Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File:                     AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier:          Qh4PWhGbsNjZ0fcq1fFadcfOQkZnKJwgUPL1hRn8VA4=
Subject key identifier:   17:6F:8E:E8:50:12:06:B5:68:FA:28:D8:7D:F8:29:A3:F7:56:FE:DF
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer:       /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial:       01A0035D3E9CAEAFD7414075A790F19181DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number:          1A00
Signing time:             Sat 15 Aug 2026 03:00:37 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:37 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:37 +0000
Files and hashes:         1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: wnzp9gueikXyM0dG3bebJbwInvfZNyFjFwAqtFEXjTw=)
                          2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:3e:9c:ae:af:d7:41:40:75:a7:90:f1:91:81:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
        Validity
            Not Before: Aug 15 03:00:37 2026 GMT
            Not After : Aug 16 03:00:37 2026 GMT
        Subject: CN=176f8ee8501206b568fa28d87df829a3f756fedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:f9:98:b1:cf:70:d2:2d:24:b9:c1:49:5b:
                    a1:93:d1:93:cc:99:8f:3c:03:4f:fb:5c:82:56:0c:
                    2c:c3:10:fd:fe:3c:02:46:75:87:a0:75:47:d6:7d:
                    25:64:10:cf:6d:3c:74:7f:f5:c5:58:27:fe:31:6e:
                    f2:aa:5e:a1:db:13:31:4a:f9:5c:e3:2b:ad:0a:61:
                    8f:3f:0e:a7:ec:be:a5:30:eb:45:05:e1:0e:2f:7c:
                    d8:fc:b9:9d:2a:14:e1:25:4c:2d:1b:fd:84:2e:14:
                    d1:06:01:f8:92:53:03:dd:2f:a1:00:aa:cb:a2:39:
                    85:8a:c9:94:7e:91:c4:e6:82:40:66:cc:b5:76:54:
                    59:62:bd:1f:c2:dd:96:9a:84:14:87:4b:5a:95:06:
                    2a:b0:c2:d9:f5:aa:15:70:f8:71:b6:c3:ae:d2:e1:
                    83:57:f6:95:4f:3e:73:dd:c7:83:51:23:f1:ae:33:
                    70:0a:01:3d:63:e0:b2:66:80:62:d7:74:a1:06:8f:
                    94:c0:af:65:18:ea:c6:06:eb:d6:6a:a2:b2:a3:58:
                    8e:ff:84:b6:78:72:67:c3:c4:88:ef:7f:e2:ee:5d:
                    3d:e4:90:30:72:d6:6a:36:4d:67:9d:36:32:86:0a:
                    6f:b3:6c:09:52:5e:80:74:77:59:dc:d9:5c:78:d9:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6F:8E:E8:50:12:06:B5:68:FA:28:D8:7D:F8:29:A3:F7:56:FE:DF
            X509v3 Authority Key Identifier:
                keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9f:eb:a0:fd:cf:b1:03:60:6a:63:90:01:41:1a:1e:73:fc:
         4e:7d:92:3f:f9:39:c1:9c:43:93:01:94:ca:54:8d:d4:4a:84:
         ab:b9:9e:77:48:e4:53:f8:75:52:3f:34:1e:03:42:c5:07:50:
         43:60:ca:87:71:63:4e:9e:b7:6f:df:fb:ee:db:d4:b0:4e:05:
         09:f1:8e:62:31:82:bb:fb:1d:bf:f6:8a:00:fc:49:71:a5:34:
         6d:ac:a9:25:15:4d:7b:89:bc:82:92:d5:f0:59:59:18:94:f1:
         7e:89:a9:9f:7d:20:d6:1a:58:a1:8c:45:9b:27:fc:93:cc:6d:
         0e:a8:41:0f:8d:9a:a0:3f:60:ec:45:e7:dd:15:d6:28:de:3f:
         64:ae:c4:cf:6e:65:ad:b9:a9:d5:42:c5:61:b0:a8:bc:6a:bf:
         6a:eb:a0:7e:fa:ff:4a:38:d4:0e:bd:47:aa:39:dd:13:96:70:
         9b:a8:70:74:7c:aa:c8:e1:54:bb:69:19:8e:a6:ef:da:03:c1:
         c9:82:8f:bb:93:e8:4e:de:fa:30:03:da:31:72:6b:fb:24:b8:
         d5:2f:c6:ba:2e:c4:69:70:79:f6:46:9b:de:f7:51:a5:7d:03:
         43:6c:a4:70:30:42:0a:30:17:67:9a:ed:8b:f3:f7:66:ee:9d:
         b0:5d:e7:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXT6crq/XQUB1p5DxkYHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODU1ZGQ4OTcyNTZlODZkYTNjYmU2OTk0ZTk0Y2UyZTk2
OWFmMjYwHhcNMjYwODE1MDMwMDM3WhcNMjYwODE2MDMwMDM3WjAzMTEwLwYDVQQD
EygxNzZmOGVlODUwMTIwNmI1NjhmYTI4ZDg3ZGY4MjlhM2Y3NTZmZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxL5mLHPcNItJLnBSVuhk9GTzJmP
PANP+1yCVgwswxD9/jwCRnWHoHVH1n0lZBDPbTx0f/XFWCf+MW7yql6h2xMxSvlc
4yutCmGPPw6n7L6lMOtFBeEOL3zY/LmdKhThJUwtG/2ELhTRBgH4klMD3S+hAKrL
ojmFismUfpHE5oJAZsy1dlRZYr0fwt2WmoQUh0talQYqsMLZ9aoVcPhxtsOu0uGD
V/aVTz5z3ceDUSPxrjNwCgE9Y+CyZoBi13ShBo+UwK9lGOrGBuvWaqKyo1iO/4S2
eHJnw8SI73/i7l095JAwctZqNk1nnTYyhgpvs2wJUl6AdHdZ3NlceNmWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdvjuhQEga1aPoo2H34KaP3Vv7fMB8GA1UdIwQY
MBaAFACFXdiXJW6G2jy+aZTpTOLpaa8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUt
ODg2ZjY2YmI2ZWU4LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUtODg2ZjY2YmI2ZWU4
LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlp/roP3P
sQNgamOQAUEaHnP8Tn2SP/k5wZxDkwGUylSN1EqEq7med0jkU/h1Uj80HgNCxQdQ
Q2DKh3FjTp63b9/77tvUsE4FCfGOYjGCu/sdv/aKAPxJcaU0baypJRVNe4m8gpLV
8FlZGJTxfompn30g1hpYoYxFmyf8k8xtDqhBD42aoD9g7EXn3RXWKN4/ZK7Ez25l
rbmp1ULFYbCovGq/auugfvr/SjjUDr1HqjndE5Zwm6hwdHyqyOFUu2kZjqbv2gPB
yYKPu5PoTt76MAPaMXJr+yS41S/Gui7EaXB59kab3vdRpX0DQ2ykcDBCCjAXZ5rt
i/P3Zu6dsF3nnA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:33:28 2026 by rpki-client