Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          Tkb3QCl8zFClX7483tm6HUnRxo4swvPRW7QfXfSR9z8=
Subject key identifier:   65:68:C3:A4:38:27:94:58:28:6C:A9:88:44:B6:E4:20:11:19:91:69
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       01A002B91CE5100DAA907B589448A956C264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          0CE1
Signing time:             Sat 15 Aug 2026 00:01:21 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:21 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:21 +0000
Files and hashes:         1: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (hash: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps=)
                          2: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: Wtk6qe6Mbyw7bWRK+AN8jBoYOqlkC4j54yMWVvjjTYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:1c:e5:10:0d:aa:90:7b:58:94:48:a9:56:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Aug 15 00:01:21 2026 GMT
            Not After : Aug 16 00:01:21 2026 GMT
        Subject: CN=6568c3a438279458286ca98844b6e42011199169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:e5:8c:ec:d3:0a:ee:cc:41:e4:9b:51:7c:
                    ba:96:87:64:c0:11:38:88:16:78:37:11:f4:06:9e:
                    b4:70:c0:98:2a:17:f7:cc:6d:fe:b2:21:5d:42:15:
                    05:d1:db:95:12:56:4e:cd:cf:e0:db:ea:1a:d3:86:
                    6b:f1:d5:6f:bf:05:35:f6:83:20:6e:fe:c9:01:ea:
                    10:f6:2d:e5:29:71:9c:cb:51:29:77:12:c9:38:e3:
                    19:21:b9:c5:57:2c:a5:50:39:68:a9:f4:e9:70:4c:
                    e1:94:ab:de:de:19:0e:a9:1b:cd:81:c4:e8:a8:02:
                    47:59:55:16:d7:90:78:1a:71:2e:66:c6:30:32:b5:
                    67:b1:31:01:b4:5f:cd:4e:a6:c8:6b:58:1e:f1:e7:
                    10:d9:bf:65:50:c4:64:3b:50:6c:30:a7:42:27:d9:
                    7b:bc:d5:d0:fd:c0:19:9e:49:48:0d:34:2b:3d:13:
                    b1:81:a8:2a:9f:c6:f2:f4:01:a6:66:e5:23:1c:c4:
                    ee:80:28:91:10:6d:b4:1c:76:6d:77:38:cc:7c:ad:
                    d6:29:2f:06:b6:7c:cf:87:53:45:3a:2b:6d:a1:42:
                    ea:5a:07:1c:20:24:30:34:1b:fb:a0:f2:b9:f4:fb:
                    43:f4:07:6d:ef:73:9d:9b:1e:fb:6b:51:0c:a0:fc:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:C3:A4:38:27:94:58:28:6C:A9:88:44:B6:E4:20:11:19:91:69
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:37:33:72:24:5d:c9:da:a7:67:28:91:c4:f6:5a:cf:c6:5c:
         92:87:72:0b:f7:d2:82:2d:ed:bc:1d:2d:11:96:bc:75:ac:8d:
         9b:83:a8:46:29:ae:e2:98:17:b5:e5:25:72:3d:ea:5a:08:2d:
         29:c2:f2:0a:12:a1:ff:6b:00:06:35:8b:52:68:a9:f4:e9:ef:
         a3:fb:12:95:72:f7:84:68:ba:ce:a7:c0:7a:1a:35:7b:0f:62:
         fa:d1:d8:35:a4:dc:43:d3:6a:11:23:64:9c:49:6f:17:03:b0:
         6c:10:1b:70:32:6b:0b:b0:67:ee:6c:b9:a0:6a:8c:c9:fa:3b:
         3e:49:8c:c2:a8:e0:08:16:98:a3:b3:b6:8b:79:3a:cd:e4:f1:
         66:da:79:39:3b:cd:c6:4f:c9:63:1f:b6:1e:79:37:ef:35:c5:
         35:ca:39:ce:aa:10:be:aa:dd:9a:0b:d8:50:a4:d1:c7:40:35:
         2d:db:02:de:c2:4a:da:b6:11:3f:d2:d8:13:ba:9b:43:18:f4:
         a6:a3:2b:10:d6:05:13:55:d0:5e:bd:1d:66:29:0c:aa:a4:60:
         3b:2e:56:dc:bc:c2:32:40:f0:09:0c:ed:a2:57:08:a0:ae:bf:
         39:c0:77:be:98:c5:76:bb:14:b0:34:cb:79:72:54:ff:d7:04:
         5b:33:60:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuRzlEA2qkHtYlEipVsJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjYwODE1MDAwMTIxWhcNMjYwODE2MDAwMTIxWjAzMTEwLwYDVQQD
Eyg2NTY4YzNhNDM4Mjc5NDU4Mjg2Y2E5ODg0NGI2ZTQyMDExMTk5MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxnljOzTCu7MQeSbUXy6lodkwBE4
iBZ4NxH0Bp60cMCYKhf3zG3+siFdQhUF0duVElZOzc/g2+oa04Zr8dVvvwU19oMg
bv7JAeoQ9i3lKXGcy1EpdxLJOOMZIbnFVyylUDloqfTpcEzhlKve3hkOqRvNgcTo
qAJHWVUW15B4GnEuZsYwMrVnsTEBtF/NTqbIa1ge8ecQ2b9lUMRkO1BsMKdCJ9l7
vNXQ/cAZnklIDTQrPROxgagqn8by9AGmZuUjHMTugCiREG20HHZtdzjMfK3WKS8G
tnzPh1NFOittoULqWgccICQwNBv7oPK59PtD9Adt73Odmx77a1EMoPx2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVow6Q4J5RYKGypiES25CARGZFpMB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTczciRd
ydqnZyiRxPZaz8ZckodyC/fSgi3tvB0tEZa8dayNm4OoRimu4pgXteUlcj3qWggt
KcLyChKh/2sABjWLUmip9Onvo/sSlXL3hGi6zqfAeho1ew9i+tHYNaTcQ9NqESNk
nElvFwOwbBAbcDJrC7Bn7my5oGqMyfo7PkmMwqjgCBaYo7O2i3k6zeTxZtp5OTvN
xk/JYx+2Hnk37zXFNco5zqoQvqrdmgvYUKTRx0A1LdsC3sJK2rYRP9LYE7qbQxj0
pqMrENYFE1XQXr0dZikMqqRgOy5W3LzCMkDwCQztolcIoK6/OcB3vpjFdrsUsDTL
eXJU/9cEWzNg3g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:22 2026 by rpki-client