Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File:                     8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier:          qMAzTcYD3cEDwxL8C2Gc8iveH67vZYsIwZS+IMP4gxM=
Subject key identifier:   07:0A:7A:96:7D:FE:97:63:A3:2D:5D:1C:E4:1D:D6:4D:85:07:C7:5C
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer:       /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial:       01A0005CE89F1A3FB37ACA29BC80181F93D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number:          10E2
Signing time:             Fri 14 Aug 2026 13:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:23 +0000
Files and hashes:         1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: d4f+++dwSmZ91v0wyzIFENKVtZNjMhyItRYS3H0weRA=)
                          2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:e8:9f:1a:3f:b3:7a:ca:29:bc:80:18:1f:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
        Validity
            Not Before: Aug 14 13:01:23 2026 GMT
            Not After : Aug 15 13:01:23 2026 GMT
        Subject: CN=070a7a967dfe9763a32d5d1ce41dd64d8507c75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:7a:a5:ce:d6:15:03:36:4d:1e:5c:5d:f6:
                    92:96:f7:43:63:e9:66:cb:38:2a:51:ce:10:79:ee:
                    ca:0c:df:09:6d:50:e6:a4:76:f5:8c:a5:42:6b:b6:
                    c9:35:13:6f:8b:e1:07:d0:e4:0f:28:4a:39:34:98:
                    6d:e5:58:e9:35:12:67:2c:4e:ba:c8:ba:fe:a1:75:
                    02:dd:1f:5b:c5:8d:ee:95:d6:2a:7b:e1:d9:80:36:
                    03:7e:e0:6d:6f:12:6a:a5:c3:85:45:fa:66:cc:a1:
                    56:02:d8:44:d0:8c:67:d9:eb:97:26:5b:2e:d7:df:
                    48:e3:a6:cb:07:eb:3d:87:e6:ad:c8:a7:ce:e6:cc:
                    04:57:73:6d:30:17:39:29:9b:c5:0b:ab:a6:9f:ca:
                    38:63:d9:42:79:84:8b:fa:36:49:a2:c1:8b:7c:50:
                    75:d7:98:83:19:39:06:53:9b:b0:47:5b:3f:07:6c:
                    40:e6:68:09:6f:a6:36:b3:12:76:ca:90:bd:3c:62:
                    07:79:b0:a7:2b:90:ce:d7:47:e3:ea:04:63:a6:0e:
                    88:c0:4f:00:81:98:c6:cd:97:13:8f:49:a8:9d:0d:
                    c0:7b:c0:3f:52:fa:1d:66:95:5d:92:de:fc:37:92:
                    74:a8:db:26:ef:1d:b0:e1:4d:22:fb:6d:ae:16:8f:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:7A:96:7D:FE:97:63:A3:2D:5D:1C:E4:1D:D6:4D:85:07:C7:5C
            X509v3 Authority Key Identifier:
                keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:72:0f:7b:d8:f1:6c:4e:94:0a:a5:10:fd:5d:af:3f:d3:
         91:88:e1:37:42:47:93:c6:d3:7e:d5:c0:61:52:7c:0c:3b:e7:
         77:1a:ad:85:91:f5:23:6e:23:1e:36:99:00:4b:01:ff:a8:d5:
         c0:68:56:0d:63:ea:37:ba:e6:3b:f7:d6:2b:13:5a:0b:d4:83:
         ad:df:8f:45:c3:ba:da:89:1d:12:e7:d5:40:43:bc:fd:b0:9d:
         61:13:bc:5c:a2:74:24:a6:52:2e:3b:b4:b4:2d:13:3d:68:b0:
         4f:b7:c0:86:f3:4e:b0:79:96:4b:1d:99:47:00:32:7c:04:99:
         02:7b:e4:42:70:5b:06:8d:4d:47:d2:7d:62:52:34:59:a8:d4:
         46:e4:13:fb:51:6e:65:9d:ca:d6:64:53:60:52:55:ba:c5:f4:
         48:1a:6d:06:08:5d:aa:3a:65:c7:16:f3:4f:b2:96:8e:be:2b:
         43:e0:ed:c8:0d:55:fd:d1:3b:af:ba:3c:5b:de:9d:bc:0d:d3:
         f6:57:32:93:26:d5:89:14:da:f2:b0:ca:17:a1:63:0d:d1:fb:
         95:66:f9:2c:55:ba:b6:b4:4f:5d:2c:a0:1f:94:40:1f:1c:0e:
         26:78:af:96:ad:2c:9a:81:9e:53:99:b4:cd:c6:59:46:2a:6f:
         ee:6e:18:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXOifGj+zesopvIAYH5PZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMjEwOTQ4N2FmNDAwYTYzZTNjYjAxMWEzZDU0OWU3NTFm
ZDJjMTgwHhcNMjYwODE0MTMwMTIzWhcNMjYwODE1MTMwMTIzWjAzMTEwLwYDVQQD
EygwNzBhN2E5NjdkZmU5NzYzYTMyZDVkMWNlNDFkZDY0ZDg1MDdjNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE96pc7WFQM2TR5cXfaSlvdDY+lm
yzgqUc4Qee7KDN8JbVDmpHb1jKVCa7bJNRNvi+EH0OQPKEo5NJht5VjpNRJnLE66
yLr+oXUC3R9bxY3uldYqe+HZgDYDfuBtbxJqpcOFRfpmzKFWAthE0Ixn2euXJlsu
199I46bLB+s9h+atyKfO5swEV3NtMBc5KZvFC6umn8o4Y9lCeYSL+jZJosGLfFB1
15iDGTkGU5uwR1s/B2xA5mgJb6Y2sxJ2ypC9PGIHebCnK5DO10fj6gRjpg6IwE8A
gZjGzZcTj0monQ3Ae8A/UvodZpVdkt78N5J0qNsm7x2w4U0i+22uFo9rcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcKepZ9/pdjoy1dHOQd1k2FB8dcMB8GA1UdIwQY
MBaAFPEhCUh69ACmPjywEaPVSedR/SwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUt
ZjA1ZWZhYjc0ZjczLzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUtZjA1ZWZhYjc0Zjcz
LzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatlyD3vY
8WxOlAqlEP1drz/TkYjhN0JHk8bTftXAYVJ8DDvndxqthZH1I24jHjaZAEsB/6jV
wGhWDWPqN7rmO/fWKxNaC9SDrd+PRcO62okdEufVQEO8/bCdYRO8XKJ0JKZSLju0
tC0TPWiwT7fAhvNOsHmWSx2ZRwAyfASZAnvkQnBbBo1NR9J9YlI0WajURuQT+1Fu
ZZ3K1mRTYFJVusX0SBptBghdqjplxxbzT7KWjr4rQ+DtyA1V/dE7r7o8W96dvA3T
9lcykybViRTa8rDKF6FjDdH7lWb5LFW6trRPXSygH5RAHxwOJnivlq0smoGeU5m0
zcZZRipv7m4Y/Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:58 2026 by rpki-client