Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
File:                     FvE3AfZKMRbctbspxVll5OhlJy4.mft (raw, json)
Hash identifier:          tMoJt6qUqCn/uQn7mNbpk9lNx5NvZojNc1fj2I3V5KY=
Subject key identifier:   8F:2D:29:EC:D0:1E:CD:11:50:9F:56:41:1C:64:FE:E0:D4:26:B7:B5
Authority key identifier: 16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
Certificate issuer:       /CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Certificate serial:       019FF9B5D050AA763A98774FD2A4AFF59FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
Manifest number:          5C
Signing time:             Thu 13 Aug 2026 06:01:09 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:09 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:09 +0000
Files and hashes:         1: 42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa (hash: +iVqlQUSZD75lSN3BubqoOzjwru6qo7Xro+7FeWxjTo=)
                          2: FvE3AfZKMRbctbspxVll5OhlJy4.crl (hash: yzTLBkdwlbzxa5zvXcxy7pmWSnhdrzoVwPgVPxOYB7Y=)
                          3: JWfknnBNHDqUE3M6T3I9yPrA24o.roa (hash: IOoAUOjkIl51WKcsbMSHfbV6UaLjPVCL/lOBBYW1YHk=)
                          4: YnilPx2dZcJqh4ls6xq-N2uRQ5A.asa (hash: 3verUtS7uFBpvS0G2iTLLXTPGgLAY1LSZCEh5YEovjE=)
                          5: zV0V8DTB4694rawMjTYOOLyWN-U.roa (hash: Gx3HbT7EtEgUlyYa8PmgpRY7z4AnqrNUbdr60lJPtvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b5:d0:50:aa:76:3a:98:77:4f:d2:a4:af:f5:9f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f13701f64a3116dcb5bb29c55965e4e865272e
        Validity
            Not Before: Aug 13 06:01:09 2026 GMT
            Not After : Aug 14 06:01:09 2026 GMT
        Subject: CN=8f2d29ecd01ecd11509f56411c64fee0d426b7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:18:f9:13:64:84:32:86:2e:12:d9:b2:57:de:
                    52:59:62:1b:72:4e:92:9d:f8:cb:c0:e1:95:6a:c5:
                    98:62:48:3d:60:38:8f:56:ba:60:31:e6:3a:12:0a:
                    4d:55:87:28:b9:7a:e3:be:32:ed:aa:c1:c3:78:e9:
                    49:c2:11:d4:0f:5a:64:0d:da:66:0c:78:4a:91:04:
                    b8:33:aa:73:c6:35:dc:14:ee:eb:a4:53:f9:cf:3a:
                    86:9f:a5:ad:f5:e0:f9:16:e7:dd:5f:51:b3:69:92:
                    f1:c4:d2:40:57:5a:db:84:e4:15:04:28:81:01:9a:
                    55:f8:b6:75:1a:7b:a7:dd:58:79:05:81:bf:60:7a:
                    59:74:8c:03:5a:5f:1e:c6:2f:c3:44:c4:e4:97:c9:
                    06:45:d3:b2:e2:87:24:1e:2f:0c:ce:b0:27:0f:75:
                    f3:9a:bd:20:af:f7:f4:a5:11:65:70:5d:0d:a9:12:
                    66:28:dd:b2:d8:cd:60:c5:31:c5:ba:cc:d5:af:36:
                    86:0f:f0:c7:1b:6f:fe:16:11:7c:77:e0:c2:dc:8f:
                    5f:94:15:cf:90:e3:df:1d:a4:69:ca:7e:1f:67:04:
