Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
File:                     b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft (raw, json)
Hash identifier:          dTIdXt4zoSYY2DO3HlG33LilxZ8fysPmfd7jeFar5w4=
Subject key identifier:   2A:C2:3D:16:6C:4E:53:99:74:0F:68:63:EE:10:21:5D:01:C9:66:A8
Authority key identifier: 6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
Certificate issuer:       /CN=6fe142f6be009a070c7d7e277851e05862765286
Certificate serial:       019FF8357603BFE213FFDA55F6A38D42DD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
Manifest number:          7A
Signing time:             Wed 12 Aug 2026 23:01:20 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:20 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:20 +0000
Files and hashes:         1: 1-9i6h4lZSk4A_dDWJdbNpRdRToU.asa (hash: ESFox6xFaIn2rqUCGFL8o0d5/GCIwNCLGi8smMw88gI=)
                          2: 854exVD_2RkS3V9jQmbIjk7GRZc.roa (hash: kAd6TVN9y1mBTZeU0hdgLPvOdRjgwz/+iiz74zWV3NE=)
                          3: CFyJX9XkKYmp8ro1qPWOf4oXUKo.asa (hash: LlHlqb7DkM8Mb1clldUSsTjEXtfpFdBGmD75HXT4Vsk=)
                          4: b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl (hash: xcRLM4qSaUw2hcSq8gt8NZnQT9VdjSKSaWz+PF3MRDM=)
                          5: w0AJq88G0b45InPd0XGlN7mjMM4.roa (hash: +j6mILqA2jp1dcaVwp5mYLIcIAfO+j6O78pcKnaBvJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:76:03:bf:e2:13:ff:da:55:f6:a3:8d:42:dd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe142f6be009a070c7d7e277851e05862765286
        Validity
            Not Before: Aug 12 23:01:20 2026 GMT
            Not After : Aug 13 23:01:20 2026 GMT
        Subject: CN=2ac23d166c4e5399740f6863ee10215d01c966a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:11:e8:b9:f0:12:6c:33:40:8f:cc:d6:c1:
                    1e:f0:8b:6c:bb:fe:04:e5:e8:ad:08:84:97:1f:79:
                    5c:0e:6d:e2:ba:5d:52:74:2f:a7:74:0e:ea:5e:67:
                    5f:bf:69:70:49:79:4e:40:e3:74:79:27:2f:da:95:
                    90:90:dc:ca:9a:c8:6e:52:e2:1f:f7:51:cd:0d:fa:
                    27:c6:96:91:00:54:ec:a8:32:7c:76:f8:2c:b0:62:
                    cb:61:13:69:f6:1c:0a:59:7e:7f:85:1d:ab:4b:4e:
                    b8:ca:ee:ba:39:a2:e4:90:1c:67:25:b7:b7:51:74:
                    ee:81:4e:be:d2:f7:f9:cc:fe:f0:95:88:03:12:12:
                    72:c7:28:bc:6d:bb:fc:c3:8e:c4:98:f1:78:4b:f9:
                    34:40:9c:d2:eb:24:9a:be:a6:21:f6:54:fd:17:2a:
                    87:84:25:4a:8e:9a:ae:fd:ee:2e:8f:dc:b6:d3:17:
                    70:95:e2:57:1b:1c:34:29:df:96:be:a4:da:ff:53:
                    5e:b6:37:35:b4:8f:6e:de:90:d7:30:21:b0:41:79:
                    26:ba:26:6e:e2:69:e6:97:c7:da:bc:00:61:d2:7d:
                    a3:00:da:34:f1:f6:51:d8:f7:4b:c4:89:64:67:ae:
