Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File:                     _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier:          1IzUY/4onpBPYhU2IY/MgjST67AgUdO0x7ahUrUPVOk=
Subject key identifier:   75:64:54:EA:C5:9E:F7:D4:F3:7D:2F:BB:2B:4C:FD:E6:D4:05:DC:F1
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer:       /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial:       01A06E02F0E6C5A71D1269481A75979A0845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number:          163F
Signing time:             Fri 04 Sep 2026 20:01:21 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:21 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:21 +0000
Files and hashes:         1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
                          2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: nKDNfHmUNC7e4Ha/Hfv+cppWnaciflYlSj8PyQRpHEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:f0:e6:c5:a7:1d:12:69:48:1a:75:97:9a:08:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
        Validity
            Not Before: Sep  4 20:01:21 2026 GMT
            Not After : Sep  5 20:01:21 2026 GMT
        Subject: CN=756454eac59ef7d4f37d2fbb2b4cfde6d405dcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:31:b0:72:25:87:e8:0d:f3:02:25:3f:dc:
                    8f:66:d2:60:f7:1a:33:58:8d:8b:c0:a9:cf:45:12:
                    ee:d8:60:22:7a:c9:6e:ce:9a:d6:1a:e7:a2:76:28:
                    01:b6:11:bc:84:8c:08:0c:ad:a2:8a:40:56:24:e5:
                    60:ab:e2:1f:de:f7:c2:09:c1:48:02:43:fd:45:04:
                    be:8b:83:d3:ae:ef:99:f1:4d:18:f9:f0:5f:1a:72:
                    6d:c6:1e:54:6f:38:5f:96:f5:e5:1e:fb:4d:6e:2b:
                    36:26:01:67:c9:8a:86:7a:d2:4f:81:d3:e2:13:a9:
                    21:4c:3a:d0:6d:49:62:f0:62:b5:4c:64:71:c1:75:
                    c7:22:bd:23:29:fd:c8:5d:1e:f3:5d:8e:00:2b:2a:
                    a3:2b:12:7b:e5:64:e9:58:cb:7b:f0:2b:8f:60:28:
                    2c:8b:d2:66:c9:7a:fb:99:94:5b:b1:4e:14:6d:cb:
                    d2:99:56:a0:e9:89:37:a3:c9:2e:3a:4f:c1:7b:64:
                    e2:c3:40:7b:06:6e:eb:1f:ab:94:07:59:aa:a0:d8:
                    59:4a:79:15:3f:00:d5:af:22:e4:23:f2:49:e9:94:
                    13:80:a3:3d:95:84:67:c7:66:ac:19:69:ab:ce:82:
                    b6:a6:6f:4b:be:0d:79:4a:3c:b5:b7:e1:9e:c3:e3:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:54:EA:C5:9E:F7:D4:F3:7D:2F:BB:2B:4C:FD:E6:D4:05:DC:F1
            X509v3 Authority Key Identifier:
                keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:a7:f8:a3:ed:7b:2d:41:fe:35:83:ad:e6:11:26:a6:70:
         ad:23:2e:b3:6e:2b:5c:bc:82:32:32:4b:f8:77:b9:fb:d4:24:
         53:74:a0:50:10:48:2a:e2:fb:5b:d8:31:83:c3:0f:3a:8d:7d:
         cd:bb:0f:7a:45:47:c8:53:63:e1:67:4a:66:bf:fb:d2:37:46:
         43:be:69:d9:88:44:9f:ba:28:16:46:7b:ba:b2:e6:ed:0e:96:
         5b:89:f8:7f:68:a1:89:17:54:74:6b:e7:7a:8f:e1:34:bf:b4:
         a3:6c:69:b4:71:f0:4e:36:51:cc:6d:5a:52:83:f5:ab:96:1e:
         9d:09:69:53:00:ce:f7:a6:70:90:b9:42:4f:87:93:75:fc:24:
         95:ea:f2:09:fc:f2:f8:a0:86:59:ce:06:23:f4:6a:a4:aa:cf:
         85:aa:fd:49:f7:26:01:ba:b0:8c:7b:08:dd:73:65:8b:31:9b:
         41:36:23:e1:32:f0:e7:bd:a4:d2:8c:12:7d:75:56:1f:35:0b:
         e7:d1:75:e4:9a:db:f6:60:af:db:24:5e:65:11:91:d5:e8:99:
         9c:c4:9a:cf:81:75:26:b7:58:98:29:48:a3:f7:f3:80:8e:f9:
         9c:fd:27:47:fc:7e:08:33:7f:04:fb:d1:ae:a7:8f:1c:9f:90:
         76:12:13:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAvDmxacdEmlIGnWXmghFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzYzYzUyNGU1NWRmMzRiZjc1ODI4Mjc3NTNlNzdhNzY5
OWM3YTIwHhcNMjYwOTA0MjAwMTIxWhcNMjYwOTA1MjAwMTIxWjAzMTEwLwYDVQQD
Eyg3NTY0NTRlYWM1OWVmN2Q0ZjM3ZDJmYmIyYjRjZmRlNmQ0MDVkY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMYxsHIlh+gN8wIlP9yPZtJg9xoz
WI2LwKnPRRLu2GAiesluzprWGueidigBthG8hIwIDK2iikBWJOVgq+If3vfCCcFI
AkP9RQS+i4PTru+Z8U0Y+fBfGnJtxh5UbzhflvXlHvtNbis2JgFnyYqGetJPgdPi
E6khTDrQbUli8GK1TGRxwXXHIr0jKf3IXR7zXY4AKyqjKxJ75WTpWMt78CuPYCgs
i9JmyXr7mZRbsU4UbcvSmVag6Yk3o8kuOk/Be2Tiw0B7Bm7rH6uUB1mqoNhZSnkV
PwDVryLkI/JJ6ZQTgKM9lYRnx2asGWmrzoK2pm9Lvg15Sjy1t+Gew+O3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVkVOrFnvfU830vuytM/ebUBdzxMB8GA1UdIwQY
MBaAFP7GPFJOVd80v3WCgndT53p2mceiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDIt
YjMxZGY3MTE3NzE1LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDItYjMxZGY3MTE3NzE1
LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2en+KPt
ey1B/jWDreYRJqZwrSMus24rXLyCMjJL+He5+9QkU3SgUBBIKuL7W9gxg8MPOo19
zbsPekVHyFNj4WdKZr/70jdGQ75p2YhEn7ooFkZ7urLm7Q6WW4n4f2ihiRdUdGvn
eo/hNL+0o2xptHHwTjZRzG1aUoP1q5YenQlpUwDO96ZwkLlCT4eTdfwkleryCfzy
+KCGWc4GI/RqpKrPhar9SfcmAbqwjHsI3XNlizGbQTYj4TLw572k0owSfXVWHzUL
59F15Jrb9mCv2yReZRGR1eiZnMSaz4F1JrdYmClIo/fzgI75nP0nR/x+CDN/BPvR
rqePHJ+QdhITJg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:16 2026 by rpki-client