Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          cCE1esTdKRkysyGRF7INYNZb9tNBqg21IlSyE/1WnY0=
Subject key identifier:   80:AC:3E:89:AE:EB:13:1B:99:91:76:E3:30:5B:8E:B5:6C:6E:73:92
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       01A001DD662C6DA65514D7481DA2FCAFBF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          071A
Signing time:             Fri 14 Aug 2026 20:01:21 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:21 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:21 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: QnGhMZTG1MIzyxkXqDe6aJoP+lLR19WtHJVJA0SOrTg=)
                          2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:66:2c:6d:a6:55:14:d7:48:1d:a2:fc:af:bf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Aug 14 20:01:21 2026 GMT
            Not After : Aug 15 20:01:21 2026 GMT
        Subject: CN=80ac3e89aeeb131b999176e3305b8eb56c6e7392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:27:1c:ba:f2:db:86:c0:74:6e:62:21:cd:
                    f1:bb:1d:1f:f3:13:44:46:fb:ea:ef:4e:b2:ae:ae:
                    a0:b4:9d:bc:a9:14:75:86:21:55:4a:ba:33:77:ed:
                    59:74:85:5b:e0:df:7c:1d:38:35:81:9c:d0:ef:5b:
                    79:1b:26:f4:8b:2b:8f:ef:5a:54:59:ab:c3:26:4b:
                    e2:44:27:d7:24:1c:f6:56:1f:12:55:02:04:1d:8b:
                    da:84:8b:25:75:83:25:bc:13:30:c0:a5:1e:bb:3c:
                    ae:b8:80:22:2d:36:f4:e4:17:6c:6a:37:58:b8:0f:
                    54:5e:65:11:68:2f:13:4f:60:41:30:24:1b:3d:8b:
                    41:0d:04:30:6a:d8:9c:95:c8:79:5f:e1:bb:3f:51:
                    0c:33:7c:bf:5c:ee:25:70:33:f1:c4:47:0f:6d:47:
                    3c:48:84:52:05:b9:ce:39:e9:11:ee:f7:63:40:40:
                    f7:55:e6:ce:b0:6c:f0:d3:6f:c5:4e:b1:54:96:3d:
                    f2:ea:09:2b:24:a5:00:01:0f:d6:a2:f1:bd:71:49:
                    2a:90:6a:26:85:f3:84:86:67:56:3d:64:70:c3:8d:
                    2e:48:22:e9:8e:b6:2e:c5:07:ac:ac:d7:8e:87:59:
                    df:81:eb:28:25:30:da:c3:92:4e:ef:4c:a6:1a:77:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AC:3E:89:AE:EB:13:1B:99:91:76:E3:30:5B:8E:B5:6C:6E:73:92
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:01:2f:22:90:3c:1e:73:f6:db:32:bf:45:61:2c:77:1c:06:
         f7:62:2a:54:73:d6:41:e4:73:cb:40:50:ff:9c:77:8a:aa:bc:
         8c:80:74:bd:d9:49:f6:f7:da:49:89:fe:78:be:30:2e:7f:01:
         f8:1d:1b:3a:fc:9f:e6:3e:3d:2c:f2:a9:39:8f:e2:a0:22:99:
         41:f1:d1:b1:cd:87:ac:26:2f:ce:ea:78:c3:28:d1:10:91:97:
         49:b1:06:9c:b0:12:b6:cb:36:2e:57:cc:2b:f7:49:6e:74:62:
         fb:8c:49:54:2a:27:ef:5a:35:66:f4:64:e3:f0:e0:13:87:c0:
         9c:fe:03:d2:45:b5:50:81:4e:a5:b1:ea:3d:e7:4f:40:c4:1d:
         8f:ae:22:15:61:93:5b:76:5e:49:cc:3b:a1:04:0e:94:dc:fc:
         02:8e:d3:72:b7:4e:4d:02:ae:f2:ba:2f:26:50:b4:03:da:3f:
         33:0c:60:e3:bf:50:12:f3:b2:26:00:c2:1a:88:54:a5:ce:58:
         01:47:c0:1a:70:b0:2f:25:2c:ab:3e:96:90:5e:e1:07:2e:f0:
         da:6a:77:0e:68:4c:c1:d3:10:48:df:c5:65:d1:48:88:bc:ed:
         d4:e3:b2:8b:76:0f:b2:ff:fe:43:59:38:93:c4:dc:69:bc:e8:
         7a:93:a8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3WYsbaZVFNdIHaL8r79OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODgyZjMzZjc0ODBkY2M3Yjg3NjM3YWVhNzYzNjgyODlk
NzVjMmQwHhcNMjYwODE0MjAwMTIxWhcNMjYwODE1MjAwMTIxWjAzMTEwLwYDVQQD
Eyg4MGFjM2U4OWFlZWIxMzFiOTk5MTc2ZTMzMDViOGViNTZjNmU3MzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhEnHLry24bAdG5iIc3xux0f8xNE
Rvvq706yrq6gtJ28qRR1hiFVSrozd+1ZdIVb4N98HTg1gZzQ71t5Gyb0iyuP71pU
WavDJkviRCfXJBz2Vh8SVQIEHYvahIsldYMlvBMwwKUeuzyuuIAiLTb05BdsajdY
uA9UXmURaC8TT2BBMCQbPYtBDQQwaticlch5X+G7P1EMM3y/XO4lcDPxxEcPbUc8
SIRSBbnOOekR7vdjQED3VebOsGzw02/FTrFUlj3y6gkrJKUAAQ/WovG9cUkqkGom
hfOEhmdWPWRww40uSCLpjrYuxQesrNeOh1nfgesoJTDaw5JO70ymGne9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICsPomu6xMbmZF24zBbjrVsbnOSMB8GA1UdIwQY
MBaAFPWILzP3SA3Me4djeup2NoKJ11wtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjIt
YTk1MTA1ZjE2ZTY2LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjItYTk1MTA1ZjE2ZTY2
LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwEvIpA8
HnP22zK/RWEsdxwG92IqVHPWQeRzy0BQ/5x3iqq8jIB0vdlJ9vfaSYn+eL4wLn8B
+B0bOvyf5j49LPKpOY/ioCKZQfHRsc2HrCYvzup4wyjREJGXSbEGnLAStss2LlfM
K/dJbnRi+4xJVCon71o1ZvRk4/DgE4fAnP4D0kW1UIFOpbHqPedPQMQdj64iFWGT
W3ZeScw7oQQOlNz8Ao7TcrdOTQKu8rovJlC0A9o/Mwxg479QEvOyJgDCGohUpc5Y
AUfAGnCwLyUsqz6WkF7hBy7w2mp3DmhMwdMQSN/FZdFIiLzt1OOyi3YPsv/+Q1k4
k8TcabzoepOojg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:19 2026 by rpki-client