Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          YC+7uxhocuXmlF15GmGPDktGQ2a8oXaDoz2jEM4sYLU=
Subject key identifier:   AC:3F:F5:98:CC:99:1A:41:AB:C1:E5:58:3A:49:8B:1C:FA:02:9D:82
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       01A002B8B6E239C9A8FB9B4500BB2066C1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1A13
Signing time:             Sat 15 Aug 2026 00:00:54 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:54 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:54 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: rKOdsWt/A0EafxSvrVIo81rYQbX7TglcWqGzr07PU8U=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:b6:e2:39:c9:a8:fb:9b:45:00:bb:20:66:c1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Aug 15 00:00:54 2026 GMT
            Not After : Aug 16 00:00:54 2026 GMT
        Subject: CN=ac3ff598cc991a41abc1e5583a498b1cfa029d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:2e:ac:21:09:d9:45:01:fe:36:75:75:f9:
                    d8:2b:22:bb:e1:c1:64:7f:6a:85:c2:42:08:44:26:
                    4d:bc:18:36:7d:4d:4d:da:ad:9e:6c:6d:e6:97:ff:
                    0e:8d:b0:0c:d8:30:48:ce:49:bf:fc:bd:51:58:1a:
                    85:8f:a1:20:52:c6:18:8c:3e:09:18:8b:3d:9c:ae:
                    ba:86:f4:24:19:af:15:57:d7:74:43:ea:56:b4:e5:
                    e7:1f:79:9e:aa:85:da:22:f6:cf:9d:a1:b0:96:6e:
                    8a:65:25:c5:65:96:e1:67:93:07:53:7d:46:79:4a:
                    61:e9:c8:9a:62:8b:eb:f5:9c:88:26:80:e3:b8:ed:
                    57:14:25:da:0a:14:21:61:ac:50:ca:ed:9d:a6:bd:
                    a0:4c:82:98:e6:2a:21:c2:fe:b7:74:90:da:17:67:
                    68:e2:75:3f:bb:67:da:cb:fe:cc:9c:b4:00:28:2f:
                    36:eb:90:6e:fb:a8:18:ff:41:7c:d3:84:6c:f7:bb:
                    3d:b8:14:9d:c6:bd:23:0d:81:a1:a4:c7:7c:3c:c8:
                    da:85:d0:bd:c1:bc:9a:ff:4b:84:22:a4:7b:c8:74:
                    f8:45:bd:63:0b:d1:7b:20:80:f2:cb:d8:cb:a2:a4:
                    15:e0:3a:98:b5:37:ac:69:e3:c5:8d:4b:41:dc:65:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:F5:98:CC:99:1A:41:AB:C1:E5:58:3A:49:8B:1C:FA:02:9D:82
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:48:b3:27:82:ce:9b:e5:28:87:72:0f:2c:37:fc:89:7a:
         0c:b9:14:13:47:51:81:27:63:b8:02:83:b2:d4:34:39:4d:6a:
         60:fe:55:f1:71:dc:99:90:1d:ee:93:8d:8a:4e:af:55:93:a4:
         1d:62:2b:ff:04:0f:67:3c:9f:97:6f:58:72:de:92:58:c5:60:
         cc:13:c6:3d:8d:bd:4a:8a:80:42:aa:dd:1a:8d:33:d9:b0:dd:
         b3:61:15:9f:5c:be:ba:5d:d6:1a:76:76:13:6a:dd:ef:8f:03:
         3d:78:83:4d:11:4e:bb:e9:89:4e:2a:4c:91:5e:84:db:6a:fb:
         b9:34:21:9b:d5:93:47:c1:c6:b1:9c:9b:ab:f3:0a:c1:5c:1e:
         49:c1:a3:36:dd:44:f0:45:3e:9c:36:5f:cd:97:b8:0d:00:90:
         4b:54:20:41:d7:b7:95:ed:25:e4:70:29:4a:31:07:09:ca:63:
         4c:75:c9:07:33:33:a2:f6:56:90:1b:a3:ce:1e:c0:24:6b:0e:
         c9:f7:c0:14:23:72:a5:d2:23:10:10:9c:f6:fc:41:be:39:2a:
         0c:93:5f:eb:b1:0c:59:7c:15:fd:1d:de:63:f7:e4:4a:bb:c9:
         39:e6:f4:7f:93:4a:9f:f1:a5:fc:3e:53:85:cd:89:55:77:a4:
         2a:83:82:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuLbiOcmo+5tFALsgZsGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjYwODE1MDAwMDU0WhcNMjYwODE2MDAwMDU0WjAzMTEwLwYDVQQD
EyhhYzNmZjU5OGNjOTkxYTQxYWJjMWU1NTgzYTQ5OGIxY2ZhMDI5ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQEurCEJ2UUB/jZ1dfnYKyK74cFk
f2qFwkIIRCZNvBg2fU1N2q2ebG3ml/8OjbAM2DBIzkm//L1RWBqFj6EgUsYYjD4J
GIs9nK66hvQkGa8VV9d0Q+pWtOXnH3meqoXaIvbPnaGwlm6KZSXFZZbhZ5MHU31G
eUph6ciaYovr9ZyIJoDjuO1XFCXaChQhYaxQyu2dpr2gTIKY5iohwv63dJDaF2do
4nU/u2fay/7MnLQAKC8265Bu+6gY/0F804Rs97s9uBSdxr0jDYGhpMd8PMjahdC9
wbya/0uEIqR7yHT4Rb1jC9F7IIDyy9jLoqQV4DqYtTesaePFjUtB3GW4twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw/9ZjMmRpBq8HlWDpJixz6Ap2CMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQRIsyeC
zpvlKIdyDyw3/Il6DLkUE0dRgSdjuAKDstQ0OU1qYP5V8XHcmZAd7pONik6vVZOk
HWIr/wQPZzyfl29Yct6SWMVgzBPGPY29SoqAQqrdGo0z2bDds2EVn1y+ul3WGnZ2
E2rd748DPXiDTRFOu+mJTipMkV6E22r7uTQhm9WTR8HGsZybq/MKwVweScGjNt1E
8EU+nDZfzZe4DQCQS1QgQde3le0l5HApSjEHCcpjTHXJBzMzovZWkBujzh7AJGsO
yffAFCNypdIjEBCc9vxBvjkqDJNf67EMWXwV/R3eY/fkSrvJOeb0f5NKn/Gl/D5T
hc2JVXekKoOC5w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:32 2026 by rpki-client