Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          apq+7Axp0eeyRNq4QgSdmnw/xyw+VxGm43Q4bi1craI=
Subject key identifier:   4B:D7:36:D9:12:67:1C:DE:DD:D2:50:0B:E3:1E:76:BC:B2:C7:DD:BE
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       01A03B5E7AC4D75EE67D5BBA96318B3E4825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          1A26
Signing time:             Wed 26 Aug 2026 00:00:42 +0000
Manifest this update:     Wed 26 Aug 2026 00:00:42 +0000
Manifest next update:     Thu 27 Aug 2026 00:00:42 +0000
Files and hashes:         1: LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa (hash: WjIjLuXn3A1xNvSwh1XgBv48UJzhklp1E8+xHhdyWoU=)
                          2: OYzbsj6FLUEHsgwlJJ7heGARRq4.asa (hash: SJgRMlfE3uLi4+sl6GsAWwnlf9PCmW9uTAfxdTwTH/s=)
                          3: PSfeFOCMS0X0DbK201fv7mhOqbQ.roa (hash: WJgLDQpReiQHOtzp+BWaEyBhXQtmTrQB0VphBgJmuek=)
                          4: QjQLmAt4m_YleTlWkKVih21BNgk.roa (hash: dq7HIavQuv8fREOJW5tnnd2hgLRsWh/EorRZKaqBVuc=)
                          5: Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa (hash: P11t+kwQnqI3kW3ZxTjDZFiJEM3aRQP5One4Rpc6tsg=)
                          6: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: yXpDDiWP+ywRpEZypRfM0idM3a9hFtf3P2GvovsNNGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:5e:7a:c4:d7:5e:e6:7d:5b:ba:96:31:8b:3e:48:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Aug 26 00:00:42 2026 GMT
            Not After : Aug 27 00:00:42 2026 GMT
        Subject: CN=4bd736d912671cdeddd2500be31e76bcb2c7ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:56:58:da:b5:09:00:78:22:f0:bd:e1:f3:
                    0d:9e:c6:79:63:82:48:67:08:67:76:2e:ab:80:84:
                    26:90:3e:de:1b:4c:79:d5:ee:6e:bf:2d:d8:35:d9:
                    90:89:86:67:01:59:9c:41:40:ba:63:8d:7a:e7:34:
                    ed:76:ec:b9:78:83:93:3a:75:95:c1:4e:ef:14:15:
                    f3:ab:fd:53:fa:31:98:ab:ab:27:2d:62:25:7e:9f:
                    a8:71:fb:3e:ab:15:24:b2:93:f4:51:e0:a7:34:ac:
                    cb:0c:c7:7d:65:c1:b0:6b:3c:55:86:b3:32:fb:f2:
                    8b:c2:e9:e7:36:ab:59:5b:7f:85:8d:20:6b:3f:72:
                    f0:13:07:e4:0e:1a:ed:fb:9a:37:b3:fb:b1:94:d1:
                    4e:c4:ee:8f:db:78:76:17:3b:8d:a9:ab:a0:d1:31:
                    26:d9:70:5a:1b:26:00:3c:c7:33:06:d1:5d:8e:75:
                    7c:45:d2:c2:99:d8:ef:03:68:84:3c:a4:48:94:f9:
                    d4:b3:1c:73:be:4e:1c:6f:73:f1:2a:58:14:9b:2e:
                    69:7f:10:08:2d:4d:32:52:c9:b7:be:da:10:7a:69:
                    ee:8b:d9:82:3c:92:25:78:aa:4a:0b:b9:bf:7a:a3:
                    84:c4:6f:ac:9e:75:ac:39:62:5c:d3:31:9f:b7:47:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D7:36:D9:12:67:1C:DE:DD:D2:50:0B:E3:1E:76:BC:B2:C7:DD:BE
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:2b:6d:9d:3f:f0:a3:4d:e5:ee:70:09:3e:f4:40:38:5c:
         fc:d2:74:62:86:89:27:a1:36:99:3b:16:83:26:c6:00:6e:d1:
         2b:f0:07:f7:2a:15:3b:93:6a:59:10:50:4d:9d:9e:40:55:9d:
         04:7f:41:69:cb:c3:4d:f2:f2:87:15:0b:38:59:f2:b0:ec:73:
         f5:14:d1:08:80:18:25:c2:6e:1e:ef:23:8b:4a:d5:44:92:85:
         92:8a:cf:34:cc:2c:9c:80:e6:5a:7e:d5:66:e8:9a:1d:d8:ff:
         c6:0b:c4:19:4b:db:19:d7:4b:47:1e:a4:02:d4:69:90:56:e0:
         65:5c:c8:84:92:9b:ef:c1:25:c2:e4:11:21:8f:52:e9:4f:34:
         cf:63:8d:d5:b4:fb:3c:68:69:c4:fe:5c:4e:f3:5a:ce:ec:e6:
         2d:de:b9:27:ce:e1:54:97:b4:bf:51:a1:87:dc:1d:3e:e8:40:
         85:22:47:24:25:f8:2f:7d:89:97:05:5a:d1:1b:97:4b:bd:ba:
         35:a7:2b:23:41:87:63:64:8b:a8:14:85:73:c1:00:0b:dd:6d:
         62:c6:f2:13:da:4d:b9:0a:73:b1:34:e2:88:bd:27:3e:76:90:
         09:4d:10:15:06:94:c3:b6:98:8f:cd:43:4c:b3:55:9d:b0:a8:
         b9:b6:c5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA7XnrE117mfVu6ljGLPkglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh
OGZmOGIwHhcNMjYwODI2MDAwMDQyWhcNMjYwODI3MDAwMDQyWjAzMTEwLwYDVQQD
Eyg0YmQ3MzZkOTEyNjcxY2RlZGRkMjUwMGJlMzFlNzZiY2IyYzdkZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWhWWNq1CQB4IvC94fMNnsZ5Y4JI
Zwhndi6rgIQmkD7eG0x51e5uvy3YNdmQiYZnAVmcQUC6Y4165zTtduy5eIOTOnWV
wU7vFBXzq/1T+jGYq6snLWIlfp+ocfs+qxUkspP0UeCnNKzLDMd9ZcGwazxVhrMy
+/KLwunnNqtZW3+FjSBrP3LwEwfkDhrt+5o3s/uxlNFOxO6P23h2FzuNqaug0TEm
2XBaGyYAPMczBtFdjnV8RdLCmdjvA2iEPKRIlPnUsxxzvk4cb3PxKlgUmy5pfxAI
LU0yUsm3vtoQemnui9mCPJIleKpKC7m/eqOExG+snnWsOWJc0zGft0ciQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvXNtkSZxze3dJQC+Medryyx92+MB8GA1UdIwQY
MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt
ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl
LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK4rbZ0/
8KNN5e5wCT70QDhc/NJ0YoaJJ6E2mTsWgybGAG7RK/AH9yoVO5NqWRBQTZ2eQFWd
BH9BacvDTfLyhxULOFnysOxz9RTRCIAYJcJuHu8ji0rVRJKFkorPNMwsnIDmWn7V
ZuiaHdj/xgvEGUvbGddLRx6kAtRpkFbgZVzIhJKb78ElwuQRIY9S6U80z2ON1bT7
PGhpxP5cTvNazuzmLd65J87hVJe0v1Ghh9wdPuhAhSJHJCX4L32JlwVa0RuXS726
NacrI0GHY2SLqBSFc8EAC91tYsbyE9pNuQpzsTTiiL0nPnaQCU0QFQaUw7aYj81D
TLNVnbCoubbFZA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:48 2026 by rpki-client