Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
File:                     tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft (raw, json)
Hash identifier:          QMD5eXLRysJkhkC0k0QTYtpTlXaJlhNt7jDkwTfwc6U=
Subject key identifier:   E2:9A:A6:90:8E:65:28:A8:FA:F9:E1:55:67:BE:3C:FB:9E:7D:CB:6C
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Certificate issuer:       /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial:       019FF8DA262132A9BC27B90F767935DB00DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
Manifest number:          0219
Signing time:             Thu 13 Aug 2026 02:01:13 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:13 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:13 +0000
Files and hashes:         1: oBxSXzs7vZVR5pIabH9fSfJ9YCM.asa (hash: yiO3gUi5FUJST9MZ6eZJIcvD2fv1PnTYWKvJ/1y4JcI=)
                          2: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl (hash: QoGIj0X9ICu2kX5A0KWxqUHdy6d2hIMqwnEJTmOBSB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:26:21:32:a9:bc:27:b9:0f:76:79:35:db:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
        Validity
            Not Before: Aug 13 02:01:13 2026 GMT
            Not After : Aug 14 02:01:13 2026 GMT
        Subject: CN=e29aa6908e6528a8faf9e15567be3cfb9e7dcb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:38:9f:d3:7b:b3:ba:a7:72:e2:60:d2:f2:
                    a6:5f:cc:89:ce:dc:56:04:84:1c:3c:26:02:57:9e:
                    bc:a1:a0:5e:f5:9d:90:6a:19:ea:91:2d:9d:26:12:
                    e1:ec:73:30:07:2c:fd:4c:a8:98:ee:63:4f:05:5f:
                    81:1a:cd:70:e1:70:d6:26:7c:22:1f:5e:08:39:f9:
                    09:c3:69:cb:81:e7:21:29:33:de:84:08:0b:88:19:
                    d5:28:93:08:7b:b1:e9:75:30:66:c7:62:b2:e4:17:
                    0a:6f:d0:18:ca:a3:b9:f8:50:df:59:21:ce:36:fa:
                    d4:4d:99:a7:fb:84:7b:12:c4:3d:dd:bf:44:82:fd:
                    d1:f9:67:72:b6:5b:f8:14:44:c8:56:bf:fd:44:b2:
                    ef:b8:09:aa:ef:42:cd:a5:9e:96:d2:e5:64:5c:3a:
                    6b:87:c5:aa:93:ea:e6:40:61:34:91:b0:98:77:02:
                    3e:1b:d8:b0:84:f8:b2:10:da:d5:c3:34:f3:8d:de:
                    14:56:bb:3f:c5:18:e7:21:8f:f2:e2:bd:7b:53:53:
                    73:33:64:ed:90:56:6e:da:0f:f7:0f:2b:64:25:9a:
                    5c:cb:16:30:5c:d6:4d:48:84:cc:b7:bd:bf:a7:99:
                    02:2d:cf:f8:e3:a4:b6:00:3c:aa:ab:89:18:a7:ee:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:A6:90:8E:65:28:A8:FA:F9:E1:55:67:BE:3C:FB:9E:7D:CB:6C
            X509v3 Authority Key Identifier:
                keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:36:7a:4e:75:89:c2:54:9d:a9:29:2f:43:23:e1:56:75:
         fb:8a:bf:d9:1d:53:34:f1:21:ef:b5:25:b0:49:9b:64:23:76:
         bf:c2:97:cb:a7:71:17:33:12:c0:a6:1f:9f:fd:f7:da:1c:9e:
         6f:5c:0e:e9:b8:66:45:08:b3:00:15:d4:e3:82:bd:b6:28:da:
         aa:00:39:26:b4:80:90:1a:6a:e7:bb:99:a4:dc:cf:cf:76:f3:
         d1:f0:5e:55:04:0b:03:e4:44:91:af:e2:7a:45:99:ff:78:03:
         9c:be:07:51:42:89:ee:6a:59:af:bb:00:12:d5:a7:67:50:d1:
         2a:57:3d:89:05:ef:fb:36:1b:1b:c5:d1:e2:f6:61:a5:5e:0a:
         b5:2a:43:85:03:a9:42:33:24:d2:af:27:36:4c:2e:5f:a3:8b:
         9a:9d:5f:cb:89:43:1c:76:48:61:67:ea:a7:5e:63:b6:23:02:
         36:6d:8b:4b:84:6b:ee:36:da:8f:69:6b:3c:d1:27:97:fe:18:
         16:be:be:d3:70:33:01:14:7a:24:4e:2c:98:df:a5:b5:89:be:
         cf:8a:cd:d6:c5:e1:50:19:41:9c:8a:ec:75:e7:32:e0:37:af:
         41:49:85:d9:fd:48:55:f4:74:bb:5d:44:60:6a:70:4a:e6:2d:
         75:93:44:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42iYhMqm8J7kPdnk12wDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZmM0N2MzYWI3MGYzMTViNjY0NjExZmY1OThlNGMwZWQx
YjFiYTYwHhcNMjYwODEzMDIwMTEzWhcNMjYwODE0MDIwMTEzWjAzMTEwLwYDVQQD
EyhlMjlhYTY5MDhlNjUyOGE4ZmFmOWUxNTU2N2JlM2NmYjllN2RjYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ig4n9N7s7qncuJg0vKmX8yJztxW
BIQcPCYCV568oaBe9Z2QahnqkS2dJhLh7HMwByz9TKiY7mNPBV+BGs1w4XDWJnwi
H14IOfkJw2nLgechKTPehAgLiBnVKJMIe7HpdTBmx2Ky5BcKb9AYyqO5+FDfWSHO
NvrUTZmn+4R7EsQ93b9Egv3R+Wdytlv4FETIVr/9RLLvuAmq70LNpZ6W0uVkXDpr
h8Wqk+rmQGE0kbCYdwI+G9iwhPiyENrVwzTzjd4UVrs/xRjnIY/y4r17U1NzM2Tt
kFZu2g/3DytkJZpcyxYwXNZNSITMt72/p5kCLc/446S2ADyqq4kYp+7aMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKappCOZSio+vnhVWe+PPuefctsMB8GA1UdIwQY
MBaAFLT8R8OrcPMVtmRhH/WY5MDtGxumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFB4SHc2dHc4eFcyWkdFZjlaamt3TzBiRzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84ZWEwZTItODFiOC00NDJkLTg0ZjIt
YzJhMTAwMDliNDk2LzEvdFB4SHc2dHc4eFcyWkdFZjlaamt3TzBiRzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84ZWEwZTItODFiOC00NDJkLTg0ZjItYzJhMTAwMDliNDk2
LzEvdFB4SHc2dHc4eFcyWkdFZjlaamt3TzBiRzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjE2ek51
icJUnakpL0Mj4VZ1+4q/2R1TNPEh77UlsEmbZCN2v8KXy6dxFzMSwKYfn/332hye
b1wO6bhmRQizABXU44K9tijaqgA5JrSAkBpq57uZpNzPz3bz0fBeVQQLA+REka/i
ekWZ/3gDnL4HUUKJ7mpZr7sAEtWnZ1DRKlc9iQXv+zYbG8XR4vZhpV4KtSpDhQOp
QjMk0q8nNkwuX6OLmp1fy4lDHHZIYWfqp15jtiMCNm2LS4Rr7jbaj2lrPNEnl/4Y
Fr6+03AzARR6JE4smN+ltYm+z4rN1sXhUBlBnIrsdecy4DevQUmF2f1IVfR0u11E
YGpwSuYtdZNEww==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:44 2026 by rpki-client