                    75:b9:c7:60:fa:6c:b4:51:9b:12:e6:d0:1c:eb:c3:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C2:3D:16:6C:4E:53:99:74:0F:68:63:EE:10:21:5D:01:C9:66:A8
            X509v3 Authority Key Identifier:
                keyid:6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:e5:c2:9c:64:6d:99:55:93:03:4b:ad:5e:91:e4:16:9d:
         5a:ab:3a:bf:7e:66:4a:f8:41:34:d2:ea:db:dd:44:93:bc:d8:
         dd:a5:e1:d5:f0:34:47:23:c5:c7:fd:3f:61:91:8f:96:56:54:
         d8:b8:ac:ed:10:a5:1a:52:0f:37:ba:04:42:06:86:71:67:8b:
         bf:f5:5e:14:3f:f9:af:99:dc:2f:53:7d:34:bb:d9:d3:4c:b5:
         74:62:74:a1:f4:66:e1:1d:25:e9:89:8c:3c:c8:3c:0c:29:85:
         ac:42:74:4c:3c:2f:0d:26:54:13:d6:67:c5:f1:c9:55:bc:de:
         c6:ca:b3:27:7a:7d:28:c8:90:b8:f6:f3:59:02:8c:5e:e6:f2:
         9b:d9:53:44:7c:91:f6:94:fa:c8:f6:15:fc:65:6f:c1:9d:5f:
         ca:0f:fe:17:3d:26:23:53:ee:77:af:51:c0:66:a3:14:20:6d:
         bf:17:fc:e0:0f:91:61:cd:d5:9c:9a:5f:05:a3:5a:b8:46:4c:
         b8:dd:b4:37:48:0c:60:2a:83:59:ed:b7:83:76:8c:86:77:56:
         cf:60:19:7e:a2:21:f6:50:81:2a:fb:d6:a3:55:6c:8d:04:2f:
         09:a3:f1:b0:f3:b9:72:05:0a:82:58:fd:3d:36:9f:35:f1:90:
         6c:64:b5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4NXYDv+IT/9pV9qONQt01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTE0MmY2YmUwMDlhMDcwYzdkN2UyNzc4NTFlMDU4NjI3
NjUyODYwHhcNMjYwODEyMjMwMTIwWhcNMjYwODEzMjMwMTIwWjAzMTEwLwYDVQQD
EygyYWMyM2QxNjZjNGU1Mzk5NzQwZjY4NjNlZTEwMjE1ZDAxYzk2NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0wR6LnwEmwzQI/M1sEe8Itsu/4E
5eitCISXH3lcDm3iul1SdC+ndA7qXmdfv2lwSXlOQON0eScv2pWQkNzKmshuUuIf
91HNDfonxpaRAFTsqDJ8dvgssGLLYRNp9hwKWX5/hR2rS064yu66OaLkkBxnJbe3
UXTugU6+0vf5zP7wlYgDEhJyxyi8bbv8w47EmPF4S/k0QJzS6ySavqYh9lT9FyqH
hCVKjpqu/e4uj9y20xdwleJXGxw0Kd+WvqTa/1Netjc1tI9u3pDXMCGwQXkmuiZu
4mnml8favABh0n2jANo08fZR2PdLxIlkZ651ucdg+my0UZsS5tAc68OdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrCPRZsTlOZdA9oY+4QIV0ByWaoMB8GA1UdIwQY
MBaAFG/hQva+AJoHDH1+J3hR4FhidlKGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1GQzlyNEFtZ2NNZlg0bmVGSGdXR0oyVW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEt
ZjBjNGJlOGUyNDBhLzEvYi1GQzlyNEFtZ2NNZlg0bmVGSGdXR0oyVW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEtZjBjNGJlOGUyNDBh
LzEvYi1GQzlyNEFtZ2NNZlg0bmVGSGdXR0oyVW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8zlwpxk
bZlVkwNLrV6R5BadWqs6v35mSvhBNNLq291Ek7zY3aXh1fA0RyPFx/0/YZGPllZU
2Lis7RClGlIPN7oEQgaGcWeLv/VeFD/5r5ncL1N9NLvZ00y1dGJ0ofRm4R0l6YmM
PMg8DCmFrEJ0TDwvDSZUE9ZnxfHJVbzexsqzJ3p9KMiQuPbzWQKMXubym9lTRHyR
9pT6yPYV/GVvwZ1fyg/+Fz0mI1Pud69RwGajFCBtvxf84A+RYc3VnJpfBaNauEZM
uN20N0gMYCqDWe23g3aMhndWz2AZfqIh9lCBKvvWo1VsjQQvCaPxsPO5cgUKglj9
PTafNfGQbGS16g==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:10 2026 by rpki-client