Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
File:                     ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft (raw, json)
Hash identifier:          3L7M+bW9x/3gGtnhPoK0ZEsYmUk2FlGdGX2gvQro3L8=
Subject key identifier:   75:04:BA:E7:F1:33:4D:0E:EA:F2:A9:50:E2:2F:D1:33:17:D4:DD:B0
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Certificate issuer:       /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial:       01A0205527319EC4D08D67A9BBB9FC691D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
Manifest number:          8A
Signing time:             Thu 20 Aug 2026 18:00:46 +0000
Manifest this update:     Thu 20 Aug 2026 18:00:46 +0000
Manifest next update:     Fri 21 Aug 2026 18:00:46 +0000
Files and hashes:         1: 1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa (hash: 9d+iz6B4Z4xX5mHQ4/EpfJi09w1cOsmeX27jGLacUQg=)
                          2: ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl (hash: 53KfoSWcEtZbuOw4J0KL+8n1+3FkkrJrdDM+bop3vds=)
                          3: JgyHfDa-F26mJBen_nZoWt6VcN0.roa (hash: ka95gjqbnp5vTxYoWFPFDU7HoiwfqxAnl9QDgNI170A=)
                          4: KaDCW-vC8OxSYgmvnlwc2RGGcso.roa (hash: Gw4saiquCFr7/vJ07qJKsW4oGWHTcwpcNkMJOpqv4XE=)
                          5: L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa (hash: 7Al0u5Q3YV7dlLeAcQ+RUgnxhwI9m0WFEsG/SLzqm0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:55:27:31:9e:c4:d0:8d:67:a9:bb:b9:fc:69:1d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
        Validity
            Not Before: Aug 20 18:00:46 2026 GMT
            Not After : Aug 21 18:00:46 2026 GMT
        Subject: CN=7504bae7f1334d0eeaf2a950e22fd13317d4ddb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:99:38:b8:a9:8a:a2:21:1f:64:94:8a:91:
                    4b:fa:b5:03:da:42:98:7b:20:b2:bb:78:50:23:22:
                    2e:dd:73:26:d6:bb:50:ea:f5:f1:86:3f:99:da:4f:
                    11:3d:90:de:02:be:2b:c9:2b:75:c2:8b:08:71:36:
                    34:5d:07:85:63:f7:9b:a5:5e:00:57:a0:a5:87:b1:
                    1a:03:41:b4:c0:9e:85:84:79:13:0d:5d:68:39:22:
                    46:aa:69:22:16:81:83:64:ef:a0:4a:3e:3b:80:4f:
                    9e:13:ef:84:3c:94:27:bb:62:a0:3a:64:74:a6:b1:
                    18:27:cb:cb:2b:d0:d9:d4:f0:41:6b:6d:95:50:6d:
                    6a:13:78:51:d8:18:44:4d:bb:3e:1c:96:2a:50:b7:
                    22:8a:1b:ee:19:a7:51:b0:44:41:c1:46:9b:ba:8b:
                    cf:65:14:ba:cb:71:14:f8:6f:cc:a1:41:0c:2c:d8:
                    bc:5d:49:43:2c:a8:4a:6c:5a:37:25:db:e7:72:52:
                    9d:9b:36:07:33:4e:ff:d7:9c:65:c9:4d:25:54:4c:
                    15:a4:bf:13:89:51:7a:f8:11:cf:60:63:6c:fa:22:
                    53:1d:f4:a4:e7:24:4c:bb:f1:b4:53:e3:ad:da:b9:
                    44:71:d6:9c:59:34:5e:49:ae:de:d4:99:63:85:75:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:04:BA:E7:F1:33:4D:0E:EA:F2:A9:50:E2:2F:D1:33:17:D4:DD:B0
            X509v3 Authority Key Identifier:
                keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c7:9b:2f:4f:08:69:22:8c:7f:70:8a:33:ee:be:7a:93:b4:
         d6:57:0e:34:59:a3:f6:92:3b:ee:9c:79:04:44:53:7c:93:09:
         5d:29:ac:d7:1d:b5:d4:d1:2f:17:05:c6:e2:9b:ec:a2:d3:a0:
         26:00:79:cf:4b:cf:eb:c2:87:65:86:72:1e:5d:af:c6:95:1c:
         db:2c:28:4b:ba:9d:c2:af:01:cd:8f:66:46:57:c6:5e:6e:44:
         e5:eb:ed:14:d0:3f:fa:18:23:1c:91:41:43:05:e6:da:e7:e8:
         a3:67:98:77:cb:12:26:96:e7:d4:7f:2c:3c:ca:64:22:c6:8c:
         a9:29:6b:72:ac:80:3b:b9:97:35:9a:4a:73:09:d8:6f:78:80:
         d0:9b:40:78:5b:82:1a:7c:30:2b:6f:a1:f5:46:fe:ff:58:ce:
         b5:98:49:9d:b8:cc:11:53:09:ce:5e:bb:b5:16:f4:fc:90:89:
         07:7b:2d:f2:65:8c:60:06:ec:f8:8e:85:21:7b:a3:a5:94:86:
         2d:18:20:ac:83:d7:15:1e:b4:47:30:43:61:10:79:f1:56:6d:
         96:89:f2:21:30:80:96:9e:9b:a4:e4:37:b5:d3:6d:6b:f9:84:
         dd:13:e3:c4:4d:27:72:54:3d:ba:d0:32:bd:ca:52:5f:8a:8e:
         20:31:6f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVScxnsTQjWepu7n8aR1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWNjZDAwOWIyYTZlYWJjNTQxODU3NGI2MzdjNmM0MDIy
MTljNjgwHhcNMjYwODIwMTgwMDQ2WhcNMjYwODIxMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg3NTA0YmFlN2YxMzM0ZDBlZWFmMmE5NTBlMjJmZDEzMzE3ZDRkZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTWZOLipiqIhH2SUipFL+rUD2kKY
eyCyu3hQIyIu3XMm1rtQ6vXxhj+Z2k8RPZDeAr4rySt1wosIcTY0XQeFY/ebpV4A
V6Clh7EaA0G0wJ6FhHkTDV1oOSJGqmkiFoGDZO+gSj47gE+eE++EPJQnu2KgOmR0
prEYJ8vLK9DZ1PBBa22VUG1qE3hR2BhETbs+HJYqULciihvuGadRsERBwUabuovP
ZRS6y3EU+G/MoUEMLNi8XUlDLKhKbFo3JdvnclKdmzYHM07/15xlyU0lVEwVpL8T
iVF6+BHPYGNs+iJTHfSk5yRMu/G0U+Ot2rlEcdacWTReSa7e1JljhXVwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUEuufxM00O6vKpUOIv0TMX1N2wMB8GA1UdIwQY
MBaAFAEczQCbKm6rxUGFdLY3xsQCIZxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsebL08I
aSKMf3CKM+6+epO01lcONFmj9pI77px5BERTfJMJXSms1x211NEvFwXG4pvsotOg
JgB5z0vP68KHZYZyHl2vxpUc2ywoS7qdwq8BzY9mRlfGXm5E5evtFNA/+hgjHJFB
QwXm2ufoo2eYd8sSJpbn1H8sPMpkIsaMqSlrcqyAO7mXNZpKcwnYb3iA0JtAeFuC
GnwwK2+h9Ub+/1jOtZhJnbjMEVMJzl67tRb0/JCJB3st8mWMYAbs+I6FIXujpZSG
LRggrIPXFR60RzBDYRB58VZtlonyITCAlp6bpOQ3tdNta/mE3RPjxE0nclQ9utAy
vcpSX4qOIDFvmg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:46 2026 by rpki-client