Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File:                     kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier:          kehjOyLB3S6K/arIlOKclrK+4vjvSR+K9CifSeZKPz0=
Subject key identifier:   86:F9:03:78:B9:06:E6:59:57:97:1E:43:CA:1D:0A:60:F4:30:66:31
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer:       /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial:       01A0024B6E601860B69EC709608F912FF392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number:          08FC
Signing time:             Fri 14 Aug 2026 22:01:32 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:32 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:32 +0000
Files and hashes:         1: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: SlXaFDeteE9sijAj4bxeKU+Uul7LZPSSghXMYqT2Bxo=)
                          2: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (hash: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:6e:60:18:60:b6:9e:c7:09:60:8f:91:2f:f3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
        Validity
            Not Before: Aug 14 22:01:32 2026 GMT
            Not After : Aug 15 22:01:32 2026 GMT
        Subject: CN=86f90378b906e65957971e43ca1d0a60f4306631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:99:90:14:ba:48:42:8b:98:7b:40:9b:85:
                    a8:07:22:d3:88:48:07:31:87:26:4e:9e:b5:58:9f:
                    b4:25:a4:29:ab:2c:26:4f:33:51:44:aa:09:af:14:
                    1f:47:bd:d1:48:e1:9c:ab:24:1d:b7:ee:7d:41:b6:
                    58:8e:46:35:39:99:42:b2:c3:29:4b:4a:fe:08:12:
                    8a:a9:ff:95:7b:dd:81:01:cf:b6:b8:47:1e:49:4b:
                    86:e6:76:09:3f:4a:07:65:b3:d0:76:73:c5:2a:c5:
                    d5:88:d5:74:99:ec:36:d8:4e:5f:fa:93:0c:57:ac:
                    6b:02:9b:c3:cb:46:cb:41:a6:1a:10:70:59:e7:d9:
                    31:ca:10:a6:77:03:36:7b:35:bd:71:ca:31:43:33:
                    73:85:23:c5:a2:02:99:79:4f:bc:8f:40:20:94:f2:
                    60:d2:c5:5a:03:0b:b1:12:ab:4f:cc:ce:8d:b3:16:
                    7e:8e:1e:c6:65:6f:18:ab:ae:63:59:c2:3f:33:3b:
                    51:74:b2:36:ec:80:c6:cd:a7:b8:7c:e4:b9:79:89:
                    a3:25:4e:f6:be:ba:f4:e8:a8:db:75:dd:4e:9e:4a:
                    07:a6:52:8a:49:3f:69:83:5e:7f:52:4d:15:65:87:
                    3b:6c:4c:35:4e:71:45:40:3f:44:b9:cf:b5:6e:c4:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:03:78:B9:06:E6:59:57:97:1E:43:CA:1D:0A:60:F4:30:66:31
            X509v3 Authority Key Identifier:
                keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6c:3b:6d:af:46:af:2e:66:1c:a6:f6:29:3d:98:89:03:20:
         01:51:62:6e:3b:57:ed:94:65:df:83:9e:04:01:9b:67:86:e8:
         0d:aa:69:c3:fc:bb:bc:55:19:2a:6d:ec:5e:f6:2d:a8:bc:47:
         a1:26:d1:66:2c:f6:f4:96:db:be:cf:6c:8a:1a:95:7b:6a:7a:
         49:0d:73:52:88:72:b2:70:65:b1:ab:fb:72:89:99:7a:4c:23:
         ce:12:5e:83:3b:f0:92:45:08:0c:2e:16:45:b5:fa:37:9d:f2:
         50:0f:78:40:2c:f3:2e:a9:b7:09:29:d1:18:4e:ab:68:d7:d4:
         08:ab:a6:5d:a2:62:a7:94:54:c7:d9:94:e1:89:ec:f6:de:71:
         73:44:ef:d3:54:f7:f3:8a:69:78:a6:8f:a0:ca:9a:20:4c:82:
         04:e4:0b:5c:93:0b:c3:07:bf:a8:92:f3:ab:f1:27:d1:9a:8f:
         36:86:b7:1e:28:d0:cd:59:1a:74:f8:09:f3:3e:84:ef:42:54:
         0a:b3:85:de:c1:ef:2d:76:2d:1e:25:52:79:a2:41:96:88:23:
         97:c5:d5:6d:84:8e:c4:c9:01:14:9c:91:7d:ad:77:0e:f5:8e:
         d6:87:af:ba:9a:8b:5b:45:ee:6b:dd:8a:79:6d:84:ed:07:c4:
         73:8a:51:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS25gGGC2nscJYI+RL/OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzM4MGU4Yjg1MDQ1NGRiMzgxZGRkZWI5YWMyY2M4YTJm
NjI1MzEwHhcNMjYwODE0MjIwMTMyWhcNMjYwODE1MjIwMTMyWjAzMTEwLwYDVQQD
Eyg4NmY5MDM3OGI5MDZlNjU5NTc5NzFlNDNjYTFkMGE2MGY0MzA2NjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXeZkBS6SEKLmHtAm4WoByLTiEgH
MYcmTp61WJ+0JaQpqywmTzNRRKoJrxQfR73RSOGcqyQdt+59QbZYjkY1OZlCssMp
S0r+CBKKqf+Ve92BAc+2uEceSUuG5nYJP0oHZbPQdnPFKsXViNV0mew22E5f+pMM
V6xrApvDy0bLQaYaEHBZ59kxyhCmdwM2ezW9ccoxQzNzhSPFogKZeU+8j0AglPJg
0sVaAwuxEqtPzM6NsxZ+jh7GZW8Yq65jWcI/MztRdLI27IDGzae4fOS5eYmjJU72
vrr06Kjbdd1OnkoHplKKST9pg15/Uk0VZYc7bEw1TnFFQD9Euc+1bsSUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb5A3i5BuZZV5ceQ8odCmD0MGYxMB8GA1UdIwQY
MBaAFJEzgOi4UEVNs4Hd3rmsLMii9iUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODIt
OTRlNzAwYmQ1NWY1LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODItOTRlNzAwYmQ1NWY1
LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWw7ba9G
ry5mHKb2KT2YiQMgAVFibjtX7ZRl34OeBAGbZ4boDappw/y7vFUZKm3sXvYtqLxH
oSbRZiz29Jbbvs9sihqVe2p6SQ1zUohysnBlsav7comZekwjzhJegzvwkkUIDC4W
RbX6N53yUA94QCzzLqm3CSnRGE6raNfUCKumXaJip5RUx9mU4Yns9t5xc0Tv01T3
84ppeKaPoMqaIEyCBOQLXJMLwwe/qJLzq/En0ZqPNoa3HijQzVkadPgJ8z6E70JU
CrOF3sHvLXYtHiVSeaJBlogjl8XVbYSOxMkBFJyRfa13DvWO1oevupqLW0Xua92K
eW2E7QfEc4pRhA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:30:00 2026 by rpki-client