Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          GZonZSG+MWoLz+kzR8n+Hn9yXQG/gyQ3q18v6ZTROSs=
Subject key identifier:   A3:08:42:F1:85:2A:DC:6F:CC:8B:3E:F6:6A:F9:29:8E:03:35:A9:7D
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       01A06E70F6DE0B9551F1D0DC0BB11731FA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          19FD
Signing time:             Fri 04 Sep 2026 22:01:31 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:31 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:31 +0000
Files and hashes:         1: 6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa (hash: OTv2XEJolNR8TAIm4a6NTDxE9WsD3wHCkSRiEecs+hA=)
                          2: AVPuOu9WJgQFeY3OKziZugz6I8w.roa (hash: GA/D9jB65LyEclzGHWIX2nscOtPzaUo+KGMXTzHX+8Y=)
                          3: CWyUYsYrHl5cCZr6qaohHLKpdJI.roa (hash: IvmnQYp72Ns3lgs7TiLYlWSG657dtK8bI8cQG8CHOEM=)
                          4: awM-mF2LuJSHr5AQaHNMqJ1enTM.roa (hash: Y5juHU/HVAVlVF39MoV3F3X1JaAmaMtik3VRP6Mzl6Q=)
                          5: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: 9uS/26ODiVtIWQ1WziJaOvd+uWK/aXDjZyTwPX1loyk=)
                          6: uzf55yC-7djRSVx8Sh-FlrIF-Kk.roa (hash: zoa8rEN1vewB6fKTwGs9R6JAyCcSTUzhxoihIuKJC6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:f6:de:0b:95:51:f1:d0:dc:0b:b1:17:31:fa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Sep  4 22:01:31 2026 GMT
            Not After : Sep  5 22:01:31 2026 GMT
        Subject: CN=a30842f1852adc6fcc8b3ef66af9298e0335a97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:44:d0:e1:49:f9:79:5c:25:e9:05:7b:5d:
                    ca:54:46:af:1c:17:52:92:b7:9c:5b:4b:20:4c:f6:
                    59:de:c6:84:84:7e:3b:3f:0e:a3:34:f1:82:da:7d:
                    a4:da:44:1e:cd:39:98:46:5b:4d:32:9d:d8:6b:82:
                    a6:b9:b4:6e:68:8a:1b:33:d0:42:ed:94:26:14:07:
                    d9:be:71:49:d6:8e:e6:24:5e:4e:86:0d:79:2c:86:
                    09:79:41:3b:e4:73:b2:3b:ff:90:1c:09:3c:27:33:
                    6e:aa:03:cf:ac:12:2e:37:25:85:51:b9:34:de:75:
                    8d:b1:53:23:a4:d4:00:60:ce:8b:49:53:9c:e8:f3:
                    79:3f:51:db:ff:86:47:01:82:12:81:80:0c:db:ab:
                    e7:1e:53:8c:06:e8:61:b6:62:25:21:e6:5e:7a:25:
                    a2:f7:90:81:2f:2e:d1:c2:eb:40:a7:67:ed:02:55:
                    60:d3:3d:8e:d8:d2:06:a0:06:06:ee:a3:b7:9b:36:
                    79:e2:2b:65:65:83:ef:72:5e:98:3a:45:d4:07:66:
                    d1:7c:11:52:5c:ba:09:24:ef:b9:fd:02:a9:32:2d:
                    66:2b:9c:2e:85:5c:e3:a9:1b:e7:19:cf:d1:df:ab:
                    6f:b4:77:cc:45:7a:2d:0e:f9:fb:7b:61:6a:c5:3f:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:42:F1:85:2A:DC:6F:CC:8B:3E:F6:6A:F9:29:8E:03:35:A9:7D
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:8b:6c:98:26:07:f5:61:7b:41:69:57:cb:23:6b:32:9a:be:
         67:0b:fc:d8:ed:af:5f:00:47:a2:4b:a5:00:6a:6f:d6:36:7a:
         ae:1b:4c:14:23:0e:04:bf:ab:c2:f6:71:1d:4c:08:dc:9a:d2:
         b0:67:5b:38:23:d8:5b:7c:15:8d:2e:65:cf:61:78:a0:ed:b9:
         2a:7a:b1:89:60:62:07:5e:14:63:73:b8:44:df:c8:90:c6:c1:
         55:e9:46:cf:da:6e:b8:f2:d4:9f:ee:4f:eb:19:46:f3:6a:ce:
         42:50:cd:6e:5c:5a:7d:94:4f:4f:c9:d2:af:06:60:13:7a:f4:
         e6:be:d8:66:ad:a2:9f:90:b8:cd:13:eb:f8:88:f4:84:06:cf:
         6f:71:5c:b2:36:47:63:7c:84:78:67:05:b5:32:5a:a9:75:35:
         29:30:37:8b:f4:35:d9:32:dd:17:fb:d1:de:f6:ac:0f:31:eb:
         d7:4b:a4:8a:af:3d:b2:63:15:22:b8:e1:39:8f:18:1d:ba:72:
         97:2e:15:fe:ad:40:9f:a0:fe:0c:10:b1:d4:52:72:dd:9b:bd:
         2e:a9:0d:78:91:99:95:22:cb:c7:4b:49:81:58:43:eb:b3:76:
         19:92:a3:d3:50:ce:03:cd:0f:46:57:1a:c7:46:29:74:a6:84:
         3d:2d:8b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucPbeC5VR8dDcC7EXMfp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjYwOTA0MjIwMTMxWhcNMjYwOTA1MjIwMTMxWjAzMTEwLwYDVQQD
EyhhMzA4NDJmMTg1MmFkYzZmY2M4YjNlZjY2YWY5Mjk4ZTAzMzVhOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7pE0OFJ+XlcJekFe13KVEavHBdS
krecW0sgTPZZ3saEhH47Pw6jNPGC2n2k2kQezTmYRltNMp3Ya4KmubRuaIobM9BC
7ZQmFAfZvnFJ1o7mJF5Ohg15LIYJeUE75HOyO/+QHAk8JzNuqgPPrBIuNyWFUbk0
3nWNsVMjpNQAYM6LSVOc6PN5P1Hb/4ZHAYISgYAM26vnHlOMBuhhtmIlIeZeeiWi
95CBLy7RwutAp2ftAlVg0z2O2NIGoAYG7qO3mzZ54itlZYPvcl6YOkXUB2bRfBFS
XLoJJO+5/QKpMi1mK5wuhVzjqRvnGc/R36tvtHfMRXotDvn7e2FqxT/WHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMIQvGFKtxvzIs+9mr5KY4DNal9MB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvotsmCYH
9WF7QWlXyyNrMpq+Zwv82O2vXwBHokulAGpv1jZ6rhtMFCMOBL+rwvZxHUwI3JrS
sGdbOCPYW3wVjS5lz2F4oO25KnqxiWBiB14UY3O4RN/IkMbBVelGz9puuPLUn+5P
6xlG82rOQlDNblxafZRPT8nSrwZgE3r05r7YZq2in5C4zRPr+Ij0hAbPb3FcsjZH
Y3yEeGcFtTJaqXU1KTA3i/Q12TLdF/vR3vasDzHr10ukiq89smMVIrjhOY8YHbpy
ly4V/q1An6D+DBCx1FJy3Zu9LqkNeJGZlSLLx0tJgVhD67N2GZKj01DOA80PRlca
x0YpdKaEPS2LtA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:30:59 2026 by rpki-client