Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          eW77+FOPhWKprSo/sCysE/W9PZEQXVEOMT1qOy0A30A=
Subject key identifier:   3B:65:48:5F:03:39:F9:0C:23:7F:FB:57:C7:5D:0E:32:8B:11:08:D1
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       01A0005CF525E7B4CFF8C1DDB0947E681693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1A1D
Signing time:             Fri 14 Aug 2026 13:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:27 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: pu0WySoce1FfwwWa9BlyYUEf/BkvRXFeQUfu0rlCwJQ=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:f5:25:e7:b4:cf:f8:c1:dd:b0:94:7e:68:16:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Aug 14 13:01:27 2026 GMT
            Not After : Aug 15 13:01:27 2026 GMT
        Subject: CN=3b65485f0339f90c237ffb57c75d0e328b1108d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:03:e8:c0:12:b0:b4:42:44:4f:77:b4:48:
                    36:84:68:60:01:97:3c:91:d4:9f:db:24:ec:23:5e:
                    55:2c:81:47:79:24:4f:50:cd:63:61:a3:e7:11:76:
                    49:04:09:99:fd:87:3d:01:b2:05:9e:f9:51:f3:93:
                    dc:90:b6:0e:dc:f2:f1:d2:3a:12:c4:21:a9:67:e1:
                    a8:87:10:bd:e3:8d:e0:f8:3f:36:b2:8f:a5:27:53:
                    48:7b:58:10:36:ce:5a:b2:b4:72:04:28:ac:16:19:
                    6d:24:25:2a:bb:b6:b8:25:7d:13:70:29:73:4c:e2:
                    47:32:60:e0:f7:aa:97:5b:53:62:ff:a9:9a:31:e2:
                    99:fd:fc:c6:b4:86:26:65:5c:22:1b:41:2a:cd:17:
                    67:c6:9e:5b:38:b5:cf:29:01:55:3c:ad:90:5b:7a:
                    9d:47:54:3a:45:34:60:b1:71:95:d7:5e:ad:90:26:
                    37:37:d9:ff:a0:35:4c:13:e7:b6:22:a7:21:4e:05:
                    97:d5:97:4a:2b:bf:8c:81:8b:f4:75:67:1b:4e:d5:
                    55:fe:8d:c6:2f:2d:e1:7c:e1:c9:13:ea:0a:66:76:
                    94:7e:33:95:83:bb:42:6a:c5:75:c3:28:01:50:72:
                    1a:21:9c:65:72:b0:fb:ba:a6:67:2c:a2:0b:4b:4d:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:65:48:5F:03:39:F9:0C:23:7F:FB:57:C7:5D:0E:32:8B:11:08:D1
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:75:18:ee:9a:41:a2:22:f6:c1:e1:9b:93:fa:73:48:e2:
         e8:85:4d:11:3f:e8:6d:ef:b6:c2:47:32:3a:bb:eb:6a:97:5b:
         df:4e:8a:68:a9:a4:b4:dc:d0:51:ca:24:df:e2:d5:97:d0:4c:
         ca:bb:ed:e0:b7:51:2e:65:2f:99:ea:72:3c:3a:78:59:b2:d8:
         77:5e:61:57:12:22:51:89:77:64:4c:de:00:fc:5d:31:c9:13:
         1e:99:a1:b7:07:d2:38:1f:7f:b8:14:31:91:03:c3:fa:25:ee:
         5e:67:b7:ee:ec:ea:38:a7:86:c4:6c:ef:e6:55:3b:36:4a:1c:
         54:77:35:ca:a0:c6:52:eb:5b:a2:06:8c:75:fa:fe:db:8d:14:
         18:24:77:a6:4d:1a:62:cc:e5:59:b9:51:c4:4e:a8:27:37:76:
         e1:03:2e:9c:a7:39:16:2d:8d:44:a4:2d:03:3f:c9:e5:ae:51:
         f7:a1:3c:59:3d:a2:37:f6:17:52:df:2b:24:b4:bf:8b:28:cd:
         fc:81:15:ae:51:b5:d7:57:4e:66:ed:5a:6f:ec:2f:7d:d8:f9:
         28:ad:1c:31:90:f3:c3:da:c0:9b:0a:fb:c3:07:09:13:ea:ad:
         29:82:2a:b5:e4:e6:07:24:62:58:6e:d4:1e:07:eb:80:6b:7c:
         49:1a:9c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXPUl57TP+MHdsJR+aBaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjYwODE0MTMwMTI3WhcNMjYwODE1MTMwMTI3WjAzMTEwLwYDVQQD
EygzYjY1NDg1ZjAzMzlmOTBjMjM3ZmZiNTdjNzVkMGUzMjhiMTEwOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskoD6MASsLRCRE93tEg2hGhgAZc8
kdSf2yTsI15VLIFHeSRPUM1jYaPnEXZJBAmZ/Yc9AbIFnvlR85PckLYO3PLx0joS
xCGpZ+GohxC9443g+D82so+lJ1NIe1gQNs5asrRyBCisFhltJCUqu7a4JX0TcClz
TOJHMmDg96qXW1Ni/6maMeKZ/fzGtIYmZVwiG0EqzRdnxp5bOLXPKQFVPK2QW3qd
R1Q6RTRgsXGV116tkCY3N9n/oDVME+e2IqchTgWX1ZdKK7+MgYv0dWcbTtVV/o3G
Ly3hfOHJE+oKZnaUfjOVg7tCasV1wygBUHIaIZxlcrD7uqZnLKILS00VYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtlSF8DOfkMI3/7V8ddDjKLEQjRMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk091GO6a
QaIi9sHhm5P6c0ji6IVNET/obe+2wkcyOrvrapdb306KaKmktNzQUcok3+LVl9BM
yrvt4LdRLmUvmepyPDp4WbLYd15hVxIiUYl3ZEzeAPxdMckTHpmhtwfSOB9/uBQx
kQPD+iXuXme37uzqOKeGxGzv5lU7NkocVHc1yqDGUutbogaMdfr+240UGCR3pk0a
YszlWblRxE6oJzd24QMunKc5Fi2NRKQtAz/J5a5R96E8WT2iN/YXUt8rJLS/iyjN
/IEVrlG111dOZu1ab+wvfdj5KK0cMZDzw9rAmwr7wwcJE+qtKYIqteTmByRiWG7U
HgfrgGt8SRqcUQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:10 2026 by rpki-client