Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
File:                     1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json)
Hash identifier:          BxglHtRsJp7YX0hxcf6rngaT0Xh623DP/SiA7vbUn6c=
Subject key identifier:   FA:5A:84:04:00:F3:E1:4F:CC:2A:4A:27:98:03:9F:D8:E1:5E:78:39
Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
Certificate issuer:       /CN=d66df7599e243b462864126a8c241078a2e2b045
Certificate serial:       01A03F3B7B9E50F412E997AA2B1539DB42B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
Manifest number:          02C5
Signing time:             Wed 26 Aug 2026 18:00:57 +0000
Manifest this update:     Wed 26 Aug 2026 18:00:57 +0000
Manifest next update:     Thu 27 Aug 2026 18:00:57 +0000
Files and hashes:         1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: oPptaiLBklcrBwFH+Fa+Dta8ZpBTNtT1dHQu0b/dB+w=)
                          2: DRNZ2Noj1jQqoeJCWv4JOU1HsDw.roa (hash: yIgbar3MOMeY3sZNtgZrdUU7Wm2ezjgMSXqvJFogWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:7b:9e:50:f4:12:e9:97:aa:2b:15:39:db:42:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045
        Validity
            Not Before: Aug 26 18:00:57 2026 GMT
            Not After : Aug 27 18:00:57 2026 GMT
        Subject: CN=fa5a840400f3e14fcc2a4a2798039fd8e15e7839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:23:d1:84:95:bd:01:5d:79:a1:d0:67:8c:
                    eb:79:02:98:2d:6d:b3:0a:df:76:05:cc:06:ba:20:
                    cb:d9:10:6b:0e:39:be:22:03:e4:98:26:f5:5f:14:
                    d8:d0:64:98:83:56:17:5d:e6:0b:c9:e0:42:1e:ab:
                    41:a8:e4:29:2c:10:a3:e8:68:5d:36:b0:1e:60:ce:
                    2c:e0:30:55:08:e9:31:33:d8:c2:18:e9:5b:5b:20:
                    c3:a5:3c:df:a7:34:ff:64:ce:fc:50:f4:ed:e0:85:
                    3b:8b:0f:f7:f7:d8:4a:1a:4d:24:be:cf:a5:47:ae:
                    37:61:26:58:7c:00:5b:fa:3a:f7:23:8b:cb:37:89:
                    e6:c7:88:05:8e:01:e8:bb:71:7d:3e:96:de:fb:35:
                    ed:4e:30:12:53:4c:f6:42:1a:ca:a3:a5:97:fa:5a:
                    94:b4:51:78:ba:0a:66:a9:42:97:0e:09:cc:bc:19:
                    88:d0:18:ea:6f:94:1f:8c:21:ca:05:78:6c:c7:ee:
                    aa:0f:68:ac:6d:2d:b9:93:f1:2b:5a:d2:bc:ef:26:
                    53:a1:0d:ee:4c:c4:6f:1f:23:0c:8d:84:cb:a8:64:
                    57:bf:2e:f0:f6:06:e5:8b:4e:22:e9:47:d7:8d:d8:
                    f7:5d:57:2f:58:b7:57:3d:bc:e4:02:27:6d:ce:eb:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:84:04:00:F3:E1:4F:CC:2A:4A:27:98:03:9F:D8:E1:5E:78:39
            X509v3 Authority Key Identifier:
                keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f4:da:42:2c:a4:15:2f:8c:e1:fb:c9:28:70:a9:a6:8e:54:
         aa:8a:a0:be:87:fb:22:b9:91:fe:97:ad:0b:45:06:7e:4d:a3:
         b7:40:3a:91:43:bd:14:17:ee:25:2e:5b:86:aa:f1:85:54:91:
         8c:c6:ea:68:73:8a:cd:ab:af:42:2f:60:bc:d9:12:40:17:04:
         e4:76:b4:2a:ac:a8:e7:1c:87:61:40:fa:eb:f3:a6:60:8c:9b:
         20:da:14:cd:8c:a9:52:21:48:29:91:d3:92:4a:b8:a6:16:86:
         5b:3a:f6:5f:a5:ef:fc:cb:d8:75:e2:2f:b1:4e:02:dc:1e:d6:
         05:ae:d7:20:ce:88:17:32:30:d1:77:5c:64:6b:52:79:af:88:
         1a:9c:71:74:e2:09:eb:df:92:70:bf:f4:4c:2b:d6:be:47:c5:
         b4:0e:5b:b3:4f:2b:89:84:0c:19:73:38:16:2c:94:12:c3:d6:
         05:ab:18:e7:39:82:d3:68:5c:ce:41:ed:e2:8f:e1:15:2c:d6:
         bb:70:1e:70:0c:33:19:08:76:77:65:89:d8:f6:82:22:9f:da:
         0b:5e:64:70:39:e6:6b:77:ab:9d:67:16:b8:e6:fb:d1:43:4a:
         5e:f6:8b:a8:65:0a:1f:67:ce:55:68:89:e0:b0:59:51:6d:25:
         70:b9:e7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O3ueUPQS6ZeqKxU520KzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmRmNzU5OWUyNDNiNDYyODY0MTI2YThjMjQxMDc4YTJl
MmIwNDUwHhcNMjYwODI2MTgwMDU3WhcNMjYwODI3MTgwMDU3WjAzMTEwLwYDVQQD
EyhmYTVhODQwNDAwZjNlMTRmY2MyYTRhMjc5ODAzOWZkOGUxNWU3ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLYj0YSVvQFdeaHQZ4zreQKYLW2z
Ct92BcwGuiDL2RBrDjm+IgPkmCb1XxTY0GSYg1YXXeYLyeBCHqtBqOQpLBCj6Ghd
NrAeYM4s4DBVCOkxM9jCGOlbWyDDpTzfpzT/ZM78UPTt4IU7iw/399hKGk0kvs+l
R643YSZYfABb+jr3I4vLN4nmx4gFjgHou3F9Ppbe+zXtTjASU0z2QhrKo6WX+lqU
tFF4ugpmqUKXDgnMvBmI0Bjqb5QfjCHKBXhsx+6qD2isbS25k/ErWtK87yZToQ3u
TMRvHyMMjYTLqGRXvy7w9gbli04i6UfXjdj3XVcvWLdXPbzkAidtzuuYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpahAQA8+FPzCpKJ5gDn9jhXng5MB8GA1UdIwQY
MBaAFNZt91meJDtGKGQSaowkEHii4rBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQt
MDcxNDM3NjVmZmZlLzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQtMDcxNDM3NjVmZmZl
LzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPTaQiyk
FS+M4fvJKHCppo5Uqoqgvof7IrmR/petC0UGfk2jt0A6kUO9FBfuJS5bhqrxhVSR
jMbqaHOKzauvQi9gvNkSQBcE5Ha0Kqyo5xyHYUD66/OmYIybINoUzYypUiFIKZHT
kkq4phaGWzr2X6Xv/MvYdeIvsU4C3B7WBa7XIM6IFzIw0XdcZGtSea+IGpxxdOIJ
69+ScL/0TCvWvkfFtA5bs08riYQMGXM4FiyUEsPWBasY5zmC02hczkHt4o/hFSzW
u3AecAwzGQh2d2WJ2PaCIp/aC15kcDnma3ernWcWuOb70UNKXvaLqGUKH2fOVWiJ
4LBZUW0lcLnnrg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:53 2026 by rpki-client