Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File:                     rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier:          JnYdlpzfAlxlzdsHyL9mu8OrPYIy6DZgB29JaMKzhwY=
Subject key identifier:   D4:A6:0C:54:68:0D:E3:DA:13:39:85:34:3A:BB:22:48:18:EF:A3:0C
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer:       /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial:       01A002B8C6B282A0406B2EF65C5BB786FD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number:          1994
Signing time:             Sat 15 Aug 2026 00:00:58 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:58 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:58 +0000
Files and hashes:         1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
                          2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: v/+JnMACGT2mjwmRRkgg6Rre76LCrwpptdEJe7PVGzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:c6:b2:82:a0:40:6b:2e:f6:5c:5b:b7:86:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
        Validity
            Not Before: Aug 15 00:00:58 2026 GMT
            Not After : Aug 16 00:00:58 2026 GMT
        Subject: CN=d4a60c54680de3da133985343abb224818efa30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:df:a7:e3:85:e1:02:32:cd:fe:5a:59:5a:
                    52:14:ed:fa:e4:1d:09:d0:83:ac:98:35:3b:7f:9b:
                    aa:f2:53:69:a0:25:e6:cc:87:e6:3d:6d:70:37:dc:
                    e4:d6:ff:95:da:fe:85:2d:3b:97:d3:e6:38:33:9b:
                    ff:2a:1c:2e:9f:88:0a:42:0a:87:45:34:12:8b:87:
                    30:fd:e5:64:00:bf:ac:f6:1a:4d:25:1c:ca:fb:4d:
                    4c:9a:d2:49:fc:6e:91:31:9c:15:25:d2:3e:ae:5c:
                    ae:54:f9:b6:a5:a0:80:cf:8a:f3:0e:cc:df:d4:68:
                    cf:a6:1b:37:38:f0:3e:74:b3:ad:ea:35:94:0b:12:
                    e0:7a:c9:9b:39:6c:06:e9:0b:47:1f:66:e4:52:4e:
                    2b:1f:90:c6:b6:ae:b2:c8:1f:07:50:8c:36:0c:a2:
                    42:76:e7:4e:c8:dc:18:7b:08:e4:bb:3b:98:b5:e2:
                    11:55:ac:35:8a:8f:81:56:a7:10:56:03:62:b4:86:
                    c8:07:cf:33:1d:07:87:ac:2a:a1:29:9e:e3:ed:64:
                    64:c4:85:90:fa:49:90:39:1b:f9:ce:9d:01:d9:8a:
                    80:9e:01:8b:2e:5f:2d:6a:1d:d0:01:88:6c:ea:2e:
                    20:4a:05:27:5a:f8:34:91:01:d3:44:eb:6c:1d:28:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:0C:54:68:0D:E3:DA:13:39:85:34:3A:BB:22:48:18:EF:A3:0C
            X509v3 Authority Key Identifier:
                keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:59:c2:40:30:c4:fb:c9:81:57:8d:ee:7a:54:f6:75:c7:a1:
         7a:cd:21:54:8a:26:ef:dd:88:04:cc:00:34:09:8d:43:ce:27:
         13:45:11:ee:ff:9d:a3:04:6e:97:48:a6:f5:91:3d:87:97:10:
         ec:70:df:de:e3:5a:90:75:9a:bd:86:2b:e0:10:b6:db:71:d0:
         cd:c9:32:cc:d6:3a:cf:dc:cd:c7:00:26:a7:d6:08:dd:40:1c:
         97:d4:93:0b:b5:e2:55:66:55:32:95:6e:6a:96:ac:3c:4a:f0:
         2f:36:b5:39:c0:3a:81:69:f6:37:17:d6:6a:7a:38:62:25:0e:
         ab:f0:d8:f3:bc:51:41:e7:44:0b:a5:66:66:3f:05:e9:cb:9f:
         d3:55:f7:85:b1:8f:20:03:52:9d:30:d6:6a:88:ec:78:1e:e1:
         50:18:bf:48:8a:07:e7:a4:db:37:68:56:d4:48:48:54:b4:f2:
         5b:a9:cb:7f:1e:b2:40:00:e1:be:4e:92:81:9e:8d:64:30:d4:
         e9:6d:83:0c:52:04:ed:8a:34:b7:49:cb:4a:eb:cf:b7:6b:d3:
         c0:eb:25:b2:05:4b:38:3e:33:35:7d:f2:8a:5e:ea:a4:76:60:
         5a:d7:94:ff:50:0b:f7:da:6d:db:24:81:c7:c4:8b:b2:7e:f6:
         88:da:a2:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuMaygqBAay72XFu3hv01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl
ZWMyZTcwHhcNMjYwODE1MDAwMDU4WhcNMjYwODE2MDAwMDU4WjAzMTEwLwYDVQQD
EyhkNGE2MGM1NDY4MGRlM2RhMTMzOTg1MzQzYWJiMjI0ODE4ZWZhMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Tfp+OF4QIyzf5aWVpSFO365B0J
0IOsmDU7f5uq8lNpoCXmzIfmPW1wN9zk1v+V2v6FLTuX0+Y4M5v/Khwun4gKQgqH
RTQSi4cw/eVkAL+s9hpNJRzK+01MmtJJ/G6RMZwVJdI+rlyuVPm2paCAz4rzDszf
1GjPphs3OPA+dLOt6jWUCxLgesmbOWwG6QtHH2bkUk4rH5DGtq6yyB8HUIw2DKJC
dudOyNwYewjkuzuYteIRVaw1io+BVqcQVgNitIbIB88zHQeHrCqhKZ7j7WRkxIWQ
+kmQORv5zp0B2YqAngGLLl8tah3QAYhs6i4gSgUnWvg0kQHTROtsHSjsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSmDFRoDePaEzmFNDq7IkgY76MMMB8GA1UdIwQY
MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt
ZGJlNmM5MTBiYmE2LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2
LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclnCQDDE
+8mBV43uelT2dcehes0hVIom792IBMwANAmNQ84nE0UR7v+dowRul0im9ZE9h5cQ
7HDf3uNakHWavYYr4BC223HQzckyzNY6z9zNxwAmp9YI3UAcl9STC7XiVWZVMpVu
apasPErwLza1OcA6gWn2NxfWano4YiUOq/DY87xRQedEC6VmZj8F6cuf01X3hbGP
IANSnTDWaojseB7hUBi/SIoH56TbN2hW1EhIVLTyW6nLfx6yQADhvk6SgZ6NZDDU
6W2DDFIE7Yo0t0nLSuvPt2vTwOslsgVLOD4zNX3yil7qpHZgWteU/1AL99pt2ySB
x8SLsn72iNqimQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:04 2026 by rpki-client