Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File:                     xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier:          oHv/CeYyQdbnf9ABUgmHjhy7GPbwjhvl+NwqEJBGQoY=
Subject key identifier:   05:D6:8E:CA:67:3D:03:A7:CC:25:D3:AE:90:64:AB:6E:3D:48:4E:FB
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer:       /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial:       01A0043929E5D2BC18462E57828F117EB6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number:          193E
Signing time:             Sat 15 Aug 2026 07:00:50 +0000
Manifest this update:     Sat 15 Aug 2026 07:00:50 +0000
Manifest next update:     Sun 16 Aug 2026 07:00:50 +0000
Files and hashes:         1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
                          2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: WpnUiYH5e1yD3OXdEsTpcUa9pqw6MOjiB4ryGQEKw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:39:29:e5:d2:bc:18:46:2e:57:82:8f:11:7e:b6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
        Validity
            Not Before: Aug 15 07:00:50 2026 GMT
            Not After : Aug 16 07:00:50 2026 GMT
        Subject: CN=05d68eca673d03a7cc25d3ae9064ab6e3d484efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:29:c1:15:53:6d:1a:03:54:9d:6b:f8:16:
                    56:ce:e0:b9:1c:a1:c1:d1:ad:24:1d:3d:6b:8d:2c:
                    28:f9:3b:a6:27:a6:3c:81:70:73:61:34:b9:77:69:
                    be:aa:c8:d2:e1:b0:78:b8:47:20:e3:cf:1c:46:a5:
                    a4:20:1a:c9:54:69:a8:7e:d8:8c:10:d8:b1:12:37:
                    87:dd:12:55:a0:bb:14:31:aa:dc:a6:f9:26:44:7e:
                    f9:f2:3c:63:85:ab:44:22:64:1a:9d:8f:00:9d:16:
                    39:07:e5:1d:37:6b:10:f2:1b:ec:a9:c5:42:c6:a4:
                    36:1d:ad:8b:7a:8a:6d:bd:e0:d2:06:9e:25:75:9a:
                    23:0e:24:39:4f:33:b7:cf:96:9c:47:69:1a:14:30:
                    41:72:b3:31:fd:53:8d:d4:b1:e7:e2:18:d1:27:a4:
                    e3:f0:bf:d0:fc:de:f2:66:87:aa:50:04:73:a6:4b:
                    a3:d8:37:85:56:a8:c3:63:e1:0b:c0:e5:c3:d1:f7:
                    40:01:04:35:db:ef:83:04:1c:f9:bc:a4:ff:fa:01:
                    62:c7:d7:17:b7:94:2c:84:84:7e:09:07:30:f0:01:
                    f2:42:7d:af:7f:a2:f7:d5:b7:6b:a2:12:74:f8:2a:
                    d3:51:2f:81:72:78:be:7c:67:a0:ea:3e:79:00:87:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:8E:CA:67:3D:03:A7:CC:25:D3:AE:90:64:AB:6E:3D:48:4E:FB
            X509v3 Authority Key Identifier:
                keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:28:9a:9b:63:b6:86:f5:81:14:cc:ff:da:38:a9:2e:84:
         f9:a3:02:82:93:91:a1:ae:c4:bf:62:91:0d:54:f1:bd:0d:1d:
         f8:19:17:5e:94:14:de:9c:dc:a3:ef:c0:7c:49:5c:70:be:5f:
         74:1b:1b:6b:05:1d:d9:71:17:00:0f:08:9f:33:02:69:b5:b5:
         78:78:8d:99:65:f0:50:d2:3f:c9:0c:30:6f:0d:39:30:43:98:
         75:53:31:e7:ad:22:ca:45:8e:c4:3f:9c:c4:e8:ef:de:65:99:
         77:98:1e:51:39:ac:bb:6d:fe:94:82:62:4c:40:a4:59:7b:8c:
         5b:72:a1:ac:53:74:94:5d:1b:76:87:a7:74:51:58:37:d9:fd:
         8b:66:f6:1c:81:86:a7:ce:43:74:69:a0:18:ff:32:2d:a4:9d:
         f1:eb:9f:c3:2a:84:93:cd:5c:fa:89:c7:bb:fc:a8:37:de:75:
         9f:c4:24:f1:62:c0:70:0f:24:48:02:94:cb:d9:10:a5:24:75:
         de:1a:81:63:6a:cd:76:c5:32:7e:71:ba:f0:04:fb:49:3c:ad:
         ef:22:57:e7:7a:c4:9d:92:74:50:4c:c1:f6:01:6b:0c:59:0f:
         1b:71:2d:4f:f8:a8:37:64:28:09:60:76:bd:fb:e1:46:82:3a:
         dd:15:f7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEOSnl0rwYRi5Xgo8RfrazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4
MDVlZjEwHhcNMjYwODE1MDcwMDUwWhcNMjYwODE2MDcwMDUwWjAzMTEwLwYDVQQD
EygwNWQ2OGVjYTY3M2QwM2E3Y2MyNWQzYWU5MDY0YWI2ZTNkNDg0ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pIpwRVTbRoDVJ1r+BZWzuC5HKHB
0a0kHT1rjSwo+TumJ6Y8gXBzYTS5d2m+qsjS4bB4uEcg488cRqWkIBrJVGmoftiM
ENixEjeH3RJVoLsUMarcpvkmRH758jxjhatEImQanY8AnRY5B+UdN2sQ8hvsqcVC
xqQ2Ha2LeoptveDSBp4ldZojDiQ5TzO3z5acR2kaFDBBcrMx/VON1LHn4hjRJ6Tj
8L/Q/N7yZoeqUARzpkuj2DeFVqjDY+ELwOXD0fdAAQQ12++DBBz5vKT/+gFix9cX
t5QshIR+CQcw8AHyQn2vf6L31bdrohJ0+CrTUS+Bcni+fGeg6j55AIemBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXWjspnPQOnzCXTrpBkq249SE77MB8GA1UdIwQY
MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt
NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl
LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEYomptj
tob1gRTM/9o4qS6E+aMCgpORoa7Ev2KRDVTxvQ0d+BkXXpQU3pzco+/AfElccL5f
dBsbawUd2XEXAA8InzMCabW1eHiNmWXwUNI/yQwwbw05MEOYdVMx560iykWOxD+c
xOjv3mWZd5geUTmsu23+lIJiTECkWXuMW3KhrFN0lF0bdoendFFYN9n9i2b2HIGG
p85DdGmgGP8yLaSd8eufwyqEk81c+onHu/yoN951n8Qk8WLAcA8kSAKUy9kQpSR1
3hqBY2rNdsUyfnG68AT7STyt7yJX53rEnZJ0UEzB9gFrDFkPG3EtT/ioN2QoCWB2
vfvhRoI63RX3xQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:52 2026 by rpki-client