Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          MmOLuKgAmxy5d48AUBcLuYkcIO3YoMzCcU7Eh00cKLU=
Subject key identifier:   A7:EC:63:AD:2F:E4:82:9E:B3:1D:63:34:4C:3A:E5:29:60:EE:38:79
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       01A02130F8EE45E4A43D21E23953C897C872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          1A16
Signing time:             Thu 20 Aug 2026 22:00:52 +0000
Manifest this update:     Thu 20 Aug 2026 22:00:52 +0000
Manifest next update:     Fri 21 Aug 2026 22:00:52 +0000
Files and hashes:         1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=)
                          2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: Z0cM/4zuwjgqlY0+99lItN2GKAXFA5xJTN30ZKf8if8=)
                          4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=)
                          5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:21:30:f8:ee:45:e4:a4:3d:21:e2:39:53:c8:97:c8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Aug 20 22:00:52 2026 GMT
            Not After : Aug 21 22:00:52 2026 GMT
        Subject: CN=a7ec63ad2fe4829eb31d63344c3ae52960ee3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:3b:3c:b6:6f:e7:1b:74:79:83:54:06:57:
                    68:e4:8a:ec:a8:62:ab:d9:df:ee:ef:67:21:71:ea:
                    02:84:97:84:99:89:57:40:c3:db:06:1b:32:2d:1a:
                    66:fb:c5:ed:30:e8:a9:61:17:72:f2:c2:fb:34:4a:
                    b4:5f:74:b7:18:a1:3d:95:df:0f:11:7f:94:a7:fc:
                    92:bb:f1:33:72:84:b8:94:ae:5e:94:a5:a3:6d:72:
                    00:77:d5:f3:00:f6:b4:21:4b:9c:52:a6:71:78:80:
                    f2:5c:83:17:da:c3:eb:a9:f9:8e:ce:89:b7:fb:fc:
                    49:29:02:6d:3e:b1:39:db:4e:87:2b:b2:21:ee:fd:
                    ce:89:93:3b:a1:9e:af:16:7e:74:31:8e:50:b8:9f:
                    7e:16:99:7a:83:28:e1:9e:2e:b7:a9:0b:32:10:c4:
                    dd:95:38:c2:e3:35:25:39:c9:36:06:b9:38:4d:44:
                    b9:04:de:e2:f4:48:41:34:95:1b:2b:6d:46:80:13:
                    fe:8c:70:3e:34:48:84:7f:b3:ea:0e:cc:09:4d:64:
                    b7:15:59:7b:0b:dc:94:ed:61:0f:76:32:48:f6:48:
                    5b:4b:c2:1a:92:86:5f:2e:43:9f:f9:19:ad:fe:65:
                    bf:b8:83:71:80:ec:e5:f4:b0:7c:ad:c3:b8:3c:2f:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EC:63:AD:2F:E4:82:9E:B3:1D:63:34:4C:3A:E5:29:60:EE:38:79
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:30:4f:e1:94:fd:41:3e:a4:7c:8e:8c:e6:45:05:86:a5:
         49:97:51:f8:62:b0:81:44:5c:fe:fb:82:e4:12:c6:9d:08:f0:
         de:9a:cd:35:42:b3:3c:db:0e:c5:ae:8a:dc:64:60:5c:32:94:
         94:f5:7a:78:ae:86:12:e8:cd:c2:e5:10:2f:9d:aa:fd:6e:f4:
         73:83:dc:2a:4f:f4:37:5f:11:a4:a3:5e:36:f8:44:ac:c1:2a:
         eb:af:79:5a:e2:b0:11:64:32:c8:44:dc:da:0a:57:8b:97:d5:
         45:66:d1:ba:4d:ad:30:82:bf:40:f4:cc:43:99:48:06:e3:45:
         ca:8d:f5:d1:08:0a:20:80:99:bd:ec:ad:9b:3a:9e:17:7e:00:
         89:60:72:90:91:96:5b:dc:8b:d7:4a:83:40:4e:52:7c:c4:bb:
         53:22:54:ac:48:73:6e:b8:d9:e6:52:a5:f7:5f:64:d0:67:a8:
         64:b5:93:33:66:53:23:f0:5f:92:e6:5a:fa:5a:32:04:ef:0a:
         a5:1e:21:2f:38:c2:ee:16:f5:c5:1e:b9:51:d8:62:84:46:98:
         65:bd:85:e3:94:ad:31:4e:1b:53:15:78:7e:69:bc:77:8d:1f:
         3c:24:02:30:a5:3e:c3:5a:cb:22:1f:60:92:6a:db:64:36:75:
         83:64:31:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAhMPjuReSkPSHiOVPIl8hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj
ZWU0ZDgwHhcNMjYwODIwMjIwMDUyWhcNMjYwODIxMjIwMDUyWjAzMTEwLwYDVQQD
EyhhN2VjNjNhZDJmZTQ4MjllYjMxZDYzMzQ0YzNhZTUyOTYwZWUzODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SA7PLZv5xt0eYNUBldo5IrsqGKr
2d/u72chceoChJeEmYlXQMPbBhsyLRpm+8XtMOipYRdy8sL7NEq0X3S3GKE9ld8P
EX+Up/ySu/EzcoS4lK5elKWjbXIAd9XzAPa0IUucUqZxeIDyXIMX2sPrqfmOzom3
+/xJKQJtPrE5206HK7Ih7v3OiZM7oZ6vFn50MY5QuJ9+Fpl6gyjhni63qQsyEMTd
lTjC4zUlOck2Brk4TUS5BN7i9EhBNJUbK21GgBP+jHA+NEiEf7PqDswJTWS3FVl7
C9yU7WEPdjJI9khbS8IakoZfLkOf+Rmt/mW/uINxgOzl9LB8rcO4PC9XmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfsY60v5IKesx1jNEw65Slg7jh5MB8GA1UdIwQY
MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt
ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5
LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW8wT+GU
/UE+pHyOjOZFBYalSZdR+GKwgURc/vuC5BLGnQjw3prNNUKzPNsOxa6K3GRgXDKU
lPV6eK6GEujNwuUQL52q/W70c4PcKk/0N18RpKNeNvhErMEq6695WuKwEWQyyETc
2gpXi5fVRWbRuk2tMIK/QPTMQ5lIBuNFyo310QgKIICZveytmzqeF34AiWBykJGW
W9yL10qDQE5SfMS7UyJUrEhzbrjZ5lKl919k0GeoZLWTM2ZTI/BfkuZa+loyBO8K
pR4hLzjC7hb1xR65UdhihEaYZb2F45StMU4bUxV4fmm8d40fPCQCMKU+w1rLIh9g
kmrbZDZ1g2Qx9A==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:19 2026 by rpki-client