Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
File:                     tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft (raw, json)
Hash identifier:          GCe0X4XQ1rgJ5xtz3QhWtet4k1hBOhJrjnW4RNhFxdg=
Subject key identifier:   38:F7:75:9B:AC:5B:3A:45:C0:36:EC:6B:88:4D:6C:19:DA:01:93:D0
Authority key identifier: B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
Certificate issuer:       /CN=b4dfc03171ad3254380ae51443a3144551e34afa
Certificate serial:       01A026FC47005B6252B5700A6C2A94AB54F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
Manifest number:          01B6
Signing time:             Sat 22 Aug 2026 01:01:02 +0000
Manifest this update:     Sat 22 Aug 2026 01:01:02 +0000
Manifest next update:     Sun 23 Aug 2026 01:01:02 +0000
Files and hashes:         1: jEu7pwg2-E1mqN2DpjSiLFBgzdU.roa (hash: TORAgDcuiUrJI3uCzvwnsqjEqpo7+K175vdEdYU+bdc=)
                          2: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl (hash: qzjLsd+BjixU8Y5E+Thqu/eiPlgmY+38i2jodpOPTJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:fc:47:00:5b:62:52:b5:70:0a:6c:2a:94:ab:54:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4dfc03171ad3254380ae51443a3144551e34afa
        Validity
            Not Before: Aug 22 01:01:02 2026 GMT
            Not After : Aug 23 01:01:02 2026 GMT
        Subject: CN=38f7759bac5b3a45c036ec6b884d6c19da0193d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1c:95:8a:37:97:7f:64:19:72:84:f5:fc:5f:
                    25:14:51:30:c7:b3:74:dc:e0:9f:80:0b:c1:48:68:
                    d5:74:cd:7e:20:d2:5e:3a:e7:03:c7:b4:7d:60:8c:
                    4a:63:d6:e4:b4:1c:ec:1d:40:ee:b6:8f:de:76:fa:
                    b5:cc:3e:e8:c5:5c:c8:7f:40:95:05:27:aa:87:2c:
                    36:87:86:ee:fc:f7:c9:72:57:89:e9:af:78:b8:ab:
                    37:58:e7:65:28:da:88:d3:e7:01:27:bc:5d:5f:63:
                    9f:33:6b:ec:5b:3b:53:a7:d8:e0:ef:ba:f2:66:b7:
                    4f:d1:cc:85:5d:d1:88:7d:2f:4e:1c:2f:8a:23:ba:
                    1e:d4:da:6a:bc:05:b4:80:ef:21:a9:67:9f:1f:80:
                    82:b0:08:91:b2:e4:ca:dd:d6:b0:82:dc:ac:30:48:
                    6a:1c:33:22:05:81:39:15:9f:cd:15:ef:ba:ce:e0:
                    fc:3d:7c:5f:0b:90:f3:30:fb:52:76:9a:03:db:dd:
                    5a:f7:ab:70:df:16:2c:e2:5f:df:bd:49:96:ac:9c:
                    0a:8c:86:c2:0e:0c:b0:96:3c:83:9b:c7:af:47:bd:
                    a4:01:f1:31:e6:05:af:dd:a4:10:f3:9f:5c:0e:ab:
                    dd:38:dd:4f:54:18:03:c4:18:7f:8a:5d:a1:be:a3:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:75:9B:AC:5B:3A:45:C0:36:EC:6B:88:4D:6C:19:DA:01:93:D0
