Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File:                     DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier:          sDtliQpfFnjIlIOxvct2FB46W3m98LyliqVMdhRUHng=
Subject key identifier:   D5:CE:AD:7F:68:1B:3F:2C:8A:06:EC:47:3C:FC:A5:04:B7:1F:81:C6
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer:       /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial:       01A002140CCCD4B924A4D85451D744FA2785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number:          10E9
Signing time:             Fri 14 Aug 2026 21:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:03 +0000
Files and hashes:         1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: RAklMezM1TpWxS+tT354HyIyjQ7vXq6OnQ4fUt2M7yI=)
                          2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:0c:cc:d4:b9:24:a4:d8:54:51:d7:44:fa:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
        Validity
            Not Before: Aug 14 21:01:03 2026 GMT
            Not After : Aug 15 21:01:03 2026 GMT
        Subject: CN=d5cead7f681b3f2c8a06ec473cfca504b71f81c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f5:9a:eb:9f:25:6b:25:41:79:9f:91:08:07:
                    5d:ff:22:36:46:bb:30:85:6e:b7:87:27:40:d8:20:
                    67:ef:62:66:8a:6f:e7:7c:de:02:e1:2b:19:cd:e3:
                    22:e3:08:58:2d:d7:23:21:b9:1c:31:50:8a:23:81:
                    34:16:f4:17:39:8d:8f:03:04:6e:c1:69:95:5d:a8:
                    49:7d:63:fa:16:de:60:1f:76:f7:9c:5c:a8:18:22:
                    ce:c3:9e:51:04:dd:ce:71:67:bb:37:f1:64:f5:49:
                    79:cb:ee:02:f2:8a:57:0a:bd:05:d8:a1:ac:74:ac:
                    d3:1d:35:44:8f:de:b7:79:cc:f0:b8:37:32:7a:b1:
                    b1:0c:d5:97:1f:79:39:ac:b3:9c:fb:49:11:f9:d8:
                    93:05:64:36:59:a5:85:79:2a:5c:1f:50:b7:34:81:
                    d3:48:88:7d:18:17:5a:b1:34:20:16:39:64:54:d3:
                    f4:21:b6:89:47:8e:01:36:59:3d:af:ab:e7:99:ac:
                    0c:a8:03:1d:75:a8:aa:69:3f:36:a2:7f:73:8d:30:
                    01:a4:25:bf:b5:6e:45:7f:df:2e:c0:a4:e8:e7:6a:
                    08:9e:d0:cb:d0:63:82:ff:65:34:46:17:89:35:92:
                    70:65:26:0c:57:ab:c4:3b:21:3f:6e:47:58:84:fa:
                    3e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CE:AD:7F:68:1B:3F:2C:8A:06:EC:47:3C:FC:A5:04:B7:1F:81:C6
            X509v3 Authority Key Identifier:
                keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:78:85:ad:06:cb:33:d8:ca:39:d7:6f:be:68:50:1c:8f:
         22:24:66:09:1a:90:01:d1:02:1b:52:8d:4b:75:0d:c3:3e:5e:
         5a:e5:4a:22:1a:6c:af:2e:30:6c:b8:31:f4:6f:d1:9d:ed:54:
         73:15:c4:92:7f:16:2e:c1:b0:d9:46:85:a8:da:5f:0c:e3:3b:
         33:1b:3d:f1:e2:11:7c:6a:7f:af:ac:46:40:4e:84:85:14:ed:
         7c:af:76:da:4f:55:c2:8f:36:48:2f:bb:9c:c0:fe:85:13:c8:
         ad:94:81:a2:a2:3a:8a:06:f6:a6:b7:2b:33:db:e9:86:91:18:
         42:40:67:79:1a:87:2e:f1:90:71:b9:fe:2f:cc:68:ca:1d:93:
         4e:33:53:65:6a:56:7a:b0:12:5c:09:56:55:ac:f7:55:a9:62:
         aa:c3:86:95:8f:92:83:c6:90:76:78:29:d3:ae:94:78:32:de:
         90:4f:53:4b:34:08:70:a3:6e:b0:77:69:80:f4:1d:93:7a:65:
         43:c4:87:d8:fd:58:2e:16:fd:97:4b:60:53:66:82:0a:14:c6:
         c5:c0:05:c4:99:8b:9e:cf:10:0b:28:7a:b9:b5:75:04:e8:c4:
         aa:72:b7:ff:4d:e0:39:34:75:08:7c:66:5b:86:a1:5c:02:64:
         62:09:6f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFAzM1LkkpNhUUddE+ieFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy
OTk0OGUwHhcNMjYwODE0MjEwMTAzWhcNMjYwODE1MjEwMTAzWjAzMTEwLwYDVQQD
EyhkNWNlYWQ3ZjY4MWIzZjJjOGEwNmVjNDczY2ZjYTUwNGI3MWY4MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PWa658layVBeZ+RCAdd/yI2Rrsw
hW63hydA2CBn72Jmim/nfN4C4SsZzeMi4whYLdcjIbkcMVCKI4E0FvQXOY2PAwRu
wWmVXahJfWP6Ft5gH3b3nFyoGCLOw55RBN3OcWe7N/Fk9Ul5y+4C8opXCr0F2KGs
dKzTHTVEj963eczwuDcyerGxDNWXH3k5rLOc+0kR+diTBWQ2WaWFeSpcH1C3NIHT
SIh9GBdasTQgFjlkVNP0IbaJR44BNlk9r6vnmawMqAMddaiqaT82on9zjTABpCW/
tW5Ff98uwKTo52oIntDL0GOC/2U0RheJNZJwZSYMV6vEOyE/bkdYhPo+WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXOrX9oGz8sigbsRzz8pQS3H4HGMB8GA1UdIwQY
MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt
YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3
LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBl4ha0G
yzPYyjnXb75oUByPIiRmCRqQAdECG1KNS3UNwz5eWuVKIhpsry4wbLgx9G/Rne1U
cxXEkn8WLsGw2UaFqNpfDOM7Mxs98eIRfGp/r6xGQE6EhRTtfK922k9Vwo82SC+7
nMD+hRPIrZSBoqI6igb2prcrM9vphpEYQkBneRqHLvGQcbn+L8xoyh2TTjNTZWpW
erASXAlWVaz3ValiqsOGlY+Sg8aQdngp066UeDLekE9TSzQIcKNusHdpgPQdk3pl
Q8SH2P1YLhb9l0tgU2aCChTGxcAFxJmLns8QCyh6ubV1BOjEqnK3/03gOTR1CHxm
W4ahXAJkYglvMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:41 2026 by rpki-client