Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          SIaDVJVxNCnTlNXou1x/4NsUmgvD6NLkA/TVM3JGjMo=
Subject key identifier:   89:62:5E:EA:AD:E1:F6:18:33:21:E5:74:19:20:92:8D:CD:24:A3:65
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       01A0016F4C8686D09DC6F85FB58FB86E0742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          12EF
Signing time:             Fri 14 Aug 2026 18:01:06 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:06 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:06 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: HVhtjgoiNEhbSqJg1pHoMfws9eHHjxUeeC7FAh6VNHU=)
                          2: A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa (hash: ZJ8TUlGdBNBoCbzk5y55t6BbjVatJaYuCVCQyVMAmI0=)
                          3: Z03CvgZnFdZytl33-YciJtYTgkU.roa (hash: QAeqd5R10qGg/87fO27tsqGhGaG/xmcTXnHVP0UeCmo=)
                          4: mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa (hash: M+cnkCbpwUSVeDkZOpqH/x6dTTigBQw7I8bx8zhShTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:4c:86:86:d0:9d:c6:f8:5f:b5:8f:b8:6e:07:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Aug 14 18:01:06 2026 GMT
            Not After : Aug 15 18:01:06 2026 GMT
        Subject: CN=89625eeaade1f6183321e5741920928dcd24a365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:9b:ca:73:30:77:48:43:3d:04:56:19:b0:
                    bd:d7:f0:2e:43:55:4a:cf:15:ad:1a:a5:f8:ac:ff:
                    0d:17:b6:16:13:1d:8e:da:b9:d9:ac:bb:4a:f5:51:
                    b6:cc:b7:aa:7a:78:1b:b8:99:7b:f9:0f:a6:68:c6:
                    b9:a5:2b:00:fe:56:ae:04:9d:c5:72:04:b2:91:ff:
                    60:0a:c2:1d:ce:9e:46:4c:8e:49:cf:66:73:86:13:
                    65:67:5a:bb:37:a8:c3:7e:4f:1e:7e:dc:89:2b:47:
                    12:62:0a:02:f0:5f:0f:04:40:79:ec:2a:0f:54:2c:
                    fc:b9:cb:ac:b7:7a:8d:84:50:eb:ec:0d:e7:c4:d5:
                    e3:22:86:9c:cd:de:f4:8a:58:c8:b4:3d:42:ed:04:
                    b4:e5:b9:89:98:51:f9:60:2e:8d:9d:b1:b7:25:6a:
                    d1:b8:4b:dc:42:6d:18:df:16:5e:cf:41:fb:e7:6f:
                    a7:7e:87:2b:07:40:16:fe:2f:36:fc:e7:e7:7e:95:
                    bb:2c:8d:db:66:f4:48:60:67:c3:94:8e:87:35:b4:
                    17:74:43:87:f6:2d:7c:3f:c9:41:c1:22:70:e8:c8:
                    64:72:fe:b5:e2:26:02:d7:56:1e:26:98:3d:7e:e5:
                    0b:7d:1c:dc:bf:f3:08:9b:c4:e0:2e:21:02:14:8d:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:62:5E:EA:AD:E1:F6:18:33:21:E5:74:19:20:92:8D:CD:24:A3:65
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:26:4b:93:11:8e:a8:f6:83:34:31:2d:23:2a:5e:d1:8e:fe:
         c8:32:36:7e:f9:de:de:a0:a4:9e:86:8d:a2:45:69:a0:ef:a6:
         e1:b5:3e:46:53:aa:b7:b4:b9:cb:88:96:7c:29:21:25:f1:9d:
         47:73:f9:70:2e:1b:cc:04:51:4c:37:a0:30:e4:60:23:99:93:
         d4:cb:b3:e4:5a:27:d6:56:87:c1:cb:f7:38:86:de:6b:c0:bc:
         4b:26:5f:d0:4e:79:6f:20:c8:90:40:45:7c:cd:ea:d9:c5:de:
         31:0b:63:0c:e0:9c:6e:f8:11:86:28:94:72:0b:43:8f:a6:32:
         0a:0f:6f:ff:b3:77:27:8f:74:1c:bd:e4:0a:3a:7c:05:fb:50:
         42:de:06:c9:ae:7f:56:ff:23:be:2f:a1:6d:24:ba:62:f2:a0:
         af:af:a8:37:e5:1e:80:41:20:b4:9c:43:48:e0:e2:91:d5:00:
         29:37:3c:7f:95:e8:97:e7:b9:9e:2b:7c:b6:85:c5:02:1c:d2:
         3c:a7:7b:87:83:ae:4d:fa:dc:78:f8:9e:2c:64:8b:e1:da:f1:
         aa:d8:b7:44:92:58:0b:eb:a8:7d:52:05:b5:5e:46:e8:cf:ac:
         33:0c:83:00:df:e7:c6:76:bf:a8:02:eb:cd:47:74:db:5b:51:
         84:2b:c4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb0yGhtCdxvhftY+4bgdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5
NzM2MGEwHhcNMjYwODE0MTgwMTA2WhcNMjYwODE1MTgwMTA2WjAzMTEwLwYDVQQD
Eyg4OTYyNWVlYWFkZTFmNjE4MzMyMWU1NzQxOTIwOTI4ZGNkMjRhMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q2bynMwd0hDPQRWGbC91/AuQ1VK
zxWtGqX4rP8NF7YWEx2O2rnZrLtK9VG2zLeqengbuJl7+Q+maMa5pSsA/lauBJ3F
cgSykf9gCsIdzp5GTI5Jz2ZzhhNlZ1q7N6jDfk8eftyJK0cSYgoC8F8PBEB57CoP
VCz8ucust3qNhFDr7A3nxNXjIoaczd70iljItD1C7QS05bmJmFH5YC6NnbG3JWrR
uEvcQm0Y3xZez0H752+nfocrB0AW/i82/OfnfpW7LI3bZvRIYGfDlI6HNbQXdEOH
9i18P8lBwSJw6Mhkcv614iYC11YeJpg9fuULfRzcv/MIm8TgLiECFI1pCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIliXuqt4fYYMyHldBkgko3NJKNlMB8GA1UdIwQY
MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt
ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi
LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0iZLkxGO
qPaDNDEtIype0Y7+yDI2fvne3qCknoaNokVpoO+m4bU+RlOqt7S5y4iWfCkhJfGd
R3P5cC4bzARRTDegMORgI5mT1Muz5Fon1laHwcv3OIbea8C8SyZf0E55byDIkEBF
fM3q2cXeMQtjDOCcbvgRhiiUcgtDj6YyCg9v/7N3J490HL3kCjp8BftQQt4Gya5/
Vv8jvi+hbSS6YvKgr6+oN+UegEEgtJxDSODikdUAKTc8f5Xol+e5nit8toXFAhzS
PKd7h4OuTfrcePieLGSL4drxqti3RJJYC+uofVIFtV5G6M+sMwyDAN/nxna/qALr
zUd021tRhCvEFg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:47 2026 by rpki-client