Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          2iAB7vrRsddlNRVkujW5Zt5K2RR0T2BsBao0HL8Tgjw=
Subject key identifier:   50:E7:6A:35:17:BF:22:A7:D8:02:03:50:C1:ED:63:1F:8C:82:53:95
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       01A001A5BEA4F249924C1307FD4A7C1E7337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          17E4
Signing time:             Fri 14 Aug 2026 19:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:34 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: rfoxlJKjxwDLowfTWV9k5yRPGOtk8RLj4QDuOKN4e8Y=)
                          2: OgGnFbXJ4V3u-tj4G-1vivHmzWg.roa (hash: GM46G0GUlTfS8w3iCZudPxHhvnavmPPDKTZm1YakeDs=)
                          3: Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa (hash: hbS17xb15eoENiFqWkrh4Rg5HMl3hCu9i3t7Tn7RjEU=)
                          4: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (hash: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=)
                          5: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
                          6: zcNaM7Plu3xF6-dvi0ReFa0-aV8.roa (hash: cASfX2g2hoBO9zunCC4qSdWKYm2AXNtfPSF57+QkbuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:be:a4:f2:49:92:4c:13:07:fd:4a:7c:1e:73:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Aug 14 19:00:34 2026 GMT
            Not After : Aug 15 19:00:34 2026 GMT
        Subject: CN=50e76a3517bf22a7d8020350c1ed631f8c825395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:cb:b3:51:f1:04:89:37:ba:63:a8:84:b9:
                    cb:3b:22:e9:bd:97:26:14:0f:9f:d4:76:a4:57:92:
                    f3:aa:e1:47:13:cd:6c:70:ed:02:d3:8d:ce:27:62:
                    73:a6:b2:bf:58:55:c8:87:68:fc:7d:25:15:81:d7:
                    d0:8f:5f:bc:cd:fd:64:ff:d3:15:49:3a:0a:86:36:
                    05:22:1d:a4:31:90:b0:3a:9a:50:cb:58:08:3c:a1:
                    aa:d4:ad:39:35:9c:cb:f5:9a:a3:c5:94:2e:73:c6:
                    de:f4:14:c5:d0:67:0c:6f:3f:90:14:14:4c:9e:25:
                    5b:48:4f:10:ed:ef:ec:e9:80:1d:e9:e2:7b:e9:81:
                    3d:db:77:19:06:1e:e2:e2:c5:4b:98:b8:cf:47:6c:
                    ba:d0:8f:05:b3:d5:b8:8a:86:12:64:f0:20:38:51:
                    c3:71:2b:3b:c7:5d:00:fb:b3:93:89:cf:d3:60:73:
                    c7:8b:87:74:42:38:d7:bf:7a:85:e0:2e:6f:9b:37:
                    86:87:a4:c9:91:df:a0:be:98:b9:c4:e1:78:a5:d9:
                    c6:1d:20:84:9e:f2:1c:7b:5e:96:5c:bb:c3:65:2c:
                    90:0b:02:17:44:45:29:42:6f:50:55:1b:97:60:5a:
                    ce:4e:67:94:d7:1d:26:30:9a:7e:b7:cb:c0:12:cd:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E7:6A:35:17:BF:22:A7:D8:02:03:50:C1:ED:63:1F:8C:82:53:95
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:5b:07:38:bb:c1:b1:49:31:6e:71:ee:0d:f7:7d:b1:8c:
         0f:ea:1c:bc:0e:8d:f0:cb:09:ef:c3:2a:36:c8:cf:d1:22:8c:
         63:cf:4f:ea:84:bc:92:f8:d3:97:78:84:0b:79:81:a9:63:d7:
         73:a4:25:a7:43:d9:0d:d5:66:24:a5:6c:d8:bb:a6:eb:76:12:
         95:c6:1f:69:97:2d:bb:1d:dc:af:06:fa:6d:e6:44:82:90:3c:
         91:c3:d2:a9:b8:9e:dd:0e:e8:e6:d4:7c:42:8e:2f:7c:1e:3c:
         d2:6d:a1:88:e5:69:de:6d:9f:a0:03:dd:aa:cc:1f:20:08:a9:
         a7:9f:60:c9:12:d4:2e:12:4c:29:0e:79:a2:e6:1a:bf:51:91:
         97:b9:ca:86:14:72:34:b7:71:0d:49:93:ea:0c:c0:40:4f:c8:
         8e:67:67:fb:7f:cc:2d:31:cb:2b:d2:9e:6e:3f:b7:d3:a1:f1:
         3f:4e:7a:17:97:a2:ee:c8:b9:e3:d0:aa:2d:94:e9:a0:e4:4c:
         95:d1:13:15:16:71:b7:af:7a:25:28:89:64:48:64:00:2b:95:
         f3:bb:a5:24:c9:bf:bf:3e:51:4e:28:92:22:23:13:e6:62:b0:
         43:be:0f:e1:d6:fa:9f:8b:85:7e:54:04:94:2f:60:72:48:85:
         db:ea:d9:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpb6k8kmSTBMH/Up8HnM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjYwODE0MTkwMDM0WhcNMjYwODE1MTkwMDM0WjAzMTEwLwYDVQQD
Eyg1MGU3NmEzNTE3YmYyMmE3ZDgwMjAzNTBjMWVkNjMxZjhjODI1Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4LLs1HxBIk3umOohLnLOyLpvZcm
FA+f1HakV5LzquFHE81scO0C043OJ2JzprK/WFXIh2j8fSUVgdfQj1+8zf1k/9MV
SToKhjYFIh2kMZCwOppQy1gIPKGq1K05NZzL9ZqjxZQuc8be9BTF0GcMbz+QFBRM
niVbSE8Q7e/s6YAd6eJ76YE923cZBh7i4sVLmLjPR2y60I8Fs9W4ioYSZPAgOFHD
cSs7x10A+7OTic/TYHPHi4d0QjjXv3qF4C5vmzeGh6TJkd+gvpi5xOF4pdnGHSCE
nvIce16WXLvDZSyQCwIXREUpQm9QVRuXYFrOTmeU1x0mMJp+t8vAEs1NswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDnajUXvyKn2AIDUMHtYx+MglOVMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoZbBzi7
wbFJMW5x7g33fbGMD+ocvA6N8MsJ78MqNsjP0SKMY89P6oS8kvjTl3iEC3mBqWPX
c6Qlp0PZDdVmJKVs2Lum63YSlcYfaZctux3crwb6beZEgpA8kcPSqbie3Q7o5tR8
Qo4vfB480m2hiOVp3m2foAPdqswfIAipp59gyRLULhJMKQ55ouYav1GRl7nKhhRy
NLdxDUmT6gzAQE/Ijmdn+3/MLTHLK9Kebj+306HxP056F5ei7si549CqLZTpoORM
ldETFRZxt696JSiJZEhkACuV87ulJMm/vz5RTiiSIiMT5mKwQ74P4db6n4uFflQE
lC9gckiF2+rZGQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:14 2026 by rpki-client