Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File:                     rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier:          InW4JYqv/HJYeMGGR64rrFjZVl6ASGOa32c/CC5U68M=
Subject key identifier:   BB:30:C6:DD:46:2B:41:8D:B5:68:A0:A0:6E:62:DE:D8:DA:74:CE:EE
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer:       /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial:       01A003CBA67CF0DC0DE51D32A3DD1F2AC280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number:          153F
Signing time:             Sat 15 Aug 2026 05:01:13 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:13 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:13 +0000
Files and hashes:         1: 9RnRKei6gl9oZHVCyn4kDQqzyTg.roa (hash: R/Nz+fq8qLQCR73Ef868dsOsi+wbzZuFNF938QY3new=)
                          2: IgdPfhPl1P3iT1FWrsiJPEWiUf0.roa (hash: qJpCjPIGc1MaV9L1dwnXjXWQ+qoYXiY/1KG2OSBZzVg=)
                          3: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: nK2ac8VMYMzdYnTJYx79zEGPYN3yPxD0Eo4kWKGyp30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:a6:7c:f0:dc:0d:e5:1d:32:a3:dd:1f:2a:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
        Validity
            Not Before: Aug 15 05:01:13 2026 GMT
            Not After : Aug 16 05:01:13 2026 GMT
        Subject: CN=bb30c6dd462b418db568a0a06e62ded8da74ceee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:7f:d7:0f:15:de:f4:49:84:d3:1e:ee:3c:
                    c6:c1:2b:84:83:7c:32:c8:df:d4:8f:13:b2:30:a0:
                    2e:58:1f:2e:fd:42:b7:a7:de:0c:d8:48:d2:ce:cd:
                    89:6e:37:e6:b8:5b:83:34:2b:14:c6:fe:3d:a7:cc:
                    af:23:8f:3a:36:06:06:41:22:f8:bd:07:5e:2d:f0:
                    b7:be:46:1b:7c:a2:9f:d1:ae:ba:03:ec:05:30:0e:
                    c1:5c:51:a4:fd:31:64:32:43:4a:6e:6b:45:28:e0:
                    91:33:bf:a7:0e:a7:46:21:7f:7a:f5:89:28:7d:63:
                    38:12:f4:74:e4:7f:6a:60:19:eb:ad:a8:21:f6:9d:
                    1d:7c:49:b9:f7:f6:a7:54:fd:e0:b2:29:55:66:2e:
                    fd:32:88:56:9d:57:0c:78:26:2b:f7:d3:b1:19:e3:
                    a0:be:b5:53:5c:f5:f1:10:a9:d6:24:bf:0d:c2:e8:
                    44:07:8c:ca:4a:0f:01:85:33:b1:e8:cf:92:ed:a3:
                    2f:5b:12:4b:ca:67:7c:4c:6d:82:20:46:d0:88:9c:
                    6f:46:eb:7e:48:52:9b:bb:d2:04:ba:35:f0:09:ad:
                    5d:f6:9d:b1:57:36:60:4b:5b:95:90:72:e9:40:f1:
                    0b:e4:07:a9:26:34:ad:92:09:8d:d6:24:e6:50:ce:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:C6:DD:46:2B:41:8D:B5:68:A0:A0:6E:62:DE:D8:DA:74:CE:EE
            X509v3 Authority Key Identifier:
                keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:46:85:3d:bf:fd:b4:ae:84:0d:06:f3:79:75:ea:08:30:63:
         88:dc:8a:50:7c:4a:04:0d:e3:dc:d5:68:39:e2:d3:7e:b5:33:
         58:8d:c6:db:4a:72:36:28:f1:b6:95:14:dd:06:84:45:03:03:
         94:b8:98:b2:96:b8:86:0a:5c:92:00:81:27:00:14:83:f1:50:
         fd:21:6e:52:f3:4a:f3:3b:79:8e:d2:4a:c9:c0:53:de:cc:38:
         39:93:e8:cc:f3:cb:91:34:a5:cc:ec:db:78:e2:cb:89:5a:6c:
         08:c9:d9:2e:0c:54:fa:7d:fa:eb:9e:ad:b7:b7:dc:86:23:88:
         22:2c:ac:17:b3:c4:57:dc:f3:53:67:73:f6:39:3a:80:7b:1f:
         df:b6:04:86:9a:e4:a5:42:33:d3:3e:b2:20:13:0a:c4:e6:86:
         b5:ab:f1:73:4f:54:2a:a3:ac:35:d1:95:b9:73:9c:ef:f5:f7:
         03:ef:d4:bd:ce:b2:f0:93:6f:fc:7f:75:b4:e9:2f:67:07:b0:
         76:58:47:95:e1:3c:7b:eb:3a:c3:57:e6:5b:59:a5:d5:2b:dd:
         b6:71:71:89:54:54:5e:82:66:7f:51:2a:f8:12:0c:98:51:01:
         5d:14:bd:6a:6d:42:13:14:83:69:61:f3:e0:ba:94:5d:b0:49:
         57:ff:ea:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADy6Z88NwN5R0yo90fKsKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWJmYzRlNTlmN2U2NDY0NjBkOTAzMTE1NjZkZjFmNDdl
ZGE5MTcwHhcNMjYwODE1MDUwMTEzWhcNMjYwODE2MDUwMTEzWjAzMTEwLwYDVQQD
EyhiYjMwYzZkZDQ2MmI0MThkYjU2OGEwYTA2ZTYyZGVkOGRhNzRjZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSp/1w8V3vRJhNMe7jzGwSuEg3wy
yN/UjxOyMKAuWB8u/UK3p94M2EjSzs2JbjfmuFuDNCsUxv49p8yvI486NgYGQSL4
vQdeLfC3vkYbfKKf0a66A+wFMA7BXFGk/TFkMkNKbmtFKOCRM7+nDqdGIX969Yko
fWM4EvR05H9qYBnrragh9p0dfEm59/anVP3gsilVZi79MohWnVcMeCYr99OxGeOg
vrVTXPXxEKnWJL8NwuhEB4zKSg8BhTOx6M+S7aMvWxJLymd8TG2CIEbQiJxvRut+
SFKbu9IEujXwCa1d9p2xVzZgS1uVkHLpQPEL5AepJjStkgmN1iTmUM7lkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLswxt1GK0GNtWigoG5i3tjadM7uMB8GA1UdIwQY
MBaAFK3r/E5Z9+ZGRg2QMRVm3x9H7akXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmIt
ODY2MjY2NDcwODZjLzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmItODY2MjY2NDcwODZj
LzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0aFPb/9
tK6EDQbzeXXqCDBjiNyKUHxKBA3j3NVoOeLTfrUzWI3G20pyNijxtpUU3QaERQMD
lLiYspa4hgpckgCBJwAUg/FQ/SFuUvNK8zt5jtJKycBT3sw4OZPozPPLkTSlzOzb
eOLLiVpsCMnZLgxU+n36656tt7fchiOIIiysF7PEV9zzU2dz9jk6gHsf37YEhprk
pUIz0z6yIBMKxOaGtavxc09UKqOsNdGVuXOc7/X3A+/Uvc6y8JNv/H91tOkvZwew
dlhHleE8e+s6w1fmW1ml1SvdtnFxiVRUXoJmf1Eq+BIMmFEBXRS9am1CExSDaWHz
4LqUXbBJV//qhw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:54 2026 by rpki-client