Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File:                     8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier:          +fXdgZspK/Q5nJKF0HFkEr4nZ1GHk8JbGz+1wujTIQk=
Subject key identifier:   C4:5B:1D:2C:C0:B2:87:E5:25:FD:C2:4E:FB:D0:F1:BB:98:3E:E9:3B
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer:       /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial:       01A040178BA929923A585BE15CFDEB1994A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number:          051D
Signing time:             Wed 26 Aug 2026 22:01:19 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:19 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:19 +0000
Files and hashes:         1: 2Hs9aa1I0dVAskh3I_aeTMJXodA.roa (hash: JzxtpS1vvjv40uhd6+QibW7QaKJAzvJMXoecvkNc+LA=)
                          2: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: nP0r4klij/Vfw8kbaEcNHuJnBB0zmfmQRuK7lcd/50k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:8b:a9:29:92:3a:58:5b:e1:5c:fd:eb:19:94:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
        Validity
            Not Before: Aug 26 22:01:19 2026 GMT
            Not After : Aug 27 22:01:19 2026 GMT
        Subject: CN=c45b1d2cc0b287e525fdc24efbd0f1bb983ee93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:ae:89:45:39:69:24:17:91:1e:fc:ae:e6:
                    62:67:07:a2:78:e0:a2:dd:e8:a6:ad:c9:ef:2f:c3:
                    68:fd:66:79:18:a5:b8:1d:32:57:bb:04:21:0d:0f:
                    7b:59:64:02:8c:bf:e3:5c:5d:42:ee:1b:72:fb:a7:
                    32:e8:9c:49:68:73:78:7f:79:64:9d:2d:2f:2f:16:
                    1f:5f:32:2e:c5:cf:de:f8:ad:72:2a:5a:f9:15:81:
                    a1:ec:25:dd:ab:05:2b:67:74:16:09:8f:63:78:fe:
                    98:1a:7b:a5:54:bb:6a:a9:b3:4f:d6:cf:f1:bb:4b:
                    d3:88:30:0f:83:31:ed:df:a0:69:df:f0:81:5a:25:
                    84:8a:db:d6:2b:3f:0a:c6:58:95:cf:2e:54:c0:06:
                    b8:c1:f4:6c:91:41:4d:1b:ae:c7:06:26:65:22:df:
                    13:07:76:c8:c8:21:89:90:01:0b:6a:b7:e2:39:59:
                    e0:f7:50:8b:71:c7:3d:d7:70:a4:a6:23:04:8e:2a:
                    3c:4c:c5:10:d7:e5:52:74:3e:33:73:bf:ed:eb:64:
                    4b:ed:75:de:b8:8a:1f:47:65:eb:2f:3c:4c:63:b8:
                    b3:92:db:40:61:ee:43:28:9a:52:06:ab:d9:6a:28:
                    74:9a:07:d4:d9:c2:b2:b5:33:92:7a:ab:23:3c:43:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:1D:2C:C0:B2:87:E5:25:FD:C2:4E:FB:D0:F1:BB:98:3E:E9:3B
            X509v3 Authority Key Identifier:
                keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:16:85:32:51:0e:11:c9:1b:80:40:29:11:c8:ef:9e:7f:4c:
         77:ba:00:0e:3f:54:b7:85:de:0e:9d:4c:7a:ef:61:6d:e5:21:
         2a:27:13:89:6f:10:be:df:2b:ed:09:78:a9:07:e3:d6:56:af:
         c9:a3:12:40:97:32:83:40:39:4b:58:6c:10:8b:75:16:d3:ee:
         90:54:11:a6:87:59:fd:8f:96:48:d0:07:bb:88:b9:9c:20:3e:
         d4:17:e2:23:9f:25:d6:ab:41:a2:7b:98:07:85:a7:9b:0c:ee:
         eb:9d:60:ed:b2:70:06:79:3d:a6:26:42:41:ee:62:c6:fc:cd:
         d0:01:81:cb:7f:ea:63:fd:5f:f1:71:43:aa:9c:f7:70:c3:34:
         68:44:bd:d8:1f:07:50:9f:90:70:24:05:f9:9e:6f:86:bd:16:
         77:f2:2e:0c:64:7f:1e:4f:8f:c9:d3:8a:89:42:2a:1f:c5:46:
         85:c4:64:04:3b:e5:8b:14:13:5c:c6:66:77:df:b2:7f:ca:86:
         5b:50:71:0c:ea:08:d9:e7:45:7e:db:18:d9:50:88:20:fb:06:
         e7:63:4e:cd:54:35:9b:8d:80:23:09:c2:0b:43:62:05:b1:ba:
         73:44:10:a5:24:24:c2:00:18:fb:01:ce:73:3e:78:85:77:a4:
         9a:f6:2b:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF4upKZI6WFvhXP3rGZSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi
NGE5ZTYwHhcNMjYwODI2MjIwMTE5WhcNMjYwODI3MjIwMTE5WjAzMTEwLwYDVQQD
EyhjNDViMWQyY2MwYjI4N2U1MjVmZGMyNGVmYmQwZjFiYjk4M2VlOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiGuiUU5aSQXkR78ruZiZweieOCi
3eimrcnvL8No/WZ5GKW4HTJXuwQhDQ97WWQCjL/jXF1C7hty+6cy6JxJaHN4f3lk
nS0vLxYfXzIuxc/e+K1yKlr5FYGh7CXdqwUrZ3QWCY9jeP6YGnulVLtqqbNP1s/x
u0vTiDAPgzHt36Bp3/CBWiWEitvWKz8KxliVzy5UwAa4wfRskUFNG67HBiZlIt8T
B3bIyCGJkAELarfiOVng91CLccc913CkpiMEjio8TMUQ1+VSdD4zc7/t62RL7XXe
uIofR2XrLzxMY7izkttAYe5DKJpSBqvZaih0mgfU2cKytTOSeqsjPEPTnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRbHSzAsoflJf3CTvvQ8buYPuk7MB8GA1UdIwQY
MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt
ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3
LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBaFMlEO
EckbgEApEcjvnn9Md7oADj9Ut4XeDp1Meu9hbeUhKicTiW8Qvt8r7Ql4qQfj1lav
yaMSQJcyg0A5S1hsEIt1FtPukFQRpodZ/Y+WSNAHu4i5nCA+1BfiI58l1qtBonuY
B4Wnmwzu651g7bJwBnk9piZCQe5ixvzN0AGBy3/qY/1f8XFDqpz3cMM0aES92B8H
UJ+QcCQF+Z5vhr0Wd/IuDGR/Hk+PydOKiUIqH8VGhcRkBDvlixQTXMZmd9+yf8qG
W1BxDOoI2edFftsY2VCIIPsG52NOzVQ1m42AIwnCC0NiBbG6c0QQpSQkwgAY+wHO
cz54hXekmvYrWA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:50 2026 by rpki-client