Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File:                     _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier:          N1Nc9PUUYhwmkNwIw4doWGQDI7+7WixzcBFHMpt79d8=
Subject key identifier:   F8:0A:41:2A:88:A7:91:D2:2D:44:41:53:CA:BA:8C:A6:85:E0:A3:1A
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer:       /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial:       01A002B8AAF42F03049457A99814FAE3FCD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number:          1310
Signing time:             Sat 15 Aug 2026 00:00:51 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:51 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:51 +0000
Files and hashes:         1: GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa (hash: 5iJBSAVI32wYt0M+SbccAMVEuoqi4ABnZUSN/2LAKP4=)
                          2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: 6BojtsQpsm77dHQ4cvAM7mTQNNREghouw7T9YPGVhww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:aa:f4:2f:03:04:94:57:a9:98:14:fa:e3:fc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
        Validity
            Not Before: Aug 15 00:00:51 2026 GMT
            Not After : Aug 16 00:00:51 2026 GMT
        Subject: CN=f80a412a88a791d22d444153caba8ca685e0a31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:bf:33:02:5d:4e:fd:59:83:ae:44:4b:42:
                    ac:e9:4c:8d:94:8c:52:0d:62:35:ef:07:93:38:13:
                    52:ad:d5:5c:66:35:70:79:24:92:fe:f5:d6:1c:be:
                    58:28:a2:28:15:c2:43:12:6c:6d:f4:71:84:7a:d1:
                    9e:11:40:71:eb:1a:a3:57:17:f1:45:48:22:04:05:
                    b2:42:c4:a4:8f:14:3c:fc:fd:90:87:fa:29:fa:d9:
                    58:49:dd:60:81:0a:99:b6:60:75:64:6b:03:91:ec:
                    be:9f:59:4a:ca:97:ba:b0:1a:38:52:d5:8e:58:ab:
                    4e:f0:75:21:e9:8a:13:90:bb:82:24:16:79:11:aa:
                    c1:3b:f6:8b:e9:3e:a2:86:aa:65:02:14:d0:82:47:
                    ac:a0:3b:59:dc:41:b0:20:98:5d:10:e1:12:72:94:
                    ac:83:64:98:18:d7:11:a9:b6:2f:56:d7:ff:7e:81:
                    7a:bc:7d:9b:9a:e2:1d:f8:2a:0d:6d:69:d9:8b:6a:
                    83:59:18:47:f5:c8:06:bf:26:e4:2b:55:7e:e4:02:
                    6c:69:d6:25:5d:20:9e:27:1d:f1:33:c6:7a:95:70:
                    ea:1f:5b:0b:1f:8b:cd:0b:c5:6b:3e:81:99:97:0d:
                    e1:6c:5d:75:f3:2c:ac:cc:f1:0a:7d:62:7f:7e:59:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:41:2A:88:A7:91:D2:2D:44:41:53:CA:BA:8C:A6:85:E0:A3:1A
            X509v3 Authority Key Identifier:
                keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:4c:60:89:f4:8b:85:b1:c5:80:62:be:d5:98:3f:a8:b6:
         cc:7e:0b:db:a9:c9:e7:97:db:11:7c:f9:e4:4e:e9:7f:19:70:
         7a:83:3c:6a:17:18:4e:29:94:7d:a3:4a:3d:2e:91:0b:19:7f:
         a4:b8:39:7c:fb:38:10:47:3f:01:a1:76:e1:fe:0e:70:45:f7:
         7e:78:21:ff:54:64:f0:62:6f:83:a0:be:ff:24:2a:6b:56:71:
         28:c1:52:4f:39:b9:26:44:df:59:0c:31:b6:e0:06:b8:1e:eb:
         a1:52:8a:6c:cd:2e:02:21:4f:98:ce:7b:b9:bc:b1:d3:6e:6d:
         7f:0f:b9:3f:e1:1a:d7:9a:a7:c3:c8:d6:4b:49:74:f7:71:26:
         d8:7d:1a:fe:06:2b:91:17:c8:7a:08:4d:b2:81:9d:31:1d:c0:
         d5:6c:b8:44:58:d6:73:c5:39:38:3d:34:c4:4c:d0:4a:9e:72:
         0f:a0:2f:c9:d4:28:c5:1f:84:e0:7c:cf:2a:fa:6b:a6:03:5c:
         6a:72:4b:fc:41:c8:c1:1b:68:cf:90:a2:2a:21:51:63:2f:c9:
         9f:9a:cf:31:5d:8c:06:31:5b:64:26:6b:64:6a:4a:bc:3c:bb:
         1c:c4:84:f6:07:fb:49:48:06:f6:5f:54:62:72:fb:0b:1a:7f:
         d7:a9:6f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuKr0LwMElFepmBT64/zVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0
MGYzOTAwHhcNMjYwODE1MDAwMDUxWhcNMjYwODE2MDAwMDUxWjAzMTEwLwYDVQQD
EyhmODBhNDEyYTg4YTc5MWQyMmQ0NDQxNTNjYWJhOGNhNjg1ZTBhMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhe/MwJdTv1Zg65ES0Ks6UyNlIxS
DWI17weTOBNSrdVcZjVweSSS/vXWHL5YKKIoFcJDEmxt9HGEetGeEUBx6xqjVxfx
RUgiBAWyQsSkjxQ8/P2Qh/op+tlYSd1ggQqZtmB1ZGsDkey+n1lKype6sBo4UtWO
WKtO8HUh6YoTkLuCJBZ5EarBO/aL6T6ihqplAhTQgkesoDtZ3EGwIJhdEOEScpSs
g2SYGNcRqbYvVtf/foF6vH2bmuId+CoNbWnZi2qDWRhH9cgGvybkK1V+5AJsadYl
XSCeJx3xM8Z6lXDqH1sLH4vNC8VrPoGZlw3hbF118yyszPEKfWJ/flmpcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgKQSqIp5HSLURBU8q6jKaF4KMaMB8GA1UdIwQY
MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt
NDAxNTNjNWQwYTQ3LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3
LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt9MYIn0
i4WxxYBivtWYP6i2zH4L26nJ55fbEXz55E7pfxlweoM8ahcYTimUfaNKPS6RCxl/
pLg5fPs4EEc/AaF24f4OcEX3fngh/1Rk8GJvg6C+/yQqa1ZxKMFSTzm5JkTfWQwx
tuAGuB7roVKKbM0uAiFPmM57ubyx025tfw+5P+Ea15qnw8jWS0l093Em2H0a/gYr
kRfIeghNsoGdMR3A1Wy4RFjWc8U5OD00xEzQSp5yD6AvydQoxR+E4HzPKvprpgNc
anJL/EHIwRtoz5CiKiFRYy/Jn5rPMV2MBjFbZCZrZGpKvDy7HMSE9gf7SUgG9l9U
YnL7Cxp/16lvUg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:28 2026 by rpki-client