Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          crvH9inOtgARtQJW//Y4HV0tidhX2gfrjSkcZ0eXJxs=
Subject key identifier:   4B:BF:08:4C:F1:44:A9:70:06:A1:4A:FB:2B:B0:48:C5:38:37:2F:04
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       019FD94F02C7C8244A3915F5FB0FF1C42248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          0F45
Signing time:             Thu 06 Aug 2026 23:01:01 +0000
Manifest this update:     Thu 06 Aug 2026 23:01:01 +0000
Manifest next update:     Fri 07 Aug 2026 23:01:01 +0000
Files and hashes:         1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
                          2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: AVVzkkN1wnuhNvAjoCxw2R2S8n9l+VBvfKM30FQrXMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:4f:02:c7:c8:24:4a:39:15:f5:fb:0f:f1:c4:22:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Aug  6 23:01:01 2026 GMT
            Not After : Aug  7 23:01:01 2026 GMT
        Subject: CN=4bbf084cf144a97006a14afb2bb048c538372f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:67:0e:25:41:53:89:e6:5a:d3:6a:c6:bc:
                    56:4e:9b:1f:7c:4d:b8:4f:54:d5:d3:2c:91:08:bd:
                    9f:b5:35:92:ca:8a:ac:3a:42:ba:0b:fb:e1:92:6c:
                    2e:da:99:7c:78:b7:a4:49:03:8b:dc:62:02:c5:ff:
                    60:04:24:85:ea:b8:11:60:8e:f5:b1:d9:f8:03:2e:
                    49:81:38:1d:49:a1:a3:ea:7a:fd:72:67:5c:d2:a2:
                    e2:7c:14:87:34:79:a4:cc:69:39:f3:a3:f5:fc:05:
                    f2:c2:ce:83:9a:6a:6f:0b:bf:7a:57:a7:0d:f4:e7:
                    e6:54:07:ed:de:aa:87:53:74:95:e2:4d:ae:cd:04:
                    4e:8d:5a:a2:6a:e5:92:29:05:81:b4:a7:69:f1:e5:
                    f7:9f:ef:52:b6:16:e2:b8:3a:c7:6e:db:ed:9d:d6:
                    5e:8a:5e:c5:e0:22:4b:07:cd:16:b8:1e:a3:05:73:
                    df:16:d7:87:a6:5c:2f:55:f0:23:11:f4:2a:0e:47:
                    fe:81:69:f9:68:11:71:5f:0a:f3:e5:f6:9f:94:6c:
                    cc:6f:9d:77:68:73:07:12:20:fd:ee:bd:b1:d5:19:
                    59:c2:a2:6a:ac:55:06:a6:c2:b8:bf:78:4a:52:b5:
                    9a:bb:af:23:f0:db:74:c4:54:46:2f:6e:30:24:aa:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:08:4C:F1:44:A9:70:06:A1:4A:FB:2B:B0:48:C5:38:37:2F:04
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:79:45:bb:60:2f:bb:6a:1a:e7:d7:97:5f:b7:f8:f2:57:
         b9:76:85:7a:d9:a0:7e:91:8a:7b:ff:59:b2:51:6f:54:9d:f2:
         21:21:1e:3a:32:2f:a4:11:c7:9c:5d:cd:43:02:11:3a:9a:59:
         59:f3:98:de:f4:4c:26:8c:c7:67:4c:aa:7b:93:04:fb:8a:53:
         75:14:13:74:74:d7:53:2f:5b:3a:70:2c:a4:d6:01:d7:25:f9:
         b7:22:fd:e3:c3:af:96:44:e6:e4:be:f3:f4:00:1a:e5:2f:00:
         46:2c:b3:74:5e:a1:17:98:a5:4d:97:bd:e3:15:b7:a4:ef:5c:
         c1:e4:fd:cc:56:ea:c8:2c:d5:e6:1a:dd:01:c6:55:5e:58:a2:
         d2:64:e9:77:3e:57:de:b7:b5:3b:bd:fb:ff:ba:f7:53:6b:0e:
         35:58:13:c7:38:70:6e:4a:87:97:01:41:c1:c8:57:b6:3f:bc:
         98:84:36:31:1d:7c:95:8a:43:a7:1b:a7:0e:49:b7:71:4b:90:
         d2:23:0a:0c:49:b4:07:2d:26:63:a3:f1:46:d2:27:6f:31:ec:
         92:77:9f:99:d2:f0:00:64:bc:29:5c:80:c4:87:e6:a9:f9:37:
         b2:14:5e:cf:84:d2:e1:8f:1a:88:35:5b:12:24:86:d3:35:23:
         0f:a4:85:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/ZTwLHyCRKORX1+w/xxCJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh
MGZmNDMwHhcNMjYwODA2MjMwMTAxWhcNMjYwODA3MjMwMTAxWjAzMTEwLwYDVQQD
Eyg0YmJmMDg0Y2YxNDRhOTcwMDZhMTRhZmIyYmIwNDhjNTM4MzcyZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb9nDiVBU4nmWtNqxrxWTpsffE24
T1TV0yyRCL2ftTWSyoqsOkK6C/vhkmwu2pl8eLekSQOL3GICxf9gBCSF6rgRYI71
sdn4Ay5JgTgdSaGj6nr9cmdc0qLifBSHNHmkzGk586P1/AXyws6DmmpvC796V6cN
9OfmVAft3qqHU3SV4k2uzQROjVqiauWSKQWBtKdp8eX3n+9SthbiuDrHbtvtndZe
il7F4CJLB80WuB6jBXPfFteHplwvVfAjEfQqDkf+gWn5aBFxXwrz5faflGzMb513
aHMHEiD97r2x1RlZwqJqrFUGpsK4v3hKUrWau68j8Nt0xFRGL24wJKqSewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu/CEzxRKlwBqFK+yuwSMU4Ny8EMB8GA1UdIwQY
MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt
NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm
LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7Z5Rbtg
L7tqGufXl1+3+PJXuXaFetmgfpGKe/9ZslFvVJ3yISEeOjIvpBHHnF3NQwIROppZ
WfOY3vRMJozHZ0yqe5ME+4pTdRQTdHTXUy9bOnAspNYB1yX5tyL948OvlkTm5L7z
9AAa5S8ARiyzdF6hF5ilTZe94xW3pO9cweT9zFbqyCzV5hrdAcZVXlii0mTpdz5X
3re1O737/7r3U2sONVgTxzhwbkqHlwFBwchXtj+8mIQ2MR18lYpDpxunDkm3cUuQ
0iMKDEm0By0mY6PxRtInbzHsknefmdLwAGS8KVyAxIfmqfk3shRez4TS4Y8aiDVb
EiSG0zUjD6SFyw==
-----END CERTIFICATE-----
Generated at Fri Aug 7 08:07:38 2026 by rpki-client