Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          soRivr8fKRATevtVGguCnnmbclKrObXUTZYRhhcfH9Y=
Subject key identifier:   56:51:77:3D:2E:59:B1:A8:51:4B:FB:63:4E:12:8A:03:1A:94:58:7B
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01A0645AD9971E6D878AC54FC6A6AF52957B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0AC4
Signing time:             Wed 02 Sep 2026 23:01:10 +0000
Manifest this update:     Wed 02 Sep 2026 23:01:10 +0000
Manifest next update:     Thu 03 Sep 2026 23:01:10 +0000
Files and hashes:         1: 1-wxgSYN6azWWUrCaPDW7GpWeKi0.roa (hash: DPLds8jCOdoU+9WAoO0XaZ0zlPjKwpJ3akJ+Z80uiZg=)
                          2: Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa (hash: 4OoKitHUM2Cxcji9pDEeODDzqXWMR+bJbVbOObsHghk=)
                          3: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=)
                          4: FAAYpnv0apJm1WMjsv3PVyWYHW8.roa (hash: cRkV53u9HMf3IlgE7VmUP+PB8n6IJtBSTpmDwitbqpg=)
                          5: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: DEPt0CsNOtb21TkmnqcxX7dzU7xtS4vM5OtwLcxMBQ8=)
                          6: KacNY2NRCZHAdOB1lxgrSlTUZlM.roa (hash: qllOkGGUcuSdb7HoAuEKwUiZ9/GJv0Ub2eGz8KFRmtE=)
                          7: KnBTzsN71pvNUURw9MTkeAuiWEg.roa (hash: f3UjJWYdOCKN/sjw9LsoQPTsRyO9pJv7bf7OHVWD29I=)
                          8: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=)
                          9: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=)
                          10: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=)
                          11: bqQbHCxttVzgxNcTF0tbCdJVJgI.roa (hash: 1MVaNJ/MdqSqtNMpFBgMNrwtevfOonhxXKKdjTutsOE=)
                          12: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=)
                          13: hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (hash: l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=)
                          14: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=)
                          15: sJruewuKaSeVsdcx7O5wYrcqNzE.roa (hash: lXlw+sCAYn9qkIUAMBhvTHNQ6pkSMrMsj6GywXXUL9k=)
                          16: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=)
                          17: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=)
                          18: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=)
                          19: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:64:5a:d9:97:1e:6d:87:8a:c5:4f:c6:a6:af:52:95:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Sep  2 23:01:10 2026 GMT
            Not After : Sep  3 23:01:10 2026 GMT
        Subject: CN=5651773d2e59b1a8514bfb634e128a031a94587b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:87:23:79:53:07:f7:bd:9a:9d:d4:7c:54:
                    0b:97:5d:51:c1:6c:72:4a:57:7a:bc:d5:3e:b5:1b:
                    e9:7d:f3:e2:e4:3c:ea:76:bd:34:4b:d5:a8:6a:24:
                    f6:cf:cf:8d:2a:c1:78:40:fe:c5:59:6e:9b:08:55:
                    98:23:e4:a1:b2:e9:ce:b2:c2:fc:12:19:dc:d6:5f:
                    81:3b:e5:cb:65:e3:e7:02:a2:97:82:97:c0:4f:e3:
                    70:77:0b:ee:8c:a7:92:7e:7d:f7:5d:7b:96:0f:ab:
                    3f:c5:00:8a:d9:08:50:45:b1:fd:5f:f6:61:17:bd:
                    43:e5:b7:ce:a8:9f:43:c5:7d:12:e9:7f:65:47:2a:
                    06:5b:63:25:f3:10:c9:e9:a4:28:f8:c9:83:d4:bb:
                    a5:69:3a:fd:55:bb:8f:de:4f:63:fe:26:db:18:86:
                    a2:27:21:ec:fd:9f:a9:80:58:36:7d:ff:c9:45:a4:
                    f6:ee:af:46:e7:00:ae:51:ae:ba:61:c1:e0:6e:4e:
                    7b:f9:17:3b:f9:23:fc:38:da:c0:c8:ad:9e:57:d2:
                    ce:b4:78:e8:09:83:5d:ec:f6:0d:bd:dc:d7:e1:f3:
                    dc:07:64:8a:4a:5f:76:e2:a6:6c:71:1f:9f:97:4a:
                    69:91:8f:8d:6f:66:54:2b:aa:8a:88:52:33:02:4f:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:77:3D:2E:59:B1:A8:51:4B:FB:63:4E:12:8A:03:1A:94:58:7B
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:f0:88:44:96:7d:88:1e:06:82:5a:59:90:5f:64:f7:02:
         06:c2:02:40:ec:ee:7e:e2:81:b9:76:02:fb:a7:a1:e8:ac:e1:
         b5:a6:b5:3c:d1:b9:fc:61:d8:f7:c3:2c:e3:0c:66:a0:48:a2:
         8e:ad:27:bc:5a:f6:87:cb:c4:d8:73:c0:8e:25:70:54:a4:1d:
         0e:da:a3:6b:72:c9:a6:27:55:39:ba:b9:d4:c9:da:68:cf:b1:
         10:aa:ad:e9:26:82:5c:33:79:ae:02:52:aa:90:7b:cf:cf:23:
         13:f4:78:84:ce:0e:ce:03:5c:ec:15:95:2d:11:75:8c:5f:3f:
         2b:8e:56:16:58:3f:93:26:c9:02:f3:17:cd:d2:f9:15:53:a3:
         12:27:45:78:f9:94:ce:23:62:b1:81:8d:65:66:7b:b1:61:e9:
         3f:56:b9:f9:e0:a9:4d:66:03:26:10:80:5b:c1:15:5d:da:f7:
         f9:d7:31:d3:57:1a:40:ef:25:de:4f:eb:4f:a8:11:b4:08:be:
         60:1a:7b:a2:ce:48:87:b6:7c:f0:43:3e:8a:8f:e6:b5:b5:32:
         8c:3f:5a:c9:dc:06:0b:1e:ea:47:56:85:16:d3:0b:f8:91:87:
         86:66:16:51:81:e8:12:dc:0e:d8:3a:f7:1b:19:41:00:5e:4e:
         ba:8b:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:29:58 2026 by rpki-client