Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File:                     tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier:          i6mf56P3pZu3axB1UeDeEBWfJG214bszZUG/jv+UsxI=
Subject key identifier:   88:FE:3E:24:81:EB:E3:84:FC:B2:93:B5:17:92:33:B2:8C:DF:68:DA
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer:       /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial:       01A0035E66690DFF9B0E652FB7320D1B638D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 03:01:53 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:53 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:53 +0000
Files and hashes:         1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
                          2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: +be7lgnf8w/qpfnWgVBBxVbR81jg46iSsmS7t4+b86M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:66:69:0d:ff:9b:0e:65:2f:b7:32:0d:1b:63:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
        Validity
            Not Before: Aug 15 03:01:53 2026 GMT
            Not After : Aug 16 03:01:53 2026 GMT
        Subject: CN=88fe3e2481ebe384fcb293b5179233b28cdf68da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:ce:d8:32:36:c1:1a:2d:c2:08:17:5a:82:
                    1d:8b:2a:7f:ef:01:e6:6a:f5:95:58:4b:99:58:0c:
                    06:19:03:c0:04:f5:e6:9c:2e:3f:b8:3f:5a:21:72:
                    ce:de:23:cc:83:a4:cb:6e:64:82:8d:ff:0a:04:69:
                    78:9f:73:4f:7f:67:a6:32:ff:60:d4:b0:f4:45:91:
                    c1:a2:e8:32:d1:77:72:bd:3c:91:93:f7:63:c0:94:
                    fb:28:74:7e:a9:6e:41:38:54:5c:52:10:15:ee:5a:
                    35:52:a3:37:2e:e0:b4:fa:55:9f:9d:66:0f:48:af:
                    84:b2:a3:51:0d:4b:9a:33:a7:95:f3:e4:09:ac:98:
                    95:9c:17:c1:e3:fe:e1:6d:f3:e9:21:80:d7:ec:13:
                    87:3e:d2:9c:95:fa:6f:be:b3:2c:80:94:12:7e:f9:
                    fd:98:cf:60:3d:8b:e6:21:42:a2:57:f0:f2:f4:58:
                    27:9c:be:af:bc:5d:59:e0:d1:eb:9b:91:8f:60:e6:
                    98:b4:5f:77:1b:88:87:fd:bc:a8:22:b3:2a:f9:42:
                    34:e4:d3:4f:ac:0f:7f:0c:5a:b6:37:fc:94:f2:84:
                    6b:42:fb:5c:21:a8:60:d5:e1:f4:64:f0:80:bf:b5:
                    85:d3:f8:41:b9:7d:e4:b4:48:8f:25:f3:12:ed:19:
                    9e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:3E:24:81:EB:E3:84:FC:B2:93:B5:17:92:33:B2:8C:DF:68:DA
            X509v3 Authority Key Identifier:
                keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:49:c6:d7:44:b3:1a:85:66:9d:ba:8f:c6:05:2d:b1:eb:ce:
         16:25:5a:b0:e9:9d:0a:0a:d2:33:e9:79:68:a7:25:11:d2:a1:
         e1:30:c0:9e:3f:dd:96:e6:3a:21:85:97:32:71:92:96:8e:23:
         e1:89:d3:b6:69:97:cf:57:4b:95:7c:79:73:40:0f:34:a0:64:
         6a:0a:ff:26:d6:f6:62:6d:4c:39:87:3d:ed:21:de:ab:cf:19:
         fc:18:fe:28:d2:5a:30:2a:69:3b:ad:2c:a5:00:02:99:b6:80:
         bc:b0:5b:63:74:22:c1:6d:d6:24:39:25:bf:24:cf:b6:1a:48:
         f7:2c:c9:34:f6:14:b6:62:bd:c1:6a:27:d3:f6:a9:51:50:f5:
         3c:c5:29:70:60:e2:01:10:d8:47:bb:d9:73:b7:7f:df:89:75:
         4d:d2:33:70:f1:d2:1c:67:83:33:85:c6:fb:88:d5:b7:23:05:
         bf:d6:36:b1:a3:93:84:42:ab:08:b2:ec:d4:e0:49:d8:56:fa:
         a8:ae:6a:93:22:ac:a8:e6:d4:5a:6b:6d:a3:2a:60:76:5c:9d:
         d2:ed:a3:78:67:21:e4:53:5d:42:aa:c5:f0:2c:0e:e3:4e:db:
         f1:63:38:2f:01:21:44:a9:5e:b6:f3:27:3a:50:ca:2a:52:7c:
         1c:9a:d5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXmZpDf+bDmUvtzING2ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm
YjYxOTMwHhcNMjYwODE1MDMwMTUzWhcNMjYwODE2MDMwMTUzWjAzMTEwLwYDVQQD
Eyg4OGZlM2UyNDgxZWJlMzg0ZmNiMjkzYjUxNzkyMzNiMjhjZGY2OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlPO2DI2wRotwggXWoIdiyp/7wHm
avWVWEuZWAwGGQPABPXmnC4/uD9aIXLO3iPMg6TLbmSCjf8KBGl4n3NPf2emMv9g
1LD0RZHBougy0XdyvTyRk/djwJT7KHR+qW5BOFRcUhAV7lo1UqM3LuC0+lWfnWYP
SK+EsqNRDUuaM6eV8+QJrJiVnBfB4/7hbfPpIYDX7BOHPtKclfpvvrMsgJQSfvn9
mM9gPYvmIUKiV/Dy9FgnnL6vvF1Z4NHrm5GPYOaYtF93G4iH/byoIrMq+UI05NNP
rA9/DFq2N/yU8oRrQvtcIahg1eH0ZPCAv7WF0/hBuX3ktEiPJfMS7RmeWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj+PiSB6+OE/LKTtReSM7KM32jaMB8GA1UdIwQY
MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt
ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4
LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJknG10Sz
GoVmnbqPxgUtsevOFiVasOmdCgrSM+l5aKclEdKh4TDAnj/dluY6IYWXMnGSlo4j
4YnTtmmXz1dLlXx5c0APNKBkagr/Jtb2Ym1MOYc97SHeq88Z/Bj+KNJaMCppO60s
pQACmbaAvLBbY3QiwW3WJDklvyTPthpI9yzJNPYUtmK9wWon0/apUVD1PMUpcGDi
ARDYR7vZc7d/34l1TdIzcPHSHGeDM4XG+4jVtyMFv9Y2saOThEKrCLLs1OBJ2Fb6
qK5qkyKsqObUWmttoypgdlyd0u2jeGch5FNdQqrF8CwO407b8WM4LwEhRKletvMn
OlDKKlJ8HJrVyw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:37 2026 by rpki-client