Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          s7d4NDZh2RxZ1OjmZmTBfimuVr5ahMlQtI3GSn9iPSM=
Subject key identifier:   F3:DF:AE:10:EC:84:8D:A7:89:A4:71:6D:AB:91:CE:C4:0F:75:9E:D4
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       01A00213C7AC42A7CE5E0229D951ECDA3388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 21:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:45 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: m79tkc5xRKYov4nh+IP5i19nNbs296/xFR7UnaYqv04=)
                          2: F6fUHhyih39ackVWeOiT1Us1Y8Q.roa (hash: puoFvjqopp+quYrffqHcq8C0zEtx3DRFmOVecmQhdMc=)
                          3: gXTXswMAqOUZcicFKanGyy8Pc24.roa (hash: CsXx31nQ+NdycTm6E1P0Qb6Ob5IJ6xBFv4kmPa3DVVo=)
                          4: kOj1s5oO7oSiq_7ZjXoN1j2kTnE.roa (hash: Y6xric3ra7rVJoctwp2vvhl14A8o24GxxC7BIDvBIlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:c7:ac:42:a7:ce:5e:02:29:d9:51:ec:da:33:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Aug 14 21:00:45 2026 GMT
            Not After : Aug 15 21:00:45 2026 GMT
        Subject: CN=f3dfae10ec848da789a4716dab91cec40f759ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:31:64:a0:d1:d9:6f:d9:65:c4:8d:0b:32:
                    65:39:b9:90:12:67:c1:cf:7f:dc:9d:87:f1:e2:bc:
                    81:f5:bd:c1:90:f0:cb:be:65:b9:ce:32:a6:1d:7d:
                    4f:24:9c:73:4d:4b:13:51:6a:f3:69:28:2a:20:f1:
                    00:6d:2a:a5:56:a4:a6:df:c4:cd:87:c0:3f:dd:03:
                    38:b8:37:79:73:bf:15:b2:21:62:c9:ae:3d:d9:02:
                    64:d8:7e:f2:a7:c6:8c:2b:e8:84:98:aa:ac:20:99:
                    f2:f5:bd:de:ae:b0:eb:c4:02:47:db:c5:88:43:04:
                    fa:44:06:d0:c4:a0:50:cc:23:95:6c:32:89:3e:a4:
                    ee:26:80:d7:42:12:ba:9a:5f:84:0b:bc:cb:3f:70:
                    01:96:b2:61:b4:64:af:93:1f:bd:f5:72:0b:47:5b:
                    76:7f:a0:c5:2b:72:51:8d:13:8c:f7:ae:ba:b6:b7:
                    b3:be:4c:89:b6:0d:eb:0e:e9:79:51:1b:be:a8:ec:
                    7c:b4:5f:ce:96:8a:0b:16:31:d5:83:51:d9:fd:96:
                    a5:51:e2:d8:6f:04:22:1d:f7:b5:04:9c:16:ce:ab:
                    0d:c3:06:59:de:6f:64:1d:7f:16:7c:1e:4b:ea:f5:
                    ae:52:1a:48:41:3f:3c:2c:73:c4:a5:16:c3:9d:f0:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:AE:10:EC:84:8D:A7:89:A4:71:6D:AB:91:CE:C4:0F:75:9E:D4
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:90:e2:9f:d6:ca:f9:16:15:e2:cf:f5:67:f6:06:76:39:90:
         18:76:d4:08:1c:51:66:94:3c:ed:e2:a2:04:b9:12:ba:d7:57:
         a2:e7:3c:30:75:8a:8a:d3:5b:64:5c:9b:5e:f0:8a:fc:cc:fb:
         a0:3c:aa:ef:ae:98:8e:9c:43:c9:42:7e:37:26:db:42:86:98:
         30:ba:50:f1:82:cf:d5:cb:5e:f5:63:18:8e:5c:41:ef:22:df:
         56:6f:1b:37:ea:59:e3:9e:81:d6:89:05:11:a5:5d:85:ce:3f:
         76:60:2e:38:2c:a1:29:57:bc:e8:ef:5c:da:0e:d9:59:c1:36:
         f5:5c:b0:ad:9a:3d:d4:e5:18:e8:df:c3:ac:68:24:95:36:e2:
         4b:8e:2f:9f:77:97:e6:22:4c:b5:92:08:41:a5:1b:14:29:96:
         b1:65:3e:28:16:f8:74:22:23:69:39:cf:4c:0f:d4:81:90:62:
         98:cd:2d:af:35:5e:d6:16:5d:d7:83:bb:47:39:be:01:ed:b6:
         4d:20:f9:b2:b1:9f:92:21:03:a5:4b:8a:d4:9e:5e:dc:e6:8d:
         f6:82:62:87:70:6a:74:f2:e2:17:c4:00:f8:84:66:43:91:7e:
         ac:15:65:2a:d5:d5:50:9f:32:32:c8:2e:d6:75:a2:fd:65:aa:
         33:59:6a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE8esQqfOXgIp2VHs2jOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDAzMThmMjY4NWUzMmQyZGJhOTIzZjY2NjI3NzE0Mjcz
NTk3MzgwHhcNMjYwODE0MjEwMDQ1WhcNMjYwODE1MjEwMDQ1WjAzMTEwLwYDVQQD
EyhmM2RmYWUxMGVjODQ4ZGE3ODlhNDcxNmRhYjkxY2VjNDBmNzU5ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWcxZKDR2W/ZZcSNCzJlObmQEmfB
z3/cnYfx4ryB9b3BkPDLvmW5zjKmHX1PJJxzTUsTUWrzaSgqIPEAbSqlVqSm38TN
h8A/3QM4uDd5c78VsiFiya492QJk2H7yp8aMK+iEmKqsIJny9b3errDrxAJH28WI
QwT6RAbQxKBQzCOVbDKJPqTuJoDXQhK6ml+EC7zLP3ABlrJhtGSvkx+99XILR1t2
f6DFK3JRjROM9666trezvkyJtg3rDul5URu+qOx8tF/OlooLFjHVg1HZ/ZalUeLY
bwQiHfe1BJwWzqsNwwZZ3m9kHX8WfB5L6vWuUhpIQT88LHPEpRbDnfAcGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPfrhDshI2niaRxbauRzsQPdZ7UMB8GA1UdIwQY
MBaAFNnQMY8mheMtLbqSP2ZidxQnNZc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEt
OTZkZGQ1YTAyMzlkLzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEtOTZkZGQ1YTAyMzlk
LzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJDin9bK
+RYV4s/1Z/YGdjmQGHbUCBxRZpQ87eKiBLkSutdXouc8MHWKitNbZFybXvCK/Mz7
oDyq766YjpxDyUJ+NybbQoaYMLpQ8YLP1cte9WMYjlxB7yLfVm8bN+pZ456B1okF
EaVdhc4/dmAuOCyhKVe86O9c2g7ZWcE29VywrZo91OUY6N/DrGgklTbiS44vn3eX
5iJMtZIIQaUbFCmWsWU+KBb4dCIjaTnPTA/UgZBimM0trzVe1hZd14O7Rzm+Ae22
TSD5srGfkiEDpUuK1J5e3OaN9oJih3BqdPLiF8QA+IRmQ5F+rBVlKtXVUJ8yMsgu
1nWi/WWqM1lq/Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:41 2026 by rpki-client