:65:21:bc:4b:4e:0d:34:4c:a0:e2:5d:93:
                    8b:1d:c8:7b:02:07:bf:72:30:a6:d2:9d:83:6f:95:
                    86:0c:53:ec:3a:32:e8:ab:8c:5b:da:22:93:20:ca:
                    dc:89:91:8a:97:a4:eb:71:cd:4f:d9:d0:be:df:ba:
                    d1:9e:4b:25:04:6f:35:cf:c2:82:cd:6d:14:7b:30:
                    93:22:93:55:e7:00:28:4f:71:64:75:58:4a:19:5b:
                    f8:ea:68:6a:a4:9e:d3:6a:68:89:97:02:1b:8a:90:
                    10:b6:88:71:ca:82:4a:27:02:99:32:bf:4c:38:d5:
                    00:41:fa:96:29:9e:f1:1c:a7:e5:e4:96:72:5b:c3:
                    59:18:94:82:94:b3:c9:02:6d:a7:b8:a3:6e:e0:f7:
                    2e:4a:15:06:c7:b0:79:41:af:36:a9:2d:5e:01:d7:
                    fc:f9:7f:10:77:a7:4b:04:df:b8:80:2c:f7:5b:42:
                    18:06:51:9d:69:3a:c2:5c:52:d1:ed:d4:18:5e:ed:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:CE:D0:22:A7:14:C2:53:3A:81:53:71:F5:14:6E:F8:64:BD:1D
            X509v3 Authority Key Identifier:
                keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:d0:75:b7:01:89:29:e2:c0:5d:cd:55:6b:89:6b:27:96:
         4e:13:f3:53:b2:15:59:5d:41:6f:a4:99:30:b7:46:f5:ad:8d:
         d7:8f:ad:23:dd:2a:83:bb:40:b9:8a:fd:3d:d4:a9:98:51:e9:
         d0:d4:21:54:12:bd:ea:34:01:5c:5f:62:09:5c:58:12:b2:e4:
         8e:10:29:fc:7d:f0:46:a0:b2:7a:40:55:6b:87:96:c2:6e:d0:
         46:d8:4e:3a:da:c1:4c:47:97:73:c8:f3:30:10:36:b5:f1:6d:
         54:56:75:fb:8e:ca:0f:ce:75:89:aa:0e:e4:ee:d0:7e:e6:ab:
         e3:b2:ba:92:7f:95:19:a8:72:7b:26:d4:42:a6:dc:2f:74:6a:
         70:9a:54:68:a8:99:06:97:6a:f4:8e:fa:cf:ee:3b:c4:f5:1b:
         4d:e5:9c:e8:c5:ee:99:57:66:e0:25:bc:20:b4:25:33:e7:49:
         7e:ef:9d:12:ee:28:a3:6d:81:70:bc:2e:dc:56:8f:59:75:5a:
         d7:56:7e:e3:81:f6:6f:c0:06:06:98:28:b0:71:86:19:ed:b7:
         f6:65:1f:2d:62:d9:da:e2:ea:5e:2e:3b:ee:7d:3b:a6:fb:e0:
         a0:bb:8f:e4:55:1e:b0:f5:17:ff:02:7a:68:1e:f6:16:8c:05:
         ee:df:8c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAZrvc9XyOV9nh4U7qKFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjA5MGM1ZjYyMzNjYmFlYWYzMTlkY2ZhZTY5MmE5NTZl
ZWExMDIwHhcNMjYwODE0MTYwMTE3WhcNMjYwODE1MTYwMTE3WjAzMTEwLwYDVQQD
EyhhZjJhY2VkMDIyYTcxNGMyNTMzYTgxNTM3MWY1MTQ2ZWY4NjRiZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbgbusaTXJVqGhNsRFFaHnqjF+26
Pgus8Ze/zRh+mD6qiODHVSLOGKfIF8RBeiQc0Io/79F5TskwomKr795lIbxLTg00
TKDiXZOLHch7Age/cjCm0p2Db5WGDFPsOjLoq4xb2iKTIMrciZGKl6Trcc1P2dC+
37rRnkslBG81z8KCzW0UezCTIpNV5wAoT3FkdVhKGVv46mhqpJ7TamiJlwIbipAQ
tohxyoJKJwKZMr9MONUAQfqWKZ7xHKfl5JZyW8NZGJSClLPJAm2nuKNu4PcuShUG
x7B5Qa82qS1eAdf8+X8Qd6dLBN+4gCz3W0IYBlGdaTrCXFLR7dQYXu3osQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8qztAipxTCUzqBU3H1FG74ZL0dMB8GA1UdIwQY
MBaAFPFgkMX2Izy66vMZ3PrmkqlW7qECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQt
N2M4OGM0ZTA0ZjkxLzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQtN2M4OGM0ZTA0Zjkx
LzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMPQdbcB
iSniwF3NVWuJayeWThPzU7IVWV1Bb6SZMLdG9a2N14+tI90qg7tAuYr9PdSpmFHp
0NQhVBK96jQBXF9iCVxYErLkjhAp/H3wRqCyekBVa4eWwm7QRthOOtrBTEeXc8jz
MBA2tfFtVFZ1+47KD851iaoO5O7Qfuar47K6kn+VGahyeybUQqbcL3RqcJpUaKiZ
Bpdq9I76z+47xPUbTeWc6MXumVdm4CW8ILQlM+dJfu+dEu4oo22BcLwu3FaPWXVa
11Z+44H2b8AGBpgosHGGGe239mUfLWLZ2uLqXi477n07pvvgoLuP5FUesPUX/wJ6
aB72FowF7t+MgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:25 2026 by rpki-client