Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File:                     mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier:          e7D/qxD8JHwj/ePKvxHnJWV8jXmhl587rc07eyCAJwE=
Subject key identifier:   AB:0E:CF:66:04:58:9A:78:32:60:4C:3D:A0:09:07:42:7F:E9:21:EC
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       01A003268195FBDDCDB2FDC01E373F8DC5F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number:          09F8
Signing time:             Sat 15 Aug 2026 02:00:50 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:50 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:50 +0000
Files and hashes:         1: BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (hash: DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=)
                          2: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (hash: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=)
                          3: f-WzYrTcVspbvV27XUH8n69DSig.roa (hash: dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=)
                          4: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: cdo/Nc9dFqy5MOW7tZk4riL+ruXRyKBPe05NkQ2KDYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:81:95:fb:dd:cd:b2:fd:c0:1e:37:3f:8d:c5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: Aug 15 02:00:50 2026 GMT
            Not After : Aug 16 02:00:50 2026 GMT
        Subject: CN=ab0ecf6604589a7832604c3da00907427fe921ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:e8:ac:a2:c8:e7:f9:1b:a5:52:55:aa:ba:
                    d3:c7:3d:bf:0f:c6:3e:10:3b:68:a8:ee:36:0c:dc:
                    14:80:be:18:97:e1:70:f1:f1:a8:1b:56:9b:f7:97:
                    89:8d:35:9a:95:69:69:a7:a7:68:ce:c9:a8:00:29:
                    12:f5:b0:25:61:2d:44:e7:2a:dd:88:53:2c:e8:ca:
                    e9:6a:78:4a:d7:0b:ba:da:9d:84:f6:4b:d6:6c:05:
                    6f:a1:08:ed:10:cb:3e:1a:4b:a5:06:16:f2:b9:7b:
                    64:72:b8:8c:9e:49:ba:72:c0:01:79:87:d3:b2:f1:
                    a0:4e:b4:a6:5f:88:a4:84:9a:55:3c:99:90:cb:93:
                    75:29:83:52:2b:cf:3d:28:cd:0d:47:6d:c3:cb:8c:
                    3c:7e:aa:fc:98:07:9b:1f:b7:2b:76:0c:a5:c3:d3:
                    86:65:33:08:d2:29:ff:c3:17:0f:85:59:71:a3:00:
                    34:22:e1:7e:4a:15:42:97:61:da:b2:20:4b:9d:b3:
                    5b:80:2d:e6:c6:b4:64:bd:e8:22:75:e5:c0:f4:37:
                    9b:74:29:19:6d:aa:ea:62:07:47:e0:15:bb:72:15:
                    73:ef:1e:60:10:13:72:7e:9e:b0:a5:55:3b:87:97:
                    48:28:f5:1f:ca:24:c1:60:d0:9f:19:ca:1f:e7:43:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0E:CF:66:04:58:9A:78:32:60:4C:3D:A0:09:07:42:7F:E9:21:EC
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:75:96:de:9b:71:70:22:84:52:6d:fd:57:0e:67:90:c8:e7:
         5b:81:8e:22:d5:ea:de:72:f0:b6:2b:7a:bd:cc:65:c7:ec:43:
         4b:78:7e:e9:24:61:1e:48:86:93:02:08:5e:20:b7:a9:9a:29:
         c9:ad:fa:ba:7c:c4:66:0e:a9:97:73:1c:6d:27:94:47:8e:11:
         8f:76:82:fa:23:1d:e4:45:55:b5:22:f9:00:80:04:0e:18:d4:
         b5:98:2e:fb:cb:ed:68:d0:e6:84:85:5e:b8:08:3d:28:f3:3e:
         2e:8a:4d:15:6f:80:32:77:57:74:12:c3:55:96:54:41:56:93:
         51:14:43:cb:8b:6c:3a:50:8a:f7:4d:d0:7b:eb:a4:da:b2:b7:
         5a:45:84:1c:50:cb:ed:e7:ae:58:02:10:c9:15:fd:50:ab:54:
         b1:5c:19:7f:1a:15:39:c9:d5:b0:1d:00:d2:bf:99:30:90:04:
         8a:14:72:d0:1b:ad:e3:48:a7:5a:9a:3c:6c:ba:b5:bf:02:49:
         6d:ed:08:94:b7:e3:33:00:ee:3f:94:f3:f5:b6:bc:0a:69:ee:
         75:f0:eb:62:b2:81:95:9c:bd:6a:b5:a6:0a:6d:b6:ea:b7:ff:
         6b:00:19:b7:c3:70:ad:7f:2a:86:de:73:72:00:47:9b:d7:6d:
         7b:62:89:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJoGV+93Nsv3AHjc/jcX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4
MWE1ZjQwHhcNMjYwODE1MDIwMDUwWhcNMjYwODE2MDIwMDUwWjAzMTEwLwYDVQQD
EyhhYjBlY2Y2NjA0NTg5YTc4MzI2MDRjM2RhMDA5MDc0MjdmZTkyMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00rorKLI5/kbpVJVqrrTxz2/D8Y+
EDtoqO42DNwUgL4Yl+Fw8fGoG1ab95eJjTWalWlpp6dozsmoACkS9bAlYS1E5yrd
iFMs6MrpanhK1wu62p2E9kvWbAVvoQjtEMs+GkulBhbyuXtkcriMnkm6csABeYfT
svGgTrSmX4ikhJpVPJmQy5N1KYNSK889KM0NR23Dy4w8fqr8mAebH7crdgylw9OG
ZTMI0in/wxcPhVlxowA0IuF+ShVCl2HasiBLnbNbgC3mxrRkvegideXA9DebdCkZ
barqYgdH4BW7chVz7x5gEBNyfp6wpVU7h5dIKPUfyiTBYNCfGcof50NdIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsOz2YEWJp4MmBMPaAJB0J/6SHsMB8GA1UdIwQY
MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt
NmIxNmM3ODhhOTBmLzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm
LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHWW3ptx
cCKEUm39Vw5nkMjnW4GOItXq3nLwtit6vcxlx+xDS3h+6SRhHkiGkwIIXiC3qZop
ya36unzEZg6pl3McbSeUR44Rj3aC+iMd5EVVtSL5AIAEDhjUtZgu+8vtaNDmhIVe
uAg9KPM+LopNFW+AMndXdBLDVZZUQVaTURRDy4tsOlCK903Qe+uk2rK3WkWEHFDL
7eeuWAIQyRX9UKtUsVwZfxoVOcnVsB0A0r+ZMJAEihRy0But40inWpo8bLq1vwJJ
be0IlLfjMwDuP5Tz9ba8CmnudfDrYrKBlZy9arWmCm226rf/awAZt8NwrX8qht5z
cgBHm9dte2KJ2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:42:03 2026 by rpki-client