Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File:                     l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier:          W+N5DgYt+ReZ+6n7+oz0s27DLbP269GA3V6sjtHaSA8=
Subject key identifier:   04:41:62:CD:2F:C2:39:0A:0E:76:61:23:96:1C:97:26:84:04:07:1B
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer:       /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial:       019FFE6E1C04600DDF6F14226625B4C88EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number:          19E6
Signing time:             Fri 14 Aug 2026 04:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 04:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 04:00:56 +0000
Files and hashes:         1: 8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa (hash: AkbjUVe9rqlWL80z0FPBMQHWUds+wn6xHXbSbheZ2uo=)
                          2: Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa (hash: JRuLWMClb6VMX6iY+2SiZAouIeUYw7rqGE6z3zbCih8=)
                          3: I69HW9-2LDsB2CaVEks5_3a5REs.roa (hash: VaEGUMNsvoxTwCs+xBT9y6X6/jmAjsOlAteyyzeE/Kc=)
                          4: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: LIrjxLn+tndljZWOhr8KmHtuq8ALB348y/6BAJ3QFpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:6e:1c:04:60:0d:df:6f:14:22:66:25:b4:c8:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
        Validity
            Not Before: Aug 14 04:00:56 2026 GMT
            Not After : Aug 15 04:00:56 2026 GMT
        Subject: CN=044162cd2fc2390a0e766123961c97268404071b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:99:ed:a1:d7:30:a0:1c:d3:8f:6c:78:5b:
                    e3:d5:07:af:2f:de:20:75:68:1b:32:af:bb:41:2a:
                    86:54:17:31:b2:40:cf:00:8c:3a:6e:04:a1:c2:86:
                    cc:f1:8f:cd:eb:b7:05:06:b1:27:0c:3e:c3:d7:e6:
                    38:11:ef:58:7c:7e:35:4c:f1:be:f4:40:8f:4e:42:
                    ef:c6:8c:8f:bf:64:dc:ed:8e:bc:37:96:56:3f:d5:
                    39:6d:5b:d5:c1:33:09:a4:1f:cf:06:e1:8f:4c:27:
                    b1:c4:ed:13:74:e3:6f:dc:9f:93:71:91:7c:1a:a8:
                    94:28:df:98:28:85:5f:f3:f7:ac:ca:62:51:00:dd:
                    74:3e:1f:5d:e1:83:e0:99:b4:16:a8:88:d9:c9:80:
                    5b:4b:46:92:ec:05:bc:7f:db:14:a2:5d:d1:26:6c:
                    a5:a2:60:d9:a4:68:e9:eb:fa:cd:b7:ef:ac:09:36:
                    bd:0f:34:41:ab:78:93:a9:91:fb:63:8c:9e:28:b5:
                    fa:27:d8:eb:da:44:74:76:8b:5f:21:7f:f4:20:50:
                    5e:ab:41:a7:db:03:67:57:b1:a4:fa:20:54:30:15:
                    a7:bd:eb:69:df:8c:ea:6d:a9:0d:9b:c0:4b:87:75:
                    e6:90:8e:f6:9b:72:a6:11:51:1b:26:e6:94:48:40:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:62:CD:2F:C2:39:0A:0E:76:61:23:96:1C:97:26:84:04:07:1B
            X509v3 Authority Key Identifier:
                keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:43:a0:82:c1:f8:1b:29:37:c1:8b:91:2b:26:2a:69:b8:
         cb:9d:64:6f:06:05:ab:6e:61:83:74:74:87:37:22:31:bd:2c:
         58:b1:07:16:57:ef:75:55:ca:8d:12:3b:4d:3c:92:3f:9f:7e:
         6b:5c:70:4f:ef:ce:48:90:87:94:cd:f5:49:b1:da:c3:99:40:
         f4:f5:12:40:d7:6f:55:91:85:fb:e6:f2:1e:6c:37:e7:ee:68:
         ef:2e:4c:d1:55:c6:6e:d9:ff:24:56:76:2f:be:ab:c1:49:3f:
         82:a0:e4:74:5d:f5:df:d3:36:05:0b:62:f0:51:a4:ce:57:54:
         aa:28:d4:97:30:82:b5:e8:fb:33:d1:85:ae:9c:eb:b9:83:b1:
         be:0c:d7:49:7b:34:28:65:b4:fb:e8:c1:e8:e7:cc:df:4e:7e:
         24:3e:5b:e7:c5:9c:5a:ab:88:07:10:df:1e:79:22:de:f8:0c:
         f7:d4:76:79:cd:7a:38:f2:3d:50:d2:9d:aa:2d:d0:6b:a1:4a:
         62:0d:f3:ff:26:d5:cb:77:b8:48:6e:7f:a3:a0:b7:61:87:53:
         ff:66:7a:6e:f7:0c:9b:2b:72:08:17:62:13:14:e7:f6:e5:b7:
         fa:5e:0a:b6:3f:e2:12:12:f2:8e:95:ff:c2:7d:a1:dc:0f:e0:
         97:0d:e1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/+bhwEYA3fbxQiZiW0yI7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5
MmUzN2QwHhcNMjYwODE0MDQwMDU2WhcNMjYwODE1MDQwMDU2WjAzMTEwLwYDVQQD
EygwNDQxNjJjZDJmYzIzOTBhMGU3NjYxMjM5NjFjOTcyNjg0MDQwNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2aZ7aHXMKAc049seFvj1QevL94g
dWgbMq+7QSqGVBcxskDPAIw6bgShwobM8Y/N67cFBrEnDD7D1+Y4Ee9YfH41TPG+
9ECPTkLvxoyPv2Tc7Y68N5ZWP9U5bVvVwTMJpB/PBuGPTCexxO0TdONv3J+TcZF8
GqiUKN+YKIVf8/esymJRAN10Ph9d4YPgmbQWqIjZyYBbS0aS7AW8f9sUol3RJmyl
omDZpGjp6/rNt++sCTa9DzRBq3iTqZH7Y4yeKLX6J9jr2kR0dotfIX/0IFBeq0Gn
2wNnV7Gk+iBUMBWnvetp34zqbakNm8BLh3XmkI72m3KmEVEbJuaUSEBwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARBYs0vwjkKDnZhI5YclyaEBAcbMB8GA1UdIwQY
MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt
NjM4ZGNmYTEzMDAzLzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz
LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKBDoILB
+BspN8GLkSsmKmm4y51kbwYFq25hg3R0hzciMb0sWLEHFlfvdVXKjRI7TTySP59+
a1xwT+/OSJCHlM31SbHaw5lA9PUSQNdvVZGF++byHmw35+5o7y5M0VXGbtn/JFZ2
L76rwUk/gqDkdF3139M2BQti8FGkzldUqijUlzCCtej7M9GFrpzruYOxvgzXSXs0
KGW0++jB6OfM305+JD5b58WcWquIBxDfHnki3vgM99R2ec16OPI9UNKdqi3Qa6FK
Yg3z/ybVy3e4SG5/o6C3YYdT/2Z6bvcMmytyCBdiExTn9uW3+l4Ktj/iEhLyjpX/
wn2h3A/glw3hnw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:47 2026 by rpki-client