Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          26dcVFaHi5eH3W9ceEA3+fO8e/jTPNXsk+ZTPdIyLxE=
Subject key identifier:   71:2F:3A:FE:F9:CC:46:E7:6B:BE:F7:7B:E0:B4:54:13:6F:D6:0D:25
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       01A0024AD6DE2BA01319EE81A727A0B12810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          1A07
Signing time:             Fri 14 Aug 2026 22:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:54 +0000
Files and hashes:         1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: E6BXQf+fbbPs+1KBXqHixKyRIbyBLSt3xCgCUQgcBx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:d6:de:2b:a0:13:19:ee:81:a7:27:a0:b1:28:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Aug 14 22:00:54 2026 GMT
            Not After : Aug 15 22:00:54 2026 GMT
        Subject: CN=712f3afef9cc46e76bbef77be0b454136fd60d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:44:95:5e:9c:ab:f8:b9:ff:0b:f7:6d:77:
                    21:83:ad:b6:ff:f3:64:91:d6:24:ad:97:71:ca:44:
                    df:1a:51:c6:51:ab:b1:36:03:11:c5:51:6e:6b:ee:
                    70:83:d6:43:86:ec:24:35:22:a1:20:ea:fa:26:f4:
                    e0:dd:29:73:7d:da:31:0a:93:cb:14:f8:be:79:b3:
                    89:cb:64:6e:c2:5a:ca:d7:59:11:2e:e3:5b:11:72:
                    76:89:d2:8b:3f:8c:bc:60:d3:6b:d5:45:bc:d4:1f:
                    ce:61:d4:94:bd:01:29:fb:0c:c8:51:f7:1f:e1:3c:
                    23:03:5f:ac:3e:ae:46:bf:59:58:04:c5:b6:5b:55:
                    ad:56:ac:5c:52:18:72:86:a3:9d:33:30:d5:0d:7a:
                    1e:a1:fd:bd:9f:04:78:91:26:3b:82:83:2b:b5:8f:
                    17:5b:4a:2a:25:b4:e0:db:a9:32:e8:9e:d7:53:23:
                    42:4c:48:81:9c:a6:d5:04:7a:c0:30:52:d8:1a:de:
                    89:83:cb:c3:5d:20:b3:6e:8b:56:bc:2c:69:a1:f8:
                    d7:e0:13:60:90:be:09:ad:34:8a:ba:fd:2e:73:50:
                    a8:bd:62:7e:8c:d4:9f:05:4c:3b:4c:15:8f:60:56:
                    d3:e2:4c:c8:9e:4e:f7:32:09:1f:1d:16:47:3c:fc:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2F:3A:FE:F9:CC:46:E7:6B:BE:F7:7B:E0:B4:54:13:6F:D6:0D:25
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:90:39:2b:40:bf:0d:e1:3a:ab:0a:9e:67:da:52:f3:ef:
         d8:b8:a4:2a:d8:86:b2:af:a1:4e:e7:80:14:ff:59:ca:c2:da:
         79:f2:ed:59:d5:7f:36:b6:80:34:d2:c0:32:bf:5a:4f:40:71:
         b0:60:e3:4c:48:8f:cc:10:18:63:d4:bd:df:0b:50:3e:52:22:
         61:0c:80:1f:73:c7:6f:7e:95:22:e2:75:93:16:33:98:da:51:
         f4:07:fe:b7:97:45:c5:7f:63:38:da:73:14:8b:2f:f6:22:84:
         65:3b:8b:11:61:35:4f:d7:d6:f0:89:90:12:71:d2:6d:b7:a7:
         ef:03:35:10:c5:8b:a0:97:9b:c3:c3:96:73:10:9b:9a:1d:c6:
         65:2d:d9:3b:75:b2:6a:a4:61:0d:07:43:17:b0:ff:ec:c5:9d:
         9e:8e:d4:f6:ec:c0:86:ea:38:79:9b:af:8d:43:7a:3c:bf:03:
         11:74:66:fb:3c:60:c1:b2:f9:63:ba:bc:31:a9:24:01:3b:aa:
         15:d1:67:b7:57:0f:cc:83:5b:3c:cd:4b:c8:b6:a4:1d:9e:4b:
         63:15:14:72:87:4e:b7:ac:6e:5a:57:76:5d:90:ff:2a:3b:0f:
         3a:97:fe:fb:b0:47:7b:84:15:c6:0a:de:58:3d:16:2a:a3:79:
         a0:e4:e0:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACStbeK6ATGe6BpyegsSgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMzc4ZGYyN2JkOTI2MGM3ZWIxNTI3M2U5OTNlMzZiMDk4
NWRhMTAwHhcNMjYwODE0MjIwMDU0WhcNMjYwODE1MjIwMDU0WjAzMTEwLwYDVQQD
Eyg3MTJmM2FmZWY5Y2M0NmU3NmJiZWY3N2JlMGI0NTQxMzZmZDYwZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62BElV6cq/i5/wv3bXchg622//Nk
kdYkrZdxykTfGlHGUauxNgMRxVFua+5wg9ZDhuwkNSKhIOr6JvTg3SlzfdoxCpPL
FPi+ebOJy2RuwlrK11kRLuNbEXJ2idKLP4y8YNNr1UW81B/OYdSUvQEp+wzIUfcf
4TwjA1+sPq5Gv1lYBMW2W1WtVqxcUhhyhqOdMzDVDXoeof29nwR4kSY7goMrtY8X
W0oqJbTg26ky6J7XUyNCTEiBnKbVBHrAMFLYGt6Jg8vDXSCzbotWvCxpofjX4BNg
kL4JrTSKuv0uc1CovWJ+jNSfBUw7TBWPYFbT4kzInk73MgkfHRZHPPyilwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEvOv75zEbna773e+C0VBNv1g0lMB8GA1UdIwQY
MBaAFGs3jfJ72SYMfrFSc+mT42sJhdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgt
OTdmYTgwYzBkZjQxLzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgtOTdmYTgwYzBkZjQx
LzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6eQOStA
vw3hOqsKnmfaUvPv2LikKtiGsq+hTueAFP9ZysLaefLtWdV/NraANNLAMr9aT0Bx
sGDjTEiPzBAYY9S93wtQPlIiYQyAH3PHb36VIuJ1kxYzmNpR9Af+t5dFxX9jONpz
FIsv9iKEZTuLEWE1T9fW8ImQEnHSbben7wM1EMWLoJebw8OWcxCbmh3GZS3ZO3Wy
aqRhDQdDF7D/7MWdno7U9uzAhuo4eZuvjUN6PL8DEXRm+zxgwbL5Y7q8MakkATuq
FdFnt1cPzINbPM1LyLakHZ5LYxUUcodOt6xuWld2XZD/KjsPOpf++7BHe4QVxgre
WD0WKqN5oOTg2g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:39:04 2026 by rpki-client