Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          6w6TUTOEHB2MTbvsceWTFHMxuJxU0jN7MP11fFGOaIs=
Subject key identifier:   1C:F6:1C:AC:C8:7A:F8:7A:10:19:8C:82:51:91:C9:51:D1:22:62:E5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       01A089E7620016878E9DD794E553DD7B8875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          13E2
Signing time:             Thu 10 Sep 2026 06:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:37 +0000
Files and hashes:         1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=)
                          2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
                          3: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=)
                          4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
                          5: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
                          6: WrVfx5xIOyU0VfM4lWHO9zuUBec.roa (hash: XiwYRUE8TPoWMz3FqnBDZHH2r5WpV+Blp9EaBYJYRms=)
                          7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=)
                          8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=)
                          9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
                          10: b3hSMqZucbTEWGNrQwAs2IFGkRw.roa (hash: z/yFesinyEyBrIjdwqEECuXJOsbqlJbwdnSENUJBacc=)
                          11: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
                          12: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: AgzZIp/MAFlYCBFJf2uW9TBbD0UlMv4XO4SzAk9Pw90=)
                          13: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:62:00:16:87:8e:9d:d7:94:e5:53:dd:7b:88:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Sep 10 06:00:37 2026 GMT
            Not After : Sep 11 06:00:37 2026 GMT
        Subject: CN=1cf61cacc87af87a10198c825191c951d12262e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:f9:a7:7c:29:30:8b:13:78:70:94:89:57:
                    11:15:6a:08:ac:65:03:6d:cb:6f:de:c2:a7:28:72:
                    69:b3:a7:72:2c:ec:a3:2c:c7:20:db:75:ad:78:02:
                    d5:7d:f9:44:fa:b9:5e:15:b3:3f:26:94:a7:21:2b:
                    95:d1:12:37:e7:60:b5:c7:cd:c5:4f:05:66:cb:db:
                    5a:86:ca:f1:14:d8:b6:b7:41:53:98:c1:07:a5:ef:
                    ea:d1:f3:15:ea:af:cb:2d:87:5a:25:01:b3:41:9c:
                    1f:8e:ff:01:f4:f5:b8:ae:cd:a5:da:a3:6c:68:62:
                    ca:b4:ff:24:44:e0:6c:64:b2:ea:64:3c:a8:9a:57:
                    66:bd:5c:79:f7:53:3c:98:94:58:1c:7d:f7:07:b3:
                    7f:e4:f4:84:a1:e6:f0:a4:d0:48:c1:de:39:fe:52:
                    12:26:8c:61:ca:52:3e:b5:24:5f:e4:51:58:17:a4:
                    1d:c6:e1:3f:33:3f:3f:52:70:2e:17:d2:a9:55:48:
                    09:a5:a3:ac:df:57:1f:46:20:40:40:16:d0:e7:6b:
                    6a:26:53:75:fe:a7:0e:42:72:6c:c6:a0:63:ba:dc:
                    e2:0b:af:e4:63:f4:cb:48:3e:71:7c:61:cf:08:18:
                    94:ff:c8:d8:b3:f5:c9:ef:e6:1a:d1:20:7d:56:72:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F6:1C:AC:C8:7A:F8:7A:10:19:8C:82:51:91:C9:51:D1:22:62:E5
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:90:c8:f2:b9:bb:74:2d:0d:46:6b:d4:c8:4b:52:dc:06:4f:
         69:7a:05:1e:3c:76:5c:d5:54:66:ae:37:b7:3f:92:66:a9:36:
         42:eb:53:f6:67:ed:27:a9:59:10:db:d8:b7:28:d9:3e:2e:be:
         5f:18:c2:04:82:4d:2c:45:52:95:ef:27:67:4c:56:c0:ac:7a:
         49:9c:a0:7e:2d:a5:17:b7:d0:0e:2a:31:e7:41:4c:df:e3:0c:
         e5:1a:f6:21:ff:c9:2d:8f:71:92:96:2b:16:71:b7:21:24:f5:
         8e:07:eb:00:bb:6e:c3:6c:52:b7:de:a4:19:1d:a8:ed:37:b3:
         a9:b3:30:6e:b7:bb:e8:e0:a6:54:75:fc:93:6a:5c:6b:ca:d3:
         ce:8b:d6:40:00:33:49:35:99:89:9d:25:39:f3:27:38:b3:78:
         a7:ec:bc:2f:00:c7:54:50:47:fd:fc:f5:46:98:aa:50:38:82:
         b2:55:ef:0e:6c:37:ce:cb:49:5d:52:18:35:4f:e6:95:4b:47:
         b7:49:47:3d:d0:83:64:d9:2a:c3:ad:a2:f8:88:85:f7:f1:46:
         14:70:3b:dd:0b:f0:de:d2:66:84:24:ce:d2:7c:99:8a:d9:0a:
         04:dc:d4:e2:49:96:a1:2d:88:fc:18:f9:cb:18:02:84:02:72:
         cc:1a:0a:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ52IAFoeOndeU5VPde4h1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjYwOTEwMDYwMDM3WhcNMjYwOTExMDYwMDM3WjAzMTEwLwYDVQQD
EygxY2Y2MWNhY2M4N2FmODdhMTAxOThjODI1MTkxYzk1MWQxMjI2MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+D5p3wpMIsTeHCUiVcRFWoIrGUD
bctv3sKnKHJps6dyLOyjLMcg23WteALVfflE+rleFbM/JpSnISuV0RI352C1x83F
TwVmy9tahsrxFNi2t0FTmMEHpe/q0fMV6q/LLYdaJQGzQZwfjv8B9PW4rs2l2qNs
aGLKtP8kROBsZLLqZDyomldmvVx591M8mJRYHH33B7N/5PSEoebwpNBIwd45/lIS
JoxhylI+tSRf5FFYF6QdxuE/Mz8/UnAuF9KpVUgJpaOs31cfRiBAQBbQ52tqJlN1
/qcOQnJsxqBjutziC6/kY/TLSD5xfGHPCBiU/8jYs/XJ7+Ya0SB9VnKOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz2HKzIevh6EBmMglGRyVHRImLlMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpDI8rm7
dC0NRmvUyEtS3AZPaXoFHjx2XNVUZq43tz+SZqk2QutT9mftJ6lZENvYtyjZPi6+
XxjCBIJNLEVSle8nZ0xWwKx6SZygfi2lF7fQDiox50FM3+MM5Rr2If/JLY9xkpYr
FnG3IST1jgfrALtuw2xSt96kGR2o7TezqbMwbre76OCmVHX8k2pca8rTzovWQAAz
STWZiZ0lOfMnOLN4p+y8LwDHVFBH/fz1RpiqUDiCslXvDmw3zstJXVIYNU/mlUtH
t0lHPdCDZNkqw62i+IiF9/FGFHA73Qvw3tJmhCTO0nyZitkKBNzU4kmWoS2I/Bj5
yxgChAJyzBoKrQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:49:01 2026 by rpki-client