Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File:                     8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier:          YQgS6E73Ln+H5H1L1FYW5TjViP6hkkCxvHpCHkJFpiU=
Subject key identifier:   C4:AE:9F:A1:36:59:DE:A3:ED:8D:0B:E8:48:2A:09:53:AD:FD:47:A4
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer:       /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial:       01A055FAD3282D9E9ECD12A1A897FEA348CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number:          0B2D
Signing time:             Mon 31 Aug 2026 04:01:36 +0000
Manifest this update:     Mon 31 Aug 2026 04:01:36 +0000
Manifest next update:     Tue 01 Sep 2026 04:01:36 +0000
Files and hashes:         1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: LO9WBDa4eUz5wd76dF0Koi7GtyCp/TGCajr1SRwUJ4M=)
                          2: GueQ_mhDztm052O4uyOCzydd4Hs.roa (hash: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=)
                          3: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (hash: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=)
                          4: o8bBYWpde5zB25G3op0chPWF1KA.roa (hash: 0RPyFNyYu7Qe34unEDC/iTRz2G6+VT+jFUVRlVn3fYw=)
                          5: wQOSAw7jJ1TAs5XBH4hj3XxrGvM.roa (hash: rw2xIPWw6m4cXi1grWMT/sHatYGUNfGWHacbMATZykM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:55:fa:d3:28:2d:9e:9e:cd:12:a1:a8:97:fe:a3:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
        Validity
            Not Before: Aug 31 04:01:36 2026 GMT
            Not After : Sep  1 04:01:36 2026 GMT
        Subject: CN=c4ae9fa13659dea3ed8d0be8482a0953adfd47a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:46:c2:46:5e:b2:01:f5:2c:8a:9f:57:d8:
                    e8:b3:ea:ca:dd:0f:81:f4:c3:26:83:74:a6:12:b1:
                    28:b1:b1:0b:1c:12:13:9f:fa:2f:94:74:f0:32:2f:
                    ab:6e:98:d3:93:4a:fd:b6:3c:28:f2:7c:c6:e9:92:
                    f5:89:d3:ec:c6:85:26:57:63:f2:ed:11:3d:10:ec:
                    d1:f0:00:ee:3b:fe:3c:ff:7d:19:da:cc:7b:05:94:
                    00:2d:41:80:5e:2d:08:be:41:e3:87:e2:52:88:72:
                    00:5c:9e:70:4a:44:46:3b:ca:36:59:4e:6f:27:23:
                    0c:a5:68:d0:32:04:53:77:3a:c7:c4:ef:db:5b:63:
                    27:7d:6e:7d:56:53:99:7d:73:13:48:c8:9b:4e:51:
                    e3:7a:de:cf:c6:b2:d9:97:b0:95:fd:52:8a:f7:c7:
                    fc:cd:2e:93:41:ca:a0:9b:0b:33:28:7e:4f:7f:5a:
                    10:de:ad:7a:94:b3:b7:a9:83:45:45:31:8f:72:d1:
                    92:4d:be:f8:4c:4d:24:f0:71:eb:c7:ce:01:e1:83:
                    a1:2b:4f:b0:1b:fd:e9:36:3f:a2:5a:25:21:c3:9f:
                    70:8c:d0:f4:e8:e9:37:1e:9b:b9:10:ca:9a:55:1f:
                    82:b5:97:04:d3:90:d1:b4:5d:1f:74:19:70:ea:c7:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AE:9F:A1:36:59:DE:A3:ED:8D:0B:E8:48:2A:09:53:AD:FD:47:A4
            X509v3 Authority Key Identifier:
                keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:1c:71:24:10:12:c3:55:36:9e:20:b0:5f:36:61:04:44:dc:
         60:51:f7:58:9e:7b:96:c2:b3:cb:0c:88:f2:29:db:e4:0b:f8:
         7c:b1:9e:81:50:51:ce:56:a5:ac:b4:58:86:23:e3:57:24:ee:
         07:3f:ea:52:3f:d5:62:ed:ea:d8:f6:35:ba:14:af:fd:0f:ed:
         13:f1:cc:e7:9f:9f:33:4d:8c:d7:fc:e1:0c:8d:16:c2:91:ef:
         ef:5e:45:f7:aa:7e:81:6f:64:08:e2:1c:51:fe:8b:74:d6:73:
         93:99:e3:b2:6c:60:3b:1f:e0:dc:d8:32:b6:63:eb:8f:cb:19:
         8a:1d:36:f6:82:e2:58:b4:c9:84:7c:52:e6:a3:42:09:65:b6:
         7e:e7:92:5b:5b:83:c5:f6:aa:1c:03:7f:11:2c:03:6b:bc:98:
         de:59:41:a4:4b:78:db:73:20:b6:65:b4:90:44:90:50:ef:43:
         97:c9:cc:1d:59:5a:34:54:5b:1e:5a:81:ce:e5:91:0c:32:6c:
         a6:92:3f:62:87:55:2f:49:4a:e8:11:4d:72:92:14:72:3b:50:
         5f:40:3f:e6:41:9d:94:98:f1:d0:3b:ea:ef:01:c9:e5:e6:26:
         d7:bf:c4:43:7a:96:55:89:dc:1f:d3:f6:77:bd:bf:09:2d:16:
         89:54:a9:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBV+tMoLZ6ezRKhqJf+o0jMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5
ZTY1YTEwHhcNMjYwODMxMDQwMTM2WhcNMjYwOTAxMDQwMTM2WjAzMTEwLwYDVQQD
EyhjNGFlOWZhMTM2NTlkZWEzZWQ4ZDBiZTg0ODJhMDk1M2FkZmQ0N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8pGwkZesgH1LIqfV9jos+rK3Q+B
9MMmg3SmErEosbELHBITn/ovlHTwMi+rbpjTk0r9tjwo8nzG6ZL1idPsxoUmV2Py
7RE9EOzR8ADuO/48/30Z2sx7BZQALUGAXi0IvkHjh+JSiHIAXJ5wSkRGO8o2WU5v
JyMMpWjQMgRTdzrHxO/bW2MnfW59VlOZfXMTSMibTlHjet7PxrLZl7CV/VKK98f8
zS6TQcqgmwszKH5Pf1oQ3q16lLO3qYNFRTGPctGSTb74TE0k8HHrx84B4YOhK0+w
G/3pNj+iWiUhw59wjND06Ok3Hpu5EMqaVR+CtZcE05DRtF0fdBlw6sd1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSun6E2Wd6j7Y0L6EgqCVOt/UekMB8GA1UdIwQY
MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct
YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx
LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxxxJBAS
w1U2niCwXzZhBETcYFH3WJ57lsKzywyI8inb5Av4fLGegVBRzlalrLRYhiPjVyTu
Bz/qUj/VYu3q2PY1uhSv/Q/tE/HM55+fM02M1/zhDI0WwpHv715F96p+gW9kCOIc
Uf6LdNZzk5njsmxgOx/g3NgytmPrj8sZih029oLiWLTJhHxS5qNCCWW2fueSW1uD
xfaqHAN/ESwDa7yY3llBpEt423MgtmW0kESQUO9Dl8nMHVlaNFRbHlqBzuWRDDJs
ppI/YodVL0lK6BFNcpIUcjtQX0A/5kGdlJjx0Dvq7wHJ5eYm17/EQ3qWVYncH9P2
d72/CS0WiVSpDw==
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:54 2026 by rpki-client