            X509v3 Authority Key Identifier:
                keyid:B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:09:22:2c:f7:e6:54:31:0d:57:78:98:1f:bc:cc:f4:d7:f5:
         84:06:25:41:c2:bc:6c:cd:fa:d5:cc:5f:71:61:ec:86:b5:74:
         95:40:7c:bb:fe:57:27:fa:6c:69:fa:7e:2c:82:26:67:f6:71:
         53:80:5e:c9:09:7b:ea:af:8d:b6:65:04:04:99:a8:66:80:8e:
         34:3d:3a:dc:c5:8d:d0:8a:5c:72:24:99:c9:5e:d6:aa:80:e4:
         86:16:67:c3:3c:f1:62:a2:4a:89:31:8a:ea:cb:05:dd:b4:84:
         7e:2b:98:c8:ef:4a:b6:8a:7d:bf:4f:f8:51:bb:5b:66:27:91:
         bc:e2:22:28:1d:47:1c:3d:b0:e6:a2:3d:c4:e8:12:fc:18:20:
         8c:cd:b5:08:fa:a9:08:3b:4f:76:02:0e:da:3c:a8:21:82:02:
         90:8c:69:b7:af:2f:05:cf:0d:a3:04:06:fb:5f:81:ae:36:72:
         c6:49:b5:06:e4:64:54:6d:3d:62:f6:ec:41:cb:cc:28:b5:6e:
         1c:76:3b:a4:b0:05:29:f4:cf:4e:1a:d0:7a:7b:de:3e:67:4f:
         d5:65:5e:ca:37:e9:4e:94:75:7a:bb:72:2e:74:33:0c:f6:80:
         0d:0e:b4:36:73:ca:30:5e:d1:bc:f1:eb:6b:cd:06:0c:08:87:
         00:14:e7:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAm/EcAW2JStXAKbCqUq1T0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGZjMDMxNzFhZDMyNTQzODBhZTUxNDQzYTMxNDQ1NTFl
MzRhZmEwHhcNMjYwODIyMDEwMTAyWhcNMjYwODIzMDEwMTAyWjAzMTEwLwYDVQQD
EygzOGY3NzU5YmFjNWIzYTQ1YzAzNmVjNmI4ODRkNmMxOWRhMDE5M2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xyVijeXf2QZcoT1/F8lFFEwx7N0
3OCfgAvBSGjVdM1+INJeOucDx7R9YIxKY9bktBzsHUDuto/edvq1zD7oxVzIf0CV
BSeqhyw2h4bu/PfJcleJ6a94uKs3WOdlKNqI0+cBJ7xdX2OfM2vsWztTp9jg77ry
ZrdP0cyFXdGIfS9OHC+KI7oe1NpqvAW0gO8hqWefH4CCsAiRsuTK3dawgtysMEhq
HDMiBYE5FZ/NFe+6zuD8PXxfC5DzMPtSdpoD291a96tw3xYs4l/fvUmWrJwKjIbC
DgywljyDm8evR72kAfEx5gWv3aQQ859cDqvdON1PVBgDxBh/il2hvqPriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj3dZusWzpFwDbsa4hNbBnaAZPQMB8GA1UdIwQY
MBaAFLTfwDFxrTJUOArlFEOjFEVR40r6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5fQU1YR3RNbFE0Q3VVVVE2TVVSVkhqU3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mZTkwMmEtMDIzZC00M2I1LThiMTQt
M2Y2NzBhMDcxNGQ5LzEvdE5fQU1YR3RNbFE0Q3VVVVE2TVVSVkhqU3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mZTkwMmEtMDIzZC00M2I1LThiMTQtM2Y2NzBhMDcxNGQ5
LzEvdE5fQU1YR3RNbFE0Q3VVVVE2TVVSVkhqU3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAkiLPfm
VDENV3iYH7zM9Nf1hAYlQcK8bM361cxfcWHshrV0lUB8u/5XJ/psafp+LIImZ/Zx
U4BeyQl76q+NtmUEBJmoZoCOND063MWN0IpcciSZyV7WqoDkhhZnwzzxYqJKiTGK
6ssF3bSEfiuYyO9Ktop9v0/4UbtbZieRvOIiKB1HHD2w5qI9xOgS/BggjM21CPqp
CDtPdgIO2jyoIYICkIxpt68vBc8NowQG+1+BrjZyxkm1BuRkVG09YvbsQcvMKLVu
HHY7pLAFKfTPThrQenvePmdP1WVeyjfpTpR1ertyLnQzDPaADQ60NnPKMF7RvPHr
a80GDAiHABTnAw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:11:49 2026 by rpki-client