Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          DlJpPvj39knqbhi+4PL1HMxqlSHoMptIUxqdOg9UrwI=
Subject key identifier:   91:8C:60:85:F3:CD:05:70:52:58:7C:51:2D:80:38:12:D8:08:F0:57
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019FFAFED92401DCC2F2BCEBEE59F151D436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1A05
Signing time:             Thu 13 Aug 2026 12:00:33 +0000
Manifest this update:     Thu 13 Aug 2026 12:00:33 +0000
Manifest next update:     Fri 14 Aug 2026 12:00:33 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: IG3mguxvg+6FuswG5uIWrAMJ4hlpcKFBATLV0ODxra0=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:fe:d9:24:01:dc:c2:f2:bc:eb:ee:59:f1:51:d4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Aug 13 12:00:33 2026 GMT
            Not After : Aug 14 12:00:33 2026 GMT
        Subject: CN=918c6085f3cd057052587c512d803812d808f057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:ff:f3:48:16:ba:db:bf:9c:72:b4:5d:18:
                    2b:b7:35:68:0c:45:3e:d8:4f:27:c5:8d:21:de:df:
                    53:4f:aa:4f:77:18:ba:c0:60:e1:eb:ad:a0:83:1f:
                    33:9e:b7:9d:03:a1:f3:80:40:3a:e2:ef:e5:6d:e9:
                    0a:37:e8:f9:e0:4a:52:24:8a:bc:72:bc:4e:87:ae:
                    ff:52:fc:52:04:dd:27:25:48:89:64:0e:a9:ff:a3:
                    fd:84:a2:d3:5c:66:9a:81:c1:a0:3a:bf:3d:de:17:
                    12:7f:35:bd:4e:6d:42:03:fb:d5:1f:22:7f:3d:04:
                    71:8f:c4:ef:4c:7d:e0:6e:31:f5:c2:0f:64:d7:56:
                    54:ca:20:f7:90:29:fe:92:c0:ed:70:21:22:84:3b:
                    ba:70:1d:9e:7f:7e:0d:f7:88:ab:8c:e9:b0:01:e8:
                    15:5b:da:99:aa:05:1f:03:0b:b0:fc:ea:5a:7e:0f:
                    b9:3e:8a:5d:61:13:61:ae:bf:78:7e:9a:b0:df:64:
                    f4:3e:c1:4a:f2:8c:77:d2:9f:8b:ee:f4:d4:4b:ec:
                    ae:70:27:3e:ce:b8:0b:87:45:27:5b:6b:fe:6e:38:
                    25:af:81:c1:96:63:2a:7c:00:8c:c1:0c:af:0c:fc:
                    6a:56:0e:56:a2:43:a3:88:a6:db:5a:4f:d6:aa:ea:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8C:60:85:F3:CD:05:70:52:58:7C:51:2D:80:38:12:D8:08:F0:57
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:c5:24:76:07:85:e0:8c:e4:c9:10:e9:0b:8c:71:2b:15:
         44:95:ea:80:dc:02:55:fe:52:64:b1:29:10:8b:b9:92:96:d4:
         8b:a4:1d:48:a5:56:53:6e:91:f3:25:1e:85:78:c1:82:67:5f:
         c9:74:4f:9e:9d:e4:4c:43:61:9a:d5:47:50:21:62:34:5e:5b:
         ee:25:22:21:87:c2:a5:6b:75:35:28:03:cc:16:79:3b:ac:cb:
         c2:7a:71:31:cb:1f:ca:8c:9a:2c:fb:84:14:02:4f:c7:f8:aa:
         5e:d8:0f:f0:28:8d:22:b0:a5:85:8c:92:80:82:23:8b:c7:2c:
         d1:36:41:21:eb:5f:a8:5f:5f:d1:c8:07:b0:f2:df:99:e5:d9:
         94:de:92:09:0b:60:3d:c4:c6:06:59:42:fd:be:5a:e0:89:e1:
         42:83:93:4d:18:51:1d:17:06:66:6d:81:52:fe:1a:fa:86:c1:
         5c:29:ab:dd:6b:d9:f6:1e:ca:b2:94:d1:a1:23:06:fb:f4:88:
         94:cb:cb:ae:e2:e2:fa:42:da:1d:d4:31:af:63:97:b1:21:7a:
         3d:fa:51:42:a3:4d:5a:4b:b3:4a:b6:aa:0f:0c:1c:ea:33:94:
         8e:41:ae:38:1d:99:df:bb:8c:54:b9:d3:b5:80:cc:67:9f:a0:
         6c:96:95:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6/tkkAdzC8rzr7lnxUdQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj
NTljNjkwHhcNMjYwODEzMTIwMDMzWhcNMjYwODE0MTIwMDMzWjAzMTEwLwYDVQQD
Eyg5MThjNjA4NWYzY2QwNTcwNTI1ODdjNTEyZDgwMzgxMmQ4MDhmMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r7/80gWutu/nHK0XRgrtzVoDEU+
2E8nxY0h3t9TT6pPdxi6wGDh662ggx8znredA6HzgEA64u/lbekKN+j54EpSJIq8
crxOh67/UvxSBN0nJUiJZA6p/6P9hKLTXGaagcGgOr893hcSfzW9Tm1CA/vVHyJ/
PQRxj8TvTH3gbjH1wg9k11ZUyiD3kCn+ksDtcCEihDu6cB2ef34N94irjOmwAegV
W9qZqgUfAwuw/Opafg+5PopdYRNhrr94fpqw32T0PsFK8ox30p+L7vTUS+yucCc+
zrgLh0UnW2v+bjglr4HBlmMqfACMwQyvDPxqVg5WokOjiKbbWk/Wqurs5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGMYIXzzQVwUlh8US2AOBLYCPBXMB8GA1UdIwQY
MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct
OTFjNzBmNjFhMDY3LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3
LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2XFJHYH
heCM5MkQ6QuMcSsVRJXqgNwCVf5SZLEpEIu5kpbUi6QdSKVWU26R8yUehXjBgmdf
yXRPnp3kTENhmtVHUCFiNF5b7iUiIYfCpWt1NSgDzBZ5O6zLwnpxMcsfyoyaLPuE
FAJPx/iqXtgP8CiNIrClhYySgIIji8cs0TZBIetfqF9f0cgHsPLfmeXZlN6SCQtg
PcTGBllC/b5a4InhQoOTTRhRHRcGZm2BUv4a+obBXCmr3WvZ9h7KspTRoSMG+/SI
lMvLruLi+kLaHdQxr2OXsSF6PfpRQqNNWkuzSraqDwwc6jOUjkGuOB2Z37uMVLnT
tYDMZ5+gbJaVsA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 15:53:26 2026 by rpki-client