Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File:                     2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier:          sBBECeBakG5pXF2Yl4ec28yz6VaYy0btYkzXkJinBuY=
Subject key identifier:   31:80:9B:BF:87:15:DB:5B:BD:7B:C4:01:A8:16:7A:14:26:CF:98:2C
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer:       /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial:       01A040853720BD7B1CFF1627D3ADFE994B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number:          04B4
Signing time:             Thu 27 Aug 2026 00:01:07 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:07 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:07 +0000
Files and hashes:         1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: k5r/DWS60sgj84O38ld+DnOKKVub7+xpjC8XC2SezyE=)
                          2: VHbe_xOVGHCgQR5XnYgh-yKH6cE.roa (hash: 5VSEEsjJBUwWudxQvIdtRqUqe0PKutNTBibCMoL8Zoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:37:20:bd:7b:1c:ff:16:27:d3:ad:fe:99:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
        Validity
            Not Before: Aug 27 00:01:07 2026 GMT
            Not After : Aug 28 00:01:07 2026 GMT
        Subject: CN=31809bbf8715db5bbd7bc401a8167a1426cf982c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:03:4d:1d:ea:f2:ac:49:da:57:b6:22:d0:
                    d1:42:e2:e8:fd:23:94:e6:7d:92:52:90:84:53:e4:
                    23:83:e1:7c:75:dc:13:05:89:92:a2:c4:2e:cb:ed:
                    bf:b4:0d:6e:11:fe:e5:79:60:0a:9c:66:bf:46:41:
                    42:5d:b5:87:ae:74:e8:a3:de:f5:ec:dd:0e:b1:e3:
                    64:a7:cf:9c:de:2f:6c:8b:f8:ab:b3:3a:f2:a1:87:
                    67:fa:f1:0c:e0:42:40:12:29:43:62:21:2c:fb:b6:
                    fc:58:0b:a8:6f:02:29:e2:ce:83:e6:21:22:1d:87:
                    b2:a3:88:5c:64:0d:16:11:4d:b6:b2:0d:f0:83:5e:
                    fc:70:c2:f8:84:bd:c5:2d:be:73:6d:58:0c:a6:d2:
                    ed:bf:8b:0f:c6:4b:e1:03:c1:3f:d3:c5:6f:61:f8:
                    0b:67:02:3f:d0:37:0a:2d:69:38:14:5e:af:54:5f:
                    83:64:d7:74:25:cd:42:28:d5:56:f4:54:0e:b0:f0:
                    17:94:08:b6:06:de:15:92:65:f8:0f:7f:a6:a1:58:
                    31:f5:42:b9:54:37:74:1c:9e:be:69:7a:16:50:cb:
                    1e:ce:b6:8a:c6:f7:ee:7e:39:d9:fc:69:57:49:e4:
                    bd:10:51:54:5a:12:0b:02:f5:c9:24:9f:31:22:e6:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:80:9B:BF:87:15:DB:5B:BD:7B:C4:01:A8:16:7A:14:26:CF:98:2C
            X509v3 Authority Key Identifier:
                keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:fc:39:92:6e:09:f9:65:c2:6f:1b:71:ae:80:83:58:88:
         86:18:1c:aa:c1:92:12:c4:02:41:67:8f:fe:69:8d:bc:ba:81:
         a8:b0:71:ac:88:82:50:35:03:98:57:09:6c:34:7c:ef:18:08:
         b4:a2:e5:61:41:a5:25:19:d5:eb:27:f3:10:a1:80:53:eb:b3:
         e3:64:fc:a9:21:e2:0f:64:3a:59:e4:87:fc:d9:39:e2:32:fd:
         a2:74:22:7a:f8:2e:2e:66:4d:bd:9e:de:28:df:c7:b1:2f:66:
         98:3a:02:12:97:94:e8:31:45:13:43:02:7e:fd:9c:38:5c:39:
         e2:a6:95:f5:4f:c5:f2:46:98:ae:8d:77:c0:44:cd:8f:4c:1e:
         89:e8:81:b6:c9:79:90:92:0d:5b:e1:35:61:39:22:39:fb:bd:
         35:6e:48:e9:13:d7:9c:43:cf:73:c2:c8:6e:17:4b:22:2f:a2:
         fa:fd:3c:44:06:e1:7f:c6:65:15:24:06:2b:4f:4a:e2:eb:3b:
         43:14:93:13:fb:62:da:b1:24:4a:ed:2f:d6:f1:34:73:d1:15:
         c5:f6:38:cf:87:46:91:69:2a:59:6a:a1:e7:d3:c5:42:8f:7d:
         4a:1c:b8:c5:b8:02:9d:ed:28:87:28:c0:95:0c:59:f0:ca:22:
         70:67:19:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhTcgvXsc/xYn063+mUueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5
MDc5ZWQwHhcNMjYwODI3MDAwMTA3WhcNMjYwODI4MDAwMTA3WjAzMTEwLwYDVQQD
EygzMTgwOWJiZjg3MTVkYjViYmQ3YmM0MDFhODE2N2ExNDI2Y2Y5ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL4DTR3q8qxJ2le2ItDRQuLo/SOU
5n2SUpCEU+Qjg+F8ddwTBYmSosQuy+2/tA1uEf7leWAKnGa/RkFCXbWHrnToo971
7N0OseNkp8+c3i9si/irszryoYdn+vEM4EJAEilDYiEs+7b8WAuobwIp4s6D5iEi
HYeyo4hcZA0WEU22sg3wg178cML4hL3FLb5zbVgMptLtv4sPxkvhA8E/08VvYfgL
ZwI/0DcKLWk4FF6vVF+DZNd0Jc1CKNVW9FQOsPAXlAi2Bt4VkmX4D3+moVgx9UK5
VDd0HJ6+aXoWUMsezraKxvfufjnZ/GlXSeS9EFFUWhILAvXJJJ8xIua/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGAm7+HFdtbvXvEAagWehQmz5gsMB8GA1UdIwQY
MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt
ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm
LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr/8OZJu
Cfllwm8bca6Ag1iIhhgcqsGSEsQCQWeP/mmNvLqBqLBxrIiCUDUDmFcJbDR87xgI
tKLlYUGlJRnV6yfzEKGAU+uz42T8qSHiD2Q6WeSH/Nk54jL9onQievguLmZNvZ7e
KN/HsS9mmDoCEpeU6DFFE0MCfv2cOFw54qaV9U/F8kaYro13wETNj0weieiBtsl5
kJINW+E1YTkiOfu9NW5I6RPXnEPPc8LIbhdLIi+i+v08RAbhf8ZlFSQGK09K4us7
QxSTE/ti2rEkSu0v1vE0c9EVxfY4z4dGkWkqWWqh59PFQo99Shy4xbgCne0ohyjA
lQxZ8MoicGcZ8A==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:33 2026 by rpki-client