Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
File:                     9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft (raw, json)
Hash identifier:          UShh/0DZpwKuFBuyNqNyvyH1erBjhORmNSl2kGN0lyU=
Subject key identifier:   EE:77:08:86:26:01:9D:51:EE:56:1C:3A:CE:A4:00:A2:DA:BF:81:48
Authority key identifier: F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
Certificate issuer:       /CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Certificate serial:       01A040F31ACF7CFAADC506B2E28DBA78F09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
Manifest number:          0296
Signing time:             Thu 27 Aug 2026 02:01:08 +0000
Manifest this update:     Thu 27 Aug 2026 02:01:08 +0000
Manifest next update:     Fri 28 Aug 2026 02:01:08 +0000
Files and hashes:         1: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl (hash: cZisaxDpnhCVkA3AOchjcq4leB+wj+UnLqXS06KaJa8=)
                          2: y_FNVbdikbBWzs5LhqoDeRQMNlA.roa (hash: WWd5ILv5zYGPBJplTtrocqicsl6CMsf0eLm4LCFpsyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f3:1a:cf:7c:fa:ad:c5:06:b2:e2:8d:ba:78:f0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
        Validity
            Not Before: Aug 27 02:01:08 2026 GMT
            Not After : Aug 28 02:01:08 2026 GMT
        Subject: CN=ee77088626019d51ee561c3acea400a2dabf8148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:a3:ac:f0:ce:84:03:61:7e:7c:32:57:09:
                    2f:de:4a:ef:06:63:ac:f7:3a:71:b3:97:dd:36:79:
                    94:8b:c7:08:5c:2c:29:9d:24:85:9c:c9:ea:95:71:
                    b4:87:1a:68:74:90:3f:a1:d1:73:40:7e:98:07:2d:
                    18:38:a2:59:49:fc:99:07:fb:40:d0:da:c6:53:1e:
                    5a:0c:a0:c9:2a:5c:14:ef:6f:14:08:e1:02:46:b5:
                    74:09:bb:cd:d6:15:2f:22:e8:07:f8:cd:d0:12:6c:
                    53:bc:10:29:43:d1:3b:74:d6:1b:e1:6a:58:80:50:
                    52:9e:c0:4a:9c:c8:8b:50:6c:2c:0c:ce:5f:5a:d8:
                    b5:75:d3:f4:ee:68:fc:7d:6a:b7:69:4f:9e:ba:cd:
                    14:dc:17:c2:60:f8:76:13:ad:33:5e:9d:91:6b:f7:
                    eb:e5:87:d8:1e:a5:63:a7:15:62:f1:8d:61:3a:98:
                    fa:db:e8:be:df:40:0f:85:f2:51:1c:96:27:35:f4:
                    ae:09:06:3d:5a:06:a5:1a:92:a8:16:bd:13:a6:33:
                    20:13:70:b0:bf:e5:16:49:3e:d3:16:b7:dd:99:8b:
                    9c:78:f8:66:55:21:44:5c:93:bb:ed:93:f1:25:67:
                    9f:93:12:c0:2e:c3:69:0e:02:57:f5:fa:dc:0f:e5:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:08:86:26:01:9D:51:EE:56:1C:3A:CE:A4:00:A2:DA:BF:81:48
            X509v3 Authority Key Identifier:
                keyid:F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:ba:72:8a:8f:80:8c:37:f6:5f:cf:d1:bc:13:a6:03:18:0f:
         a7:d3:6b:d0:70:94:71:33:c2:a6:95:08:e5:12:7c:9a:de:e6:
         85:d5:c0:4a:2a:ce:b8:93:c0:d2:71:f9:23:e8:8b:32:60:3a:
         ad:87:94:f7:96:af:68:47:a2:89:84:7b:fc:fd:dd:79:93:77:
         98:8f:b7:f5:d1:8a:f1:08:11:5a:d1:4f:89:69:24:20:78:58:
         5e:76:59:d8:1b:64:d7:ec:8a:90:77:d1:83:a6:02:3f:62:0f:
         f5:e9:d5:dc:83:12:92:32:fe:0b:fb:79:7c:15:ee:2d:48:db:
         b6:37:16:51:9e:f0:a1:62:7e:2c:c4:aa:ff:76:87:8a:fb:2c:
         84:55:7b:7b:f8:49:a8:8a:7e:bc:3a:d2:62:af:fc:dc:94:2d:
         b9:d1:9f:45:3b:ca:e0:50:dc:23:4e:6c:cd:2d:94:3f:ea:80:
         90:53:21:4f:c3:dc:28:8a:6b:c1:98:12:9b:32:e8:73:07:28:
         8e:b6:5e:5e:fa:c6:f3:87:36:90:83:4f:d8:aa:80:af:f6:1e:
         de:71:1e:44:b3:43:0f:b4:03:3e:67:3e:8a:8c:84:c6:c4:af:
         e4:f1:6c:66:d4:77:27:65:59:da:32:ce:0f:40:62:91:41:94:
         c6:3c:bd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBA8xrPfPqtxQay4o26ePCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2U1MjY0NTg0OTdjMjVkNWRjM2RjMmY0YTgzNzRkNGU0
NDk0OWQwHhcNMjYwODI3MDIwMTA4WhcNMjYwODI4MDIwMTA4WjAzMTEwLwYDVQQD
EyhlZTc3MDg4NjI2MDE5ZDUxZWU1NjFjM2FjZWE0MDBhMmRhYmY4MTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFejrPDOhANhfnwyVwkv3krvBmOs
9zpxs5fdNnmUi8cIXCwpnSSFnMnqlXG0hxpodJA/odFzQH6YBy0YOKJZSfyZB/tA
0NrGUx5aDKDJKlwU728UCOECRrV0CbvN1hUvIugH+M3QEmxTvBApQ9E7dNYb4WpY
gFBSnsBKnMiLUGwsDM5fWti1ddP07mj8fWq3aU+eus0U3BfCYPh2E60zXp2Ra/fr
5YfYHqVjpxVi8Y1hOpj62+i+30APhfJRHJYnNfSuCQY9WgalGpKoFr0TpjMgE3Cw
v+UWST7TFrfdmYucePhmVSFEXJO77ZPxJWefkxLALsNpDgJX9frcD+Vm3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO53CIYmAZ1R7lYcOs6kAKLav4FIMB8GA1UdIwQY
MBaAFPR+UmRYSXwl1dw9wvSoN01ORJSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMDY2MzEtZjEyYi00MGUzLWI4MTgt
MGNjM2I5YjZmMmUwLzEvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMDY2MzEtZjEyYi00MGUzLWI4MTgtMGNjM2I5YjZmMmUw
LzEvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA47pyio+A
jDf2X8/RvBOmAxgPp9Nr0HCUcTPCppUI5RJ8mt7mhdXASirOuJPA0nH5I+iLMmA6
rYeU95avaEeiiYR7/P3deZN3mI+39dGK8QgRWtFPiWkkIHhYXnZZ2Btk1+yKkHfR
g6YCP2IP9enV3IMSkjL+C/t5fBXuLUjbtjcWUZ7woWJ+LMSq/3aHivsshFV7e/hJ
qIp+vDrSYq/83JQtudGfRTvK4FDcI05szS2UP+qAkFMhT8PcKIprwZgSmzLocwco
jrZeXvrG84c2kINP2KqAr/Ye3nEeRLNDD7QDPmc+ioyExsSv5PFsZtR3J2VZ2jLO
D0BikUGUxjy9kA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:34:04 2026 by rpki-client