Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File:                     iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier:          Vi1BipJokIyK1oYsdV8L/qkiYI+cbxVU3PDzHz5VN1w=
Subject key identifier:   43:09:29:88:75:13:9D:B4:25:22:F4:14:EC:DF:16:D2:CA:BF:02:20
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer:       /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial:       019FF83580E842ABF799F67FD70FF6E5771D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number:          0FED
Signing time:             Wed 12 Aug 2026 23:01:23 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:23 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:23 +0000
Files and hashes:         1: MPdIoBhSamsoceGH97ZrbeY-7Y4.roa (hash: xk+VO+lT2ZL0Nzt8GYWzkONFJ8wXFr2d45kNV/RsFNQ=)
                          2: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: HjtnyVoBh+n07A6bWU1IErlqABiSrmZz6eMf8JVgX9k=)
                          3: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (hash: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA=)
                          4: uUrDuBilHzuoCgA80rJqPJxqSNQ.roa (hash: 77BWKMeC9pAnIWkDSdffjc6huYPIszzufpj7ouuEVAY=)
                          5: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (hash: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:80:e8:42:ab:f7:99:f6:7f:d7:0f:f6:e5:77:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
        Validity
            Not Before: Aug 12 23:01:23 2026 GMT
            Not After : Aug 13 23:01:23 2026 GMT
        Subject: CN=4309298875139db42522f414ecdf16d2cabf0220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:48:04:bb:18:18:8a:91:23:c7:9f:14:b7:
                    a5:20:50:c5:c6:d6:33:2e:28:cd:44:b5:4a:56:e8:
                    40:19:ac:60:cf:75:48:14:f7:09:04:83:0b:45:e1:
                    bb:35:e9:52:ff:c4:a5:9d:50:84:dd:50:7b:9c:e8:
                    76:6c:9b:be:fa:d1:9b:d7:ed:87:86:20:54:67:ee:
                    66:bc:94:6f:f1:9e:22:8b:1b:d2:bf:c7:cf:cd:e0:
                    ca:33:f9:23:4a:89:17:82:5f:77:ca:08:90:ef:80:
                    56:32:e5:65:2e:ff:a7:0d:45:f6:90:e2:11:be:0d:
                    5f:f6:c4:b0:70:b3:b8:2d:f0:2d:72:52:25:54:1e:
                    12:5f:78:5d:e9:72:f2:cb:02:09:a5:91:10:98:e6:
                    6e:d9:2e:09:5a:23:0e:ea:68:fb:ab:1a:43:1d:10:
                    9b:d8:d2:61:2b:11:22:8d:ec:ca:33:ab:0b:15:8f:
                    5c:3a:ad:93:4a:02:0b:f8:5d:35:50:07:d8:fd:b3:
                    69:02:28:60:81:32:03:35:d1:b6:55:70:1e:5c:07:
                    ea:76:57:60:5e:9b:59:46:fd:1a:3d:bd:7b:f6:19:
                    98:a9:b1:4d:7c:07:29:63:b4:e2:c9:3c:d0:b2:72:
                    83:a3:f7:da:e0:17:d0:52:e4:83:58:10:3d:7c:fc:
                    2a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:09:29:88:75:13:9D:B4:25:22:F4:14:EC:DF:16:D2:CA:BF:02:20
            X509v3 Authority Key Identifier:
                keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:97:19:9c:6e:d5:60:8c:76:12:c4:d7:b5:4b:00:d6:ea:
         13:68:77:47:9e:db:4d:87:c2:28:16:97:d1:8c:97:0c:2d:1f:
         07:3a:af:22:a6:63:61:08:bc:b7:cf:21:e6:4c:0a:2d:5a:30:
         51:7b:a4:77:57:d1:5b:42:65:4f:e8:1b:fd:dd:0f:23:57:bc:
         ef:15:a8:18:90:97:71:b1:cd:ef:97:8e:38:a7:d3:99:1b:cd:
         4b:91:09:2c:f4:c7:21:ba:b0:23:12:74:23:b8:1e:81:8e:59:
         3a:f8:63:a5:3b:38:4b:d9:d5:96:8d:4f:9e:b9:5e:25:57:e7:
         6e:04:77:3d:9e:77:75:4b:ba:e2:f1:91:8e:53:62:20:a4:02:
         a7:2a:8f:24:53:13:d3:19:3d:1c:a9:51:fa:ec:c5:dd:24:33:
         11:82:cd:1c:33:52:92:b5:ad:c6:c2:06:9d:e5:b2:6b:f8:23:
         9d:3f:a3:30:38:68:0b:04:88:7f:fc:a2:f2:7a:88:28:00:32:
         fc:97:26:11:9d:2f:56:80:d0:d6:40:fc:ad:7e:76:8c:8f:5a:
         bc:d4:31:97:ab:11:f6:c1:4f:dd:ee:cc:e6:ff:dd:f7:a6:d3:
         e3:3d:7f:68:2e:5c:a0:6f:f8:4b:7b:34:a0:1f:5c:9a:ba:12:
         b9:50:bf:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4NYDoQqv3mfZ/1w/25XcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1
MDRmNzkwHhcNMjYwODEyMjMwMTIzWhcNMjYwODEzMjMwMTIzWjAzMTEwLwYDVQQD
Eyg0MzA5Mjk4ODc1MTM5ZGI0MjUyMmY0MTRlY2RmMTZkMmNhYmYwMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOtIBLsYGIqRI8efFLelIFDFxtYz
LijNRLVKVuhAGaxgz3VIFPcJBIMLReG7NelS/8SlnVCE3VB7nOh2bJu++tGb1+2H
hiBUZ+5mvJRv8Z4iixvSv8fPzeDKM/kjSokXgl93ygiQ74BWMuVlLv+nDUX2kOIR
vg1f9sSwcLO4LfAtclIlVB4SX3hd6XLyywIJpZEQmOZu2S4JWiMO6mj7qxpDHRCb
2NJhKxEijezKM6sLFY9cOq2TSgIL+F01UAfY/bNpAihggTIDNdG2VXAeXAfqdldg
XptZRv0aPb179hmYqbFNfAcpY7TiyTzQsnKDo/fa4BfQUuSDWBA9fPwq8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMJKYh1E520JSL0FOzfFtLKvwIgMB8GA1UdIwQY
MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt
NmJjMzkwOTk1Y2FiLzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi
LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7qXGZxu
1WCMdhLE17VLANbqE2h3R57bTYfCKBaX0YyXDC0fBzqvIqZjYQi8t88h5kwKLVow
UXukd1fRW0JlT+gb/d0PI1e87xWoGJCXcbHN75eOOKfTmRvNS5EJLPTHIbqwIxJ0
I7gegY5ZOvhjpTs4S9nVlo1PnrleJVfnbgR3PZ53dUu64vGRjlNiIKQCpyqPJFMT
0xk9HKlR+uzF3SQzEYLNHDNSkrWtxsIGneWya/gjnT+jMDhoCwSIf/yi8nqIKAAy
/JcmEZ0vVoDQ1kD8rX52jI9avNQxl6sR9sFP3e7M5v/d96bT4z1/aC5coG/4S3s0
oB9cmroSuVC/aw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:49:13 2026 by rpki-client