Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          vYHeGMe8aVPez+zt6ooO5tYnudSDdCzulU6GKbbcozI=
Subject key identifier:   86:02:4C:A8:52:F9:4B:F2:59:CD:9C:98:10:C6:CD:9D:B0:6A:F9:D0
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       01A0013837D0FE2EC887CC7E3AFB2CB23E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          0843
Signing time:             Fri 14 Aug 2026 17:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:56 +0000
Files and hashes:         1: JwAMG7H5zqvWutaY0tL6qWOVQ84.roa (hash: WHBkccdZypDjFyRaZ97jWOQpOH4yG3/HgeMqK5knvm8=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: m0GCgZD1PPduhCsn6Wm/rVPhWcYWDXCT/PoQr6/KFsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:37:d0:fe:2e:c8:87:cc:7e:3a:fb:2c:b2:3e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Aug 14 17:00:56 2026 GMT
            Not After : Aug 15 17:00:56 2026 GMT
        Subject: CN=86024ca852f94bf259cd9c9810c6cd9db06af9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:fa:0c:9e:65:5e:a2:9d:85:db:77:8b:37:
                    bd:79:c5:db:95:3c:3b:91:58:d9:f8:9e:6f:f6:a5:
                    ab:5b:93:aa:8a:cd:9d:b2:e7:59:36:f8:c0:98:f2:
                    cb:57:a5:cc:46:dc:7c:56:74:74:ea:cc:20:f5:b0:
                    d4:14:76:65:79:59:e5:f0:a3:d3:ab:d0:cb:dd:63:
                    a6:06:e0:d8:95:a8:9f:e3:f2:41:92:b2:c9:06:d5:
                    66:e8:6f:50:59:21:d8:db:59:7c:34:d3:e5:9c:92:
                    d4:66:ef:d4:70:ac:eb:ad:18:4c:78:49:4f:e9:26:
                    1c:b8:db:aa:ab:c5:73:89:44:11:4d:c2:5e:9f:79:
                    76:dd:1f:a9:b8:8e:25:1e:37:e2:38:a4:ee:24:d9:
                    38:63:4b:86:d4:b7:27:24:d2:3f:a1:8c:69:66:47:
                    87:2b:8a:e0:6c:65:78:5d:14:5b:05:0e:73:ba:bd:
                    81:cb:09:a3:0d:fa:18:aa:cc:e3:c9:f1:ac:b2:81:
                    2b:73:cf:cf:fb:58:fc:68:05:ce:28:1a:17:99:30:
                    24:36:91:8e:cc:e4:d0:7d:7a:db:af:c9:77:17:42:
                    39:87:c6:ef:01:79:50:b6:09:a2:50:f9:56:ad:8b:
                    01:9c:30:4c:25:85:db:66:09:84:6b:ef:09:35:e0:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:02:4C:A8:52:F9:4B:F2:59:CD:9C:98:10:C6:CD:9D:B0:6A:F9:D0
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ac:fe:ee:30:59:87:2f:c9:5a:13:72:a7:dd:04:41:39:a6:
         5d:1f:14:4c:d2:10:71:b2:4d:b9:f4:b8:50:5a:8f:be:f4:66:
         ff:33:00:f0:06:a1:10:ef:6d:5d:60:01:a8:04:73:eb:df:f0:
         b2:ec:ad:e7:c9:cd:e0:e4:1e:9f:01:c3:cd:c1:19:8b:08:42:
         bd:72:5f:7e:c8:c6:32:de:1e:b5:fd:50:1e:7d:71:91:df:53:
         10:02:34:45:c4:c0:49:47:ec:48:07:79:3d:c6:df:19:bf:37:
         54:5e:74:42:58:d1:a4:32:fc:1c:72:c8:af:4d:40:ee:08:dd:
         75:cc:33:0f:3a:43:44:d5:26:9c:b7:db:9a:35:e7:15:71:19:
         43:3a:7c:7b:19:ba:38:a9:2d:f3:0b:e0:7b:58:ee:94:c3:87:
         73:a4:8d:87:62:8c:c8:ae:3b:c6:83:f3:dd:42:b3:50:19:aa:
         e9:6e:ea:27:39:bc:e1:9b:e7:29:9a:06:67:42:ab:3d:89:63:
         0e:94:2b:95:b5:ab:81:2c:31:50:12:7a:12:be:5a:4b:c6:c5:
         11:79:f0:d4:73:fe:88:fa:bf:98:1b:70:14:c4:59:f2:ad:78:
         ab:b9:6b:04:ef:6c:fd:21:c5:03:40:af:0f:88:76:15:76:f1:
         95:8c:8d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABODfQ/i7Ih8x+Ovsssj5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjE1ZTUxYmY2MWFhNzRiZjM5NzI1NTE5OTc1OWNmZWM3
Y2M5YmIwHhcNMjYwODE0MTcwMDU2WhcNMjYwODE1MTcwMDU2WjAzMTEwLwYDVQQD
Eyg4NjAyNGNhODUyZjk0YmYyNTljZDljOTgxMGM2Y2Q5ZGIwNmFmOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+76DJ5lXqKdhdt3ize9ecXblTw7
kVjZ+J5v9qWrW5Oqis2dsudZNvjAmPLLV6XMRtx8VnR06swg9bDUFHZleVnl8KPT
q9DL3WOmBuDYlaif4/JBkrLJBtVm6G9QWSHY21l8NNPlnJLUZu/UcKzrrRhMeElP
6SYcuNuqq8VziUQRTcJen3l23R+puI4lHjfiOKTuJNk4Y0uG1LcnJNI/oYxpZkeH
K4rgbGV4XRRbBQ5zur2BywmjDfoYqszjyfGssoErc8/P+1j8aAXOKBoXmTAkNpGO
zOTQfXrbr8l3F0I5h8bvAXlQtgmiUPlWrYsBnDBMJYXbZgmEa+8JNeC1HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYCTKhS+UvyWc2cmBDGzZ2wavnQMB8GA1UdIwQY
MBaAFI5hXlG/Yap0vzlyVRmXWc/sfMm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2Yt
NTQzNWY0MzQ1MTIyLzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2YtNTQzNWY0MzQ1MTIy
LzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqz+7jBZ
hy/JWhNyp90EQTmmXR8UTNIQcbJNufS4UFqPvvRm/zMA8AahEO9tXWABqARz69/w
suyt58nN4OQenwHDzcEZiwhCvXJffsjGMt4etf1QHn1xkd9TEAI0RcTASUfsSAd5
PcbfGb83VF50QljRpDL8HHLIr01A7gjddcwzDzpDRNUmnLfbmjXnFXEZQzp8exm6
OKkt8wvge1julMOHc6SNh2KMyK47xoPz3UKzUBmq6W7qJzm84ZvnKZoGZ0KrPYlj
DpQrlbWrgSwxUBJ6Er5aS8bFEXnw1HP+iPq/mBtwFMRZ8q14q7lrBO9s/SHFA0Cv
D4h2FXbxlYyN5A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:52 2026 by rpki-client