                    42:cc:85:b6:69:31:79:f8:03:6b:14:6f:0c:0d:35:
                    72:b1:c5:9c:0c:bc:c9:51:9c:60:3d:fd:74:8a:d9:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:29:EC:D0:1E:CD:11:50:9F:56:41:1C:64:FE:E0:D4:26:B7:B5
            X509v3 Authority Key Identifier:
                keyid:16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:6d:54:2d:c3:e8:be:32:e1:cd:db:15:52:e0:78:3c:41:
         08:62:2a:49:f2:da:cb:1f:43:c7:2c:1e:c2:87:6b:d0:0d:fd:
         dc:f4:68:91:b4:2a:56:d9:8a:f9:39:75:de:7e:97:88:aa:e4:
         29:fc:62:f9:9f:fb:5c:8c:1c:ca:8a:f3:11:43:7d:6e:f0:db:
         2f:c1:41:a4:54:f2:51:c8:9e:8d:bc:cf:d6:d3:bd:de:b6:a5:
         ec:88:8d:cb:42:52:2a:d6:cd:ed:00:ca:79:f4:fd:7b:64:f6:
         f1:c7:8a:83:37:43:86:61:46:33:be:2f:2b:e4:62:d3:36:20:
         28:77:62:30:01:42:80:22:83:4c:e8:fd:07:2f:99:34:86:5a:
         52:71:b4:3f:eb:bb:33:f7:d6:92:f1:ac:c7:db:e8:2f:81:37:
         5d:24:8c:2a:63:1e:59:40:fc:66:c8:4e:46:98:6b:0b:73:6b:
         dd:e8:65:c2:90:7c:b1:a3:c8:f3:89:ad:f5:c0:cb:9d:8e:ac:
         6b:a1:c6:15:9a:27:80:7f:0f:12:8b:b6:dc:02:f9:e0:ef:19:
         90:2e:54:17:00:ae:d8:2a:ab:85:76:6d:6f:ac:01:12:3e:2a:
         0c:f8:99:ff:95:1c:5c:6f:31:4d:ab:8d:ac:f9:94:c9:7f:d9:
         45:6a:ba:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5tdBQqnY6mHdP0qSv9Z/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjEzNzAxZjY0YTMxMTZkY2I1YmIyOWM1NTk2NWU0ZTg2
NTI3MmUwHhcNMjYwODEzMDYwMTA5WhcNMjYwODE0MDYwMTA5WjAzMTEwLwYDVQQD
Eyg4ZjJkMjllY2QwMWVjZDExNTA5ZjU2NDExYzY0ZmVlMGQ0MjZiN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Bj5E2SEMoYuEtmyV95SWWIbck6S
nfjLwOGVasWYYkg9YDiPVrpgMeY6EgpNVYcouXrjvjLtqsHDeOlJwhHUD1pkDdpm
DHhKkQS4M6pzxjXcFO7rpFP5zzqGn6Wt9eD5FufdX1GzaZLxxNJAV1rbhOQVBCiB
AZpV+LZ1Gnun3Vh5BYG/YHpZdIwDWl8exi/DRMTkl8kGRdOy4ockHi8MzrAnD3Xz
mr0gr/f0pRFlcF0NqRJmKN2y2M1gxTHFuszVrzaGD/DHG2/+FhF8d+DC3I9flBXP
kOPfHaRpyn4fZwRCzIW2aTF5+ANrFG8MDTVyscWcDLzJUZxgPf10itk0cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8tKezQHs0RUJ9WQRxk/uDUJre1MB8GA1UdIwQY
MBaAFBbxNwH2SjEW3LW7KcVZZeToZScuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDE4ZmUtNzgxOS00OGZmLTlmYzYt
ZTUwMDMxYzZiMmM1LzEvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDE4ZmUtNzgxOS00OGZmLTlmYzYtZTUwMDMxYzZiMmM1
LzEvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+1tVC3D
6L4y4c3bFVLgeDxBCGIqSfLayx9Dxywewodr0A393PRokbQqVtmK+Tl13n6XiKrk
Kfxi+Z/7XIwcyorzEUN9bvDbL8FBpFTyUciejbzP1tO93ral7IiNy0JSKtbN7QDK
efT9e2T28ceKgzdDhmFGM74vK+Ri0zYgKHdiMAFCgCKDTOj9By+ZNIZaUnG0P+u7
M/fWkvGsx9voL4E3XSSMKmMeWUD8ZshORphrC3Nr3ehlwpB8saPI84mt9cDLnY6s
a6HGFZongH8PEou23AL54O8ZkC5UFwCu2CqrhXZtb6wBEj4qDPiZ/5UcXG8xTauN
rPmUyX/ZRWq6yw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:48 2026 by rpki-client