Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
File:                     THkVQTlO1-dpwf2JlVwfKBi0RbI.mft (raw, json)
Hash identifier:          lZGDpdsmx+lg27UxD38HzhN+fgI7eSPIavjNxVkkGKI=
Subject key identifier:   CE:42:A8:9C:3D:FB:89:82:F9:9C:25:20:E5:31:1E:09:C5:66:C6:21
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Certificate issuer:       /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial:       01A0016F5A3482ABD9ADF578A91CF80DEA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:09 +0000
Files and hashes:         1: 46tVnxWXBd54uDnUWiQrDEewYbs.roa (hash: iC7XI+Wul/0hfYbUzsUQgkjKjAE4JznP2trrEiMwN1I=)
                          2: 9ahwneSFqD3SaROmAUIGBjc82SE.roa (hash: CxJPqcqx0ZwsWZa7MbNafetbcRteWJmW7Gj2s8BmLiE=)
                          3: THkVQTlO1-dpwf2JlVwfKBi0RbI.crl (hash: 8YzfFh5WycVHsAEfPCdBVNz6fujmle0HdeZ7ASIY9ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:5a:34:82:ab:d9:ad:f5:78:a9:1c:f8:0d:ea:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
        Validity
            Not Before: Aug 14 18:01:09 2026 GMT
            Not After : Aug 15 18:01:09 2026 GMT
        Subject: CN=ce42a89c3dfb8982f99c2520e5311e09c566c621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:60:6c:bd:91:fa:be:57:ba:c7:67:fd:5a:
                    38:c1:a4:d1:a6:19:15:b2:77:e7:ee:93:5b:51:0c:
                    b5:0a:ec:d6:3b:32:28:64:e5:bf:2a:73:b0:d4:6c:
                    91:02:f8:0b:2c:72:65:e7:8f:f9:27:58:bc:43:e5:
                    06:39:4e:60:6a:b8:c7:ce:ab:d2:c3:cc:5d:08:56:
                    6a:b8:60:cb:9f:ea:50:d8:31:63:d0:ad:f6:50:53:
                    be:26:5b:ab:db:3f:fe:41:c9:4d:01:05:fa:22:89:
                    b6:32:a8:7c:7a:b5:c4:54:56:11:b7:33:22:b5:1a:
                    9a:93:61:d9:f9:b8:92:cd:44:c5:c7:a5:d5:d7:8e:
                    d6:ce:16:00:e1:a8:b3:f2:2e:5b:29:f5:ab:2d:89:
                    12:84:dc:95:55:bf:82:1c:fb:15:f6:d9:9b:93:01:
                    0a:ab:aa:1f:fc:93:80:c6:5f:17:09:f5:0e:76:fc:
                    96:57:a1:6e:fa:ef:e3:9a:5d:d1:dd:6b:d2:a3:84:
                    4b:3c:71:88:1b:28:2f:37:18:8c:c8:ba:e2:57:80:
                    09:5a:51:eb:f7:a8:60:d2:72:95:dc:fe:05:e3:16:
                    9c:71:a5:2b:5a:1b:da:6c:08:a9:a1:f8:7b:16:d2:
                    dc:ea:06:9e:a6:17:98:15:f2:79:e5:e1:93:e8:33:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:A8:9C:3D:FB:89:82:F9:9C:25:20:E5:31:1E:09:C5:66:C6:21
            X509v3 Authority Key Identifier:
                keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:ec:d7:a2:ea:f9:1e:6c:ff:0f:4b:f1:73:88:85:a7:b6:
         58:4b:a8:38:66:cb:f4:9f:95:51:5a:ec:ec:45:83:3e:35:fa:
         11:bd:c1:a8:ba:aa:88:62:26:76:b5:de:0d:d8:8e:84:83:20:
         78:12:92:c7:af:41:10:ff:dd:0a:99:1d:5b:d4:a3:bd:3d:1c:
         2d:30:d3:b7:44:90:bf:78:41:89:02:3b:54:31:8a:1f:4a:79:
         67:79:e7:44:90:4c:18:53:c3:40:ee:5e:71:cb:18:46:7b:34:
         6a:00:d8:e7:67:b1:cd:20:de:1f:cd:d2:68:e2:62:1a:75:b3:
         9a:ae:dc:2a:5e:0a:fa:db:32:50:e0:99:d1:1b:13:82:af:d5:
         2a:7c:e9:78:41:05:d8:2c:fc:a7:7e:18:d7:71:8d:b5:b4:b6:
         5a:6f:68:8d:a8:eb:69:c1:a5:eb:74:6c:6c:b2:e9:34:9c:1c:
         fa:a9:39:3c:3c:eb:c1:45:13:39:9f:f7:f8:45:81:cd:a8:b4:
         40:ad:71:1c:cd:c8:7f:17:a7:17:06:2a:ba:ad:fe:ec:39:22:
         6f:2e:d7:f8:88:f8:f7:43:c8:04:dc:5f:71:f7:9c:dd:1b:c5:
         fa:7f:9e:ab:8f:1e:a4:27:40:be:61:7a:23:42:ea:5f:52:8f:
         1c:98:30:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb1o0gqvZrfV4qRz4DeoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzkxNTQxMzk0ZWQ3ZTc2OWMxZmQ4OTk1NWMxZjI4MThi
NDQ1YjIwHhcNMjYwODE0MTgwMTA5WhcNMjYwODE1MTgwMTA5WjAzMTEwLwYDVQQD
EyhjZTQyYTg5YzNkZmI4OTgyZjk5YzI1MjBlNTMxMWUwOWM1NjZjNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYVgbL2R+r5Xusdn/Vo4waTRphkV
snfn7pNbUQy1CuzWOzIoZOW/KnOw1GyRAvgLLHJl54/5J1i8Q+UGOU5garjHzqvS
w8xdCFZquGDLn+pQ2DFj0K32UFO+Jlur2z/+QclNAQX6Iom2Mqh8erXEVFYRtzMi
tRqak2HZ+biSzUTFx6XV147WzhYA4aiz8i5bKfWrLYkShNyVVb+CHPsV9tmbkwEK
q6of/JOAxl8XCfUOdvyWV6Fu+u/jml3R3WvSo4RLPHGIGygvNxiMyLriV4AJWlHr
96hg0nKV3P4F4xaccaUrWhvabAipofh7FtLc6gaepheYFfJ55eGT6DMpFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5CqJw9+4mC+ZwlIOUxHgnFZsYhMB8GA1UdIwQY
MBaAFEx5FUE5TtfnacH9iZVcHygYtEWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhrVlFUbE8xLWRwd2YySmxWd2ZLQmkwUmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYt
YjFlMzEzZDc5ODkzLzEvVEhrVlFUbE8xLWRwd2YySmxWd2ZLQmkwUmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYtYjFlMzEzZDc5ODkz
LzEvVEhrVlFUbE8xLWRwd2YySmxWd2ZLQmkwUmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0vs16Lq
+R5s/w9L8XOIhae2WEuoOGbL9J+VUVrs7EWDPjX6Eb3BqLqqiGImdrXeDdiOhIMg
eBKSx69BEP/dCpkdW9SjvT0cLTDTt0SQv3hBiQI7VDGKH0p5Z3nnRJBMGFPDQO5e
ccsYRns0agDY52exzSDeH83SaOJiGnWzmq7cKl4K+tsyUOCZ0RsTgq/VKnzpeEEF
2Cz8p34Y13GNtbS2Wm9ojajracGl63RsbLLpNJwc+qk5PDzrwUUTOZ/3+EWBzai0
QK1xHM3IfxenFwYquq3+7Dkiby7X+Ij490PIBNxfcfec3RvF+n+eq48epCdAvmF6
I0LqX1KPHJgwew==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:02 2026 by rpki-client