Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          fejCGTdi7lD9THFinm8/XaQdKa2/JI+BV6OMFLc33L8=
Subject key identifier:   AB:53:8A:6F:AC:02:65:36:96:16:00:DE:B9:22:FC:05:C5:F7:F4:A7
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       01A00213F24A83FAD0A09CA55BE38E3E8AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          10F2
Signing time:             Fri 14 Aug 2026 21:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:56 +0000
Files and hashes:         1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: WxSawz23SWDnI7P5hU81w6TpAhRxZEFY/Doh/2qddtQ=)
                          2: 5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa (hash: 7VoUKco9uMR4votOVTE4cFdkMXMlmmD0Z2XuyuOwo54=)
                          3: D6gTiVO-9PFx1VXaAiVU2jihjro.roa (hash: cxYog1EZCaoK2oy6il6DzlbbblthBZpzQajZ4Iuz3ss=)
                          4: Go5O8u6koNHV7b7UoH00mholn8I.roa (hash: iLDBMtL7MeCo+uMKF6jUonWy9kHpSBrH0Ajuok1AP1g=)
                          5: RHtSPb_4urWRb_Me8JE-aMOq7ME.roa (hash: WYOOK4rHLtPNbsObjpbWYMyv+6VV44Z6DDVLnIDNy/c=)
                          6: faOrucFqifHg9ZQWslyFQV3sAg8.roa (hash: +17wes5PNs8b98M2LmcNOgvHcF8OBtgbRoMn5hJbWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:f2:4a:83:fa:d0:a0:9c:a5:5b:e3:8e:3e:8a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Aug 14 21:00:56 2026 GMT
            Not After : Aug 15 21:00:56 2026 GMT
        Subject: CN=ab538a6fac026536961600deb922fc05c5f7f4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:68:c3:52:bf:81:c3:46:fa:84:ea:bd:d6:
                    2c:ad:e1:dd:6e:da:2d:ec:d4:63:0c:e0:d9:df:b6:
                    e0:c8:42:1f:32:b5:c9:08:53:1d:77:16:ac:5e:20:
                    48:22:15:7e:70:fd:cb:db:7a:fc:64:1b:04:6c:16:
                    a2:7f:40:61:c7:da:83:20:81:50:35:ff:cb:0d:6c:
                    30:cf:9f:d1:91:2b:e0:12:7d:46:cf:a1:3c:eb:1b:
                    40:09:55:58:df:21:b2:3f:45:7f:e5:85:70:48:6e:
                    d8:ed:c9:f2:da:78:a8:a9:1c:69:1a:f6:76:7e:ad:
                    9e:ba:c2:f9:9d:90:e9:ca:ed:09:a4:c9:1e:06:d4:
                    d8:50:59:9e:cb:f0:c2:b6:2a:16:65:e2:b4:ef:f3:
                    a4:a7:82:a3:79:19:ba:71:cf:ec:c9:12:45:75:52:
                    be:fb:23:4f:c4:49:3a:a4:07:f7:3f:43:08:53:49:
                    56:b2:1c:58:91:46:b0:49:43:51:aa:b8:e6:0f:88:
                    e6:62:99:6b:97:5a:30:dc:9c:0a:07:dd:15:38:51:
                    8f:f0:2c:10:48:15:33:bd:e7:ba:f3:a9:af:e8:11:
                    28:ec:05:27:51:dd:1c:3d:9d:8c:e3:7a:0f:ee:9d:
                    49:a0:b8:d7:4c:b9:03:9d:f8:97:92:7b:ab:68:0a:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:8A:6F:AC:02:65:36:96:16:00:DE:B9:22:FC:05:C5:F7:F4:A7
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:33:b1:17:c2:dd:09:ee:8c:34:63:62:58:72:75:19:21:
         d3:07:d1:d6:c5:e2:06:99:53:99:5b:a1:11:19:1d:33:6c:0a:
         d2:d0:1e:0e:bf:8c:c7:dd:eb:d6:a5:1b:f3:d5:0d:fb:3f:11:
         fd:fd:b0:3a:b9:a4:ff:c1:34:fd:56:05:bf:7f:0c:b4:5c:05:
         17:09:d9:9a:87:4f:f3:d3:4d:3a:a2:5c:d6:93:d2:f1:4a:4d:
         df:77:67:3e:c2:b9:5f:c5:8f:ba:83:19:01:1c:9d:86:af:12:
         e3:76:96:52:14:74:c2:e8:91:5a:3b:fb:65:39:f8:a5:49:c0:
         be:14:b5:37:a9:e1:ae:02:7e:7c:9e:fe:da:48:a5:a5:8a:9c:
         1d:9b:6e:61:3c:35:1f:0a:91:23:90:64:7c:c9:f1:61:45:38:
         69:28:c5:d9:07:e2:14:62:d8:a9:5a:74:0f:a3:17:79:eb:ad:
         5b:8c:82:37:4d:37:4a:8a:10:6b:ef:d9:58:9b:67:32:37:f1:
         38:83:38:ed:18:f8:61:f0:73:64:2b:e3:46:98:ad:64:8c:35:
         e7:9a:bc:53:07:f9:e4:69:b8:da:e2:98:cd:87:81:cf:62:c4:
         98:55:da:70:0e:cc:30:92:fd:83:17:f0:bf:60:70:81:00:78:
         b9:61:ee:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE/JKg/rQoJylW+OOPorIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2
ZWM2ZTYwHhcNMjYwODE0MjEwMDU2WhcNMjYwODE1MjEwMDU2WjAzMTEwLwYDVQQD
EyhhYjUzOGE2ZmFjMDI2NTM2OTYxNjAwZGViOTIyZmMwNWM1ZjdmNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgVow1K/gcNG+oTqvdYsreHdbtot
7NRjDODZ37bgyEIfMrXJCFMddxasXiBIIhV+cP3L23r8ZBsEbBaif0Bhx9qDIIFQ
Nf/LDWwwz5/RkSvgEn1Gz6E86xtACVVY3yGyP0V/5YVwSG7Y7cny2nioqRxpGvZ2
fq2eusL5nZDpyu0JpMkeBtTYUFmey/DCtioWZeK07/Okp4KjeRm6cc/syRJFdVK+
+yNPxEk6pAf3P0MIU0lWshxYkUawSUNRqrjmD4jmYplrl1ow3JwKB90VOFGP8CwQ
SBUzvee686mv6BEo7AUnUd0cPZ2M43oP7p1JoLjXTLkDnfiXknuraAo0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtTim+sAmU2lhYA3rki/AXF9/SnMB8GA1UdIwQY
MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt
OTE2NGUzNTJhODNjLzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj
LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdIzsRfC
3QnujDRjYlhydRkh0wfR1sXiBplTmVuhERkdM2wK0tAeDr+Mx93r1qUb89UN+z8R
/f2wOrmk/8E0/VYFv38MtFwFFwnZmodP89NNOqJc1pPS8UpN33dnPsK5X8WPuoMZ
ARydhq8S43aWUhR0wuiRWjv7ZTn4pUnAvhS1N6nhrgJ+fJ7+2kilpYqcHZtuYTw1
HwqRI5BkfMnxYUU4aSjF2QfiFGLYqVp0D6MXeeutW4yCN003SooQa+/ZWJtnMjfx
OIM47Rj4YfBzZCvjRpitZIw155q8Uwf55Gm42uKYzYeBz2LEmFXacA7MMJL9gxfw
v2BwgQB4uWHuVw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:01 2026 by rpki-client