Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          pLJ7Keszsd/Lzz+NLVmra6IjrFTJM2ICetY3IHHbZ0Y=
Subject key identifier:   E0:B5:B5:57:37:13:6A:30:75:22:83:4F:92:47:72:1F:C6:00:82:A8
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       019FF86C9417109DE634C0F77CD4774927C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          1241
Signing time:             Thu 13 Aug 2026 00:01:33 +0000
Manifest this update:     Thu 13 Aug 2026 00:01:33 +0000
Manifest next update:     Fri 14 Aug 2026 00:01:33 +0000
Files and hashes:         1: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
                          2: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
                          3: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
                          4: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
                          5: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: tOBynfYIjjEYuyShwE1q+nKUQmOFtMlkKzr8/Iga6Rs=)
                          6: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
                          7: oGf_1Gi6p9BnTcB2h845ELw18yE.roa (hash: vZEx0hhPga5gHLIccOXjBsLg2I31ryX+jChcgCG39FM=)
                          8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:6c:94:17:10:9d:e6:34:c0:f7:7c:d4:77:49:27:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Aug 13 00:01:33 2026 GMT
            Not After : Aug 14 00:01:33 2026 GMT
        Subject: CN=e0b5b55737136a307522834f9247721fc60082a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:29:8a:a7:f6:5f:05:67:b5:0e:dc:11:d5:
                    cc:c0:b7:a1:11:a7:f6:e7:42:82:0b:be:17:e9:4f:
                    0d:f7:8f:0c:7a:d0:1e:a2:3e:84:35:e0:e0:bd:c2:
                    2d:38:f1:0e:60:5f:21:d0:68:5d:7a:a4:b6:1f:89:
                    f5:70:ba:39:60:d0:d2:1f:cf:52:44:1d:fc:05:e0:
                    13:8f:4a:27:a9:dd:76:c1:7d:f6:69:a1:04:2d:ff:
                    d9:dc:e3:56:76:41:b0:0a:1e:71:93:9b:3b:c8:3e:
                    24:78:e3:47:2d:e0:7c:55:12:2e:c5:a6:f9:b3:bf:
                    31:db:b0:1d:72:c1:0f:0d:2b:0d:8b:1c:e3:c3:29:
                    b3:a6:a8:4c:29:2b:78:24:1d:ce:bb:24:f8:46:9c:
                    a7:64:5b:ae:32:66:ab:e1:c6:00:05:9a:3b:14:74:
                    83:55:29:26:51:b9:f4:63:eb:8c:61:f4:e9:b5:2b:
                    dc:50:ac:4d:98:20:cc:3c:c3:e5:de:ca:f6:57:d0:
                    cc:f7:34:91:64:65:3b:68:eb:c8:fe:44:39:28:1f:
                    a9:92:8a:1a:d2:e6:4b:61:96:43:74:f4:7c:55:fc:
                    3c:7f:ee:48:ef:69:4a:a4:77:23:9e:7e:61:26:0f:
                    5c:d3:38:55:af:53:8a:45:f3:5a:12:13:cd:f9:93:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B5:B5:57:37:13:6A:30:75:22:83:4F:92:47:72:1F:C6:00:82:A8
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:eb:19:86:f4:79:41:1a:d4:01:57:12:2a:8c:11:38:6c:
         bd:d7:a5:f7:1c:a1:e7:d4:15:7f:98:a3:34:89:b6:5b:64:23:
         05:af:59:1a:af:dc:94:a4:a2:a1:47:12:ed:88:42:c7:e3:2c:
         f4:37:8b:82:ec:d4:20:80:21:dc:5d:34:19:a1:eb:6a:bf:9b:
         80:5d:7d:24:d2:a9:47:07:3a:b7:ed:63:4a:c9:8a:73:4c:e1:
         65:7e:3d:be:22:2d:5f:3a:53:4b:b7:50:c0:a4:25:04:e6:93:
         b6:ec:21:39:7b:d3:47:d5:a2:a2:13:16:f2:c5:68:1c:4b:ea:
         08:b3:ea:4e:d1:03:dc:09:2d:e0:29:bb:a3:2b:c6:1f:80:7a:
         0d:c0:e2:9b:2b:95:86:15:88:4b:42:3d:5c:05:71:85:60:26:
         5e:e5:34:6a:38:37:31:93:c8:69:4b:b7:9f:ef:fa:13:c5:d1:
         7a:52:b0:5c:a0:bd:51:74:0b:42:1f:1e:e1:52:96:a6:43:32:
         0d:6b:72:d8:9c:42:80:74:70:ba:94:73:d2:2e:b0:0e:db:38:
         c9:6b:40:19:52:5b:9f:d2:c0:b3:cc:a8:26:d4:b0:a5:5b:15:
         bd:b5:b9:18:bd:fe:36:01:ec:11:f0:9d:8b:d7:59:5a:f7:28:
         f9:94:5a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4bJQXEJ3mNMD3fNR3SSfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh
NjhhOWYwHhcNMjYwODEzMDAwMTMzWhcNMjYwODE0MDAwMTMzWjAzMTEwLwYDVQQD
EyhlMGI1YjU1NzM3MTM2YTMwNzUyMjgzNGY5MjQ3NzIxZmM2MDA4MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKEpiqf2XwVntQ7cEdXMwLehEaf2
50KCC74X6U8N948MetAeoj6ENeDgvcItOPEOYF8h0GhdeqS2H4n1cLo5YNDSH89S
RB38BeATj0onqd12wX32aaEELf/Z3ONWdkGwCh5xk5s7yD4keONHLeB8VRIuxab5
s78x27AdcsEPDSsNixzjwymzpqhMKSt4JB3OuyT4RpynZFuuMmar4cYABZo7FHSD
VSkmUbn0Y+uMYfTptSvcUKxNmCDMPMPl3sr2V9DM9zSRZGU7aOvI/kQ5KB+pkooa
0uZLYZZDdPR8Vfw8f+5I72lKpHcjnn5hJg9c0zhVr1OKRfNaEhPN+ZP6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC1tVc3E2owdSKDT5JHch/GAIKoMB8GA1UdIwQY
MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt
ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy
LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnvrGYb0
eUEa1AFXEiqMEThsvdel9xyh59QVf5ijNIm2W2QjBa9ZGq/clKSioUcS7YhCx+Ms
9DeLguzUIIAh3F00GaHrar+bgF19JNKpRwc6t+1jSsmKc0zhZX49viItXzpTS7dQ
wKQlBOaTtuwhOXvTR9WiohMW8sVoHEvqCLPqTtED3Akt4Cm7oyvGH4B6DcDimyuV
hhWIS0I9XAVxhWAmXuU0ajg3MZPIaUu3n+/6E8XRelKwXKC9UXQLQh8e4VKWpkMy
DWty2JxCgHRwupRz0i6wDts4yWtAGVJbn9LAs8yoJtSwpVsVvbW5GL3+NgHsEfCd
i9dZWvco+ZRa8A==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:13 2026 by rpki-client