Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File:                     hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier:          MsT3hoH3o1B7Y99LOMIeeSu0jqnG99bMmyyJwNQZUr4=
Subject key identifier:   88:72:E9:A6:5C:FB:DE:F4:BB:A7:81:92:DA:EA:9C:D1:82:4A:50:6A
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       01A002B8DEAD8EC93DE943519467AAF1762D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number:          199F
Signing time:             Sat 15 Aug 2026 00:01:04 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:04 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:04 +0000
Files and hashes:         1: 9naXBN0i9ts9tnbIOyb5Sczixzc.roa (hash: /kAu0u7183RAbvVpAbGkMi0EZHTKT0BioBMltDlYjok=)
                          2: CGIudVXCrepRzQTBt85vZJmjWpo.roa (hash: 8O0DvJ5SLPtG+IA7H/3uG8tAsZJbbxGTVvWUhrbb/RI=)
                          3: _PtHvW2RJJdVLwdw4tkeOOXKuZg.roa (hash: umc/jSpScOWcBT/+2vljs6mhq1ooAAa3Yj5G5OElkwE=)
                          4: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: eYWIs/sHnBLAHKay+iYmvcG0RNAntBEZ+HHeouk3nh8=)
                          5: l60n8tBJyU34AAPP5aZ8KsXTwXA.roa (hash: Q8w5WMOoW5nZIZ1JcbL64EIT/DWt85OJIyMG+FMDUpw=)
                          6: zBODcHHYAYEI2vkzLWIhkVORhVc.roa (hash: 3o1N6TODhD9ZWWnGrLvkWRiz/fr7H8KId5ejA3JXzi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:de:ad:8e:c9:3d:e9:43:51:94:67:aa:f1:76:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: Aug 15 00:01:04 2026 GMT
            Not After : Aug 16 00:01:04 2026 GMT
        Subject: CN=8872e9a65cfbdef4bba78192daea9cd1824a506a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:c3:df:a9:73:cd:d0:e8:c0:4d:72:51:43:
                    d0:10:6a:e7:88:27:50:65:09:96:a3:62:44:e0:4e:
                    6e:f8:cb:dc:c4:6f:c6:a6:54:49:ae:0f:e5:fa:29:
                    06:17:61:b4:6c:bc:e7:f6:a5:6c:e5:a5:9a:d1:bb:
                    b2:30:b1:8f:00:bf:c5:89:f8:d8:f5:52:fd:f4:cb:
                    af:be:0d:e7:7a:7c:e0:49:9f:25:b3:16:3d:7f:58:
                    30:36:e6:01:b0:ca:80:27:f1:5e:1b:b6:bc:48:39:
                    e2:e8:16:45:95:4a:68:eb:c5:e1:fb:15:07:67:5f:
                    a6:62:c7:81:2c:37:dc:13:ea:58:b8:85:b0:24:07:
                    c1:a0:c3:14:21:33:4b:99:ff:df:1f:d3:77:f7:46:
                    53:f1:18:39:90:af:ae:3e:b6:a4:06:8f:dd:b7:79:
                    29:1e:41:01:7a:e9:6a:7b:67:58:e5:fe:e1:d0:8f:
                    71:92:91:b1:d3:61:01:fe:fb:50:52:56:87:81:7d:
                    d6:2a:62:5e:9f:ed:03:f8:20:7e:ed:77:dc:30:8b:
                    81:8a:44:3a:5e:02:ca:fd:fb:68:36:ec:91:2f:fc:
                    2e:95:ca:00:a3:0f:f3:8f:1e:6d:5d:cb:df:b4:b9:
                    3e:45:31:f5:9e:70:86:c7:98:ee:76:b6:3c:ac:5d:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:E9:A6:5C:FB:DE:F4:BB:A7:81:92:DA:EA:9C:D1:82:4A:50:6A
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c2:0a:3f:1c:fd:8c:e0:e8:49:93:eb:c9:47:a8:9f:e5:c3:
         28:16:1c:22:0b:3a:65:c8:f1:01:13:3e:a1:31:04:b0:d6:3d:
         e2:cd:ad:36:6a:11:1f:fb:b9:a5:af:b9:5d:c6:0b:99:d0:d2:
         3c:af:6c:3d:97:f6:02:a3:ed:5d:b0:f0:42:bc:d3:cb:0f:a6:
         74:1d:bc:27:3b:49:fe:cf:a1:fc:09:35:54:84:53:5a:6b:c0:
         64:3c:98:42:e1:fa:17:2f:25:b8:2b:6b:31:60:90:2c:d1:b9:
         40:1e:ed:7c:e0:5b:33:81:c3:56:76:34:e9:8a:53:a4:63:2a:
         f2:31:bb:38:e8:38:4b:c2:8a:9b:dc:0c:53:dd:7e:54:78:10:
         3a:51:fb:4f:7b:88:af:0b:a3:9d:f7:ae:9a:df:81:a5:a5:7f:
         1d:ba:02:0e:6c:00:e6:7c:e0:50:77:71:12:03:95:5b:d5:d6:
         29:4e:82:02:14:aa:81:5e:32:b6:75:fd:8a:e7:b3:e0:a1:b4:
         98:89:1d:6e:30:71:31:06:4f:36:5b:e2:b2:df:dd:89:67:67:
         94:67:3e:75:01:38:0a:03:55:59:58:39:19:4e:e5:41:98:d9:
         93:2c:4c:bf:66:75:7c:82:dd:c0:0f:76:26:90:8f:65:c4:b9:
         9d:1d:af:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuN6tjsk96UNRlGeq8XYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjYwODE1MDAwMTA0WhcNMjYwODE2MDAwMTA0WjAzMTEwLwYDVQQD
Eyg4ODcyZTlhNjVjZmJkZWY0YmJhNzgxOTJkYWVhOWNkMTgyNGE1MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIvD36lzzdDowE1yUUPQEGrniCdQ
ZQmWo2JE4E5u+MvcxG/GplRJrg/l+ikGF2G0bLzn9qVs5aWa0buyMLGPAL/FifjY
9VL99Muvvg3nenzgSZ8lsxY9f1gwNuYBsMqAJ/FeG7a8SDni6BZFlUpo68Xh+xUH
Z1+mYseBLDfcE+pYuIWwJAfBoMMUITNLmf/fH9N390ZT8Rg5kK+uPrakBo/dt3kp
HkEBeulqe2dY5f7h0I9xkpGx02EB/vtQUlaHgX3WKmJen+0D+CB+7XfcMIuBikQ6
XgLK/ftoNuyRL/wulcoAow/zjx5tXcvftLk+RTH1nnCGx5judrY8rF2rjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhy6aZc+970u6eBktrqnNGCSlBqMB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusIKPxz9
jODoSZPryUeon+XDKBYcIgs6ZcjxARM+oTEEsNY94s2tNmoRH/u5pa+5XcYLmdDS
PK9sPZf2AqPtXbDwQrzTyw+mdB28JztJ/s+h/Ak1VIRTWmvAZDyYQuH6Fy8luCtr
MWCQLNG5QB7tfOBbM4HDVnY06YpTpGMq8jG7OOg4S8KKm9wMU91+VHgQOlH7T3uI
rwujnfeumt+BpaV/HboCDmwA5nzgUHdxEgOVW9XWKU6CAhSqgV4ytnX9iuez4KG0
mIkdbjBxMQZPNlvist/diWdnlGc+dQE4CgNVWVg5GU7lQZjZkyxMv2Z1fILdwA92
JpCPZcS5nR2vJg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:38:35 2026 by rpki-client