Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File:                     4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier:          glnsaKFNInRh+MBrFMGn4Cs0PD5IrYSkpHEz5O1h2Y4=
Subject key identifier:   33:BD:8E:08:14:0E:A3:86:08:EA:51:47:51:A5:47:0B:55:6A:46:09
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer:       /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial:       01A0016FAB5DB74C1E4D8CC27614D1BC5537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number:          08FD
Signing time:             Fri 14 Aug 2026 18:01:30 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:30 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:30 +0000
Files and hashes:         1: 0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa (hash: mtyUt15yu+f0GpFvD8FnDUSV4lO4SlvX/nIEW6w5cbU=)
                          2: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: gxSylk2wHoTWtM1heYQvnzpRdDX7DwVoC42OW/UxTM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:ab:5d:b7:4c:1e:4d:8c:c2:76:14:d1:bc:55:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
        Validity
            Not Before: Aug 14 18:01:30 2026 GMT
            Not After : Aug 15 18:01:30 2026 GMT
        Subject: CN=33bd8e08140ea38608ea514751a5470b556a4609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:c1:c8:9d:31:f2:15:16:a2:6a:95:26:9f:
                    87:b4:f8:8e:90:9b:51:99:98:26:ab:2d:91:0b:03:
                    5e:3c:f0:91:09:5a:6c:86:10:bf:44:7b:22:bd:d3:
                    95:be:1d:ea:27:78:19:2c:47:a8:5b:a8:79:67:71:
                    04:55:c3:12:d7:e2:9c:68:e1:c6:e4:46:5b:1d:fb:
                    9c:83:24:2e:8e:67:3b:f4:86:f4:ad:cd:90:71:b8:
                    15:49:cc:7e:66:a2:57:3d:80:c1:06:10:ce:dc:02:
                    8c:97:5e:64:c9:cb:88:9d:23:69:a3:6d:c4:d2:dc:
                    cf:57:fc:aa:94:00:2d:3b:dc:51:1e:91:65:06:27:
                    c7:1e:3d:c8:e7:44:51:db:d0:1a:af:4d:df:fa:54:
                    9c:be:e4:f2:e7:d2:d5:37:30:76:3f:80:4d:52:dc:
                    b3:4c:ab:3f:46:b8:5c:bd:de:60:7c:e8:bb:ac:66:
                    08:61:24:94:72:d6:49:b9:0c:5a:48:f1:1b:df:6c:
                    e7:c8:ce:c6:e5:53:eb:fa:b2:72:e1:fd:2e:c3:d0:
                    a2:3b:1e:65:3e:7e:b2:e7:c9:59:cb:e9:7d:c9:7c:
                    b5:5e:e8:cb:a9:e9:d8:e3:79:65:f8:b9:79:dd:2d:
                    a0:aa:31:be:b8:31:82:a9:fe:6b:01:4f:de:d5:dc:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BD:8E:08:14:0E:A3:86:08:EA:51:47:51:A5:47:0B:55:6A:46:09
            X509v3 Authority Key Identifier:
                keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:59:11:9b:22:21:7f:df:23:78:2e:a0:9d:0f:ee:a4:b1:62:
         7b:34:6b:98:49:a7:fb:18:36:2b:00:ae:e7:70:97:d3:04:52:
         2b:b3:d1:18:f4:4d:e9:4a:62:5a:69:dd:22:35:4f:39:25:15:
         84:55:ef:4d:73:30:17:e6:10:cc:69:3c:fb:0a:c6:52:28:6b:
         35:14:11:d7:24:d3:7a:30:92:b4:9e:d5:f0:f7:81:9c:3e:29:
         0d:4b:8a:4b:e3:73:3a:e6:9a:30:16:70:da:66:3d:64:53:ba:
         44:94:2a:eb:45:ab:b3:74:e4:b5:a2:55:40:dd:a9:d5:f0:4e:
         8b:0c:5a:06:ff:82:21:53:d8:e6:b9:5f:b7:15:19:0f:a6:ae:
         fe:e2:77:01:97:3d:0b:27:ef:a8:e0:a7:d6:17:da:8c:de:3e:
         71:d5:8b:86:ed:33:9c:36:09:1b:cb:91:67:6c:44:1e:ed:f6:
         a1:c6:63:89:1e:83:c0:10:34:2a:1b:63:f6:eb:2c:f8:2b:20:
         4a:5d:10:85:b4:ce:68:8e:ba:5c:a7:67:a7:e9:2e:ab:75:4a:
         b1:70:c8:90:31:6d:e1:ae:1c:c3:9e:ba:1d:2d:cd:0e:0d:05:
         26:31:b3:83:af:fc:bf:6f:b0:ee:76:88:d2:7a:11:93:01:52:
         6a:bd:ea:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb6tdt0weTYzCdhTRvFU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjUwOTY3MmI5ZDk5OGI0NjQ5Y2MzNzZhODI5ODc5ZTZm
ZWFjYTcwHhcNMjYwODE0MTgwMTMwWhcNMjYwODE1MTgwMTMwWjAzMTEwLwYDVQQD
EygzM2JkOGUwODE0MGVhMzg2MDhlYTUxNDc1MWE1NDcwYjU1NmE0NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEzByJ0x8hUWomqVJp+HtPiOkJtR
mZgmqy2RCwNePPCRCVpshhC/RHsivdOVvh3qJ3gZLEeoW6h5Z3EEVcMS1+KcaOHG
5EZbHfucgyQujmc79Ib0rc2QcbgVScx+ZqJXPYDBBhDO3AKMl15kycuInSNpo23E
0tzPV/yqlAAtO9xRHpFlBifHHj3I50RR29Aar03f+lScvuTy59LVNzB2P4BNUtyz
TKs/Rrhcvd5gfOi7rGYIYSSUctZJuQxaSPEb32znyM7G5VPr+rJy4f0uw9CiOx5l
Pn6y58lZy+l9yXy1XujLqenY43ll+Ll53S2gqjG+uDGCqf5rAU/e1dxhMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO9jggUDqOGCOpRR1GlRwtVakYJMB8GA1UdIwQY
MBaAFOG1CWcrnZmLRknMN2qCmHnm/qynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4Zjkt
M2VjNTIyNzcxZjQwLzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4ZjktM2VjNTIyNzcxZjQw
LzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVkRmyIh
f98jeC6gnQ/upLFiezRrmEmn+xg2KwCu53CX0wRSK7PRGPRN6UpiWmndIjVPOSUV
hFXvTXMwF+YQzGk8+wrGUihrNRQR1yTTejCStJ7V8PeBnD4pDUuKS+NzOuaaMBZw
2mY9ZFO6RJQq60Wrs3TktaJVQN2p1fBOiwxaBv+CIVPY5rlftxUZD6au/uJ3AZc9
CyfvqOCn1hfajN4+cdWLhu0znDYJG8uRZ2xEHu32ocZjiR6DwBA0Khtj9uss+Csg
Sl0QhbTOaI66XKdnp+kuq3VKsXDIkDFt4a4cw566HS3NDg0FJjGzg6/8v2+w7naI
0noRkwFSar3q1g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:26 2026 by rpki-client