Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          Ol8/SMDJ7gDLptdPQpBhyZjag85XIhSjRTbFv29sIC8=
Subject key identifier:   B9:B6:A4:32:B3:8F:2E:50:7E:CA:02:E0:37:9F:F9:9A:7B:A9:F9:84
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       019FF45861F5359741B9C1C3A9887602597B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          0DD9
Signing time:             Wed 12 Aug 2026 05:01:00 +0000
Manifest this update:     Wed 12 Aug 2026 05:01:00 +0000
Manifest next update:     Thu 13 Aug 2026 05:01:00 +0000
Files and hashes:         1: 04FbY6kBRpqiGP3AkiBuCWu5Bes.roa (hash: HoNtS+1Oc+MT8EGjXP3z2c8KS6IAUrdzH1rtxmawMCg=)
                          2: FD9UserVnd9g-B97_3OHBh6hGow.roa (hash: alF7jO0INJ/TLd2wbZJoqP534uCICHCvkQ7BKchM5M0=)
                          3: cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa (hash: Rcxed2Cw/y7WBNPlRsNkcmXlhqGDs0w++1hNx6Mbo5U=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: pICmzGPgrSnecnfvFerqIG3TEso2JqJakEyZQ6zs8I8=)
                          5: uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa (hash: kQd1YigGHb1xiD3rBDQj/Z4qQiqNkv9K2U3Hpfudh9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f4:58:61:f5:35:97:41:b9:c1:c3:a9:88:76:02:59:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: Aug 12 05:01:00 2026 GMT
            Not After : Aug 13 05:01:00 2026 GMT
        Subject: CN=b9b6a432b38f2e507eca02e0379ff99a7ba9f984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:35:67:ec:72:33:60:dd:06:3b:81:5f:7a:
                    2a:e0:30:a1:05:69:a2:61:2f:59:2e:f7:74:de:29:
                    e8:eb:87:0a:a1:79:b1:a8:72:ee:14:8f:ff:06:9b:
                    6a:bc:31:63:e9:83:ea:ea:60:f1:83:26:28:c2:26:
                    c8:66:9e:7e:31:c8:73:26:d9:3f:5d:f1:87:ac:6f:
                    ad:57:1a:a9:fe:98:41:d4:03:cd:5f:40:0b:70:76:
                    94:de:50:c9:a4:2c:05:14:fd:9f:45:84:e7:c1:7e:
                    fc:0b:3b:93:6e:db:1a:df:73:ec:37:8c:ed:08:a5:
                    b3:5a:05:4d:c6:ae:8c:e3:5f:02:8b:5d:df:de:51:
                    1f:04:91:ca:b7:a0:f6:3c:ea:39:00:cd:3b:70:26:
                    8f:68:c3:5d:3c:42:06:e7:65:63:14:1e:0e:55:f2:
                    d8:4b:0d:63:f2:b6:22:c6:b2:2a:ab:35:d8:3e:a3:
                    83:d2:10:de:fd:04:f5:79:9a:b9:7d:04:fe:4f:dd:
                    88:6f:61:41:43:3c:e6:f2:73:b5:16:2e:4d:29:69:
                    52:87:44:a2:11:41:79:06:8c:7c:63:63:10:c2:31:
                    7f:f3:f0:36:90:05:d7:9a:61:65:ce:66:ef:3a:cf:
                    78:22:0c:3b:1a:86:88:bf:a4:51:ca:a1:89:a3:f6:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:A4:32:B3:8F:2E:50:7E:CA:02:E0:37:9F:F9:9A:7B:A9:F9:84
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:89:a4:b2:43:3f:11:1b:0d:aa:24:ba:73:67:a6:31:29:
         b0:10:5f:ef:b8:86:26:0f:34:e8:9f:84:38:7e:bf:76:c0:93:
         15:4a:10:fd:74:a6:81:10:8e:89:ae:81:52:2e:69:6a:3b:f4:
         ec:8e:af:c7:ff:e4:1a:b3:27:20:5f:90:b6:61:75:87:12:c6:
         44:d9:fd:f8:74:09:fb:b7:4a:08:98:85:14:ed:34:3c:ce:8f:
         0d:f6:38:f8:52:1f:77:f0:aa:f6:9e:d4:eb:6c:9c:d9:97:a3:
         12:8c:a8:00:b6:b4:7d:c0:52:ce:b0:eb:89:0d:f0:7b:14:99:
         ec:d1:0d:51:15:15:b9:b3:b7:20:05:26:8d:4c:2e:78:a2:36:
         2e:c5:57:f2:8d:6b:b7:ce:da:37:a3:f4:b3:3f:13:48:17:6b:
         97:32:2d:ca:70:02:89:b4:90:be:58:e0:4f:35:bc:dc:94:a8:
         48:f6:a1:74:08:ee:52:f9:47:93:da:6c:46:d9:6b:1a:d9:61:
         27:fd:50:12:10:30:3e:30:83:6c:84:61:22:b4:01:b5:d4:3f:
         b3:40:de:2a:33:61:89:b3:04:af:b7:5e:1a:5d:54:aa:29:7a:
         3f:5a:95:6a:20:c8:bc:57:c9:df:c2:e1:90:c4:22:cc:d5:ff:
         df:07:ef:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/0WGH1NZdBucHDqYh2All7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi
ZTA3MzgwHhcNMjYwODEyMDUwMTAwWhcNMjYwODEzMDUwMTAwWjAzMTEwLwYDVQQD
EyhiOWI2YTQzMmIzOGYyZTUwN2VjYTAyZTAzNzlmZjk5YTdiYTlmOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0941Z+xyM2DdBjuBX3oq4DChBWmi
YS9ZLvd03ino64cKoXmxqHLuFI//BptqvDFj6YPq6mDxgyYowibIZp5+MchzJtk/
XfGHrG+tVxqp/phB1APNX0ALcHaU3lDJpCwFFP2fRYTnwX78CzuTbtsa33PsN4zt
CKWzWgVNxq6M418Ci13f3lEfBJHKt6D2POo5AM07cCaPaMNdPEIG52VjFB4OVfLY
Sw1j8rYixrIqqzXYPqOD0hDe/QT1eZq5fQT+T92Ib2FBQzzm8nO1Fi5NKWlSh0Si
EUF5Box8Y2MQwjF/8/A2kAXXmmFlzmbvOs94Igw7GoaIv6RRyqGJo/YL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm2pDKzjy5QfsoC4Def+Zp7qfmEMB8GA1UdIwQY
MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt
ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2
LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWCJpLJD
PxEbDaokunNnpjEpsBBf77iGJg806J+EOH6/dsCTFUoQ/XSmgRCOia6BUi5pajv0
7I6vx//kGrMnIF+QtmF1hxLGRNn9+HQJ+7dKCJiFFO00PM6PDfY4+FIfd/Cq9p7U
62yc2ZejEoyoALa0fcBSzrDriQ3wexSZ7NENURUVubO3IAUmjUwueKI2LsVX8o1r
t87aN6P0sz8TSBdrlzItynACibSQvljgTzW83JSoSPahdAjuUvlHk9psRtlrGtlh
J/1QEhAwPjCDbIRhIrQBtdQ/s0DeKjNhibMEr7deGl1Uqil6P1qVaiDIvFfJ38Lh
kMQizNX/3wfvJA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 15:33:58 2026 by rpki-client