Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File:                     pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier:          9uD0KQbqSdbNa0NNrTyQNW/CuNwgv/WCsNvMF9T9iAw=
Subject key identifier:   1A:5F:C8:E4:10:06:87:95:31:85:00:6B:E0:15:69:6A:9C:30:28:8B
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer:       /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial:       01A0262194684BB7B0DAA9B961ECAD081880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number:          8D
Signing time:             Fri 21 Aug 2026 21:02:09 +0000
Manifest this update:     Fri 21 Aug 2026 21:02:09 +0000
Manifest next update:     Sat 22 Aug 2026 21:02:09 +0000
Files and hashes:         1: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: zVRt44oiS4pfvOfkTOmjUDXRtrhO2rT5mfLOK9/wFCw=)
                          2: zgZHSMsyHtY73_v_FBr0Pr71LZs.roa (hash: j0pWXsbudMoLAPQKtP3pWE8UBPeMCQBek4SG6sjP7H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:21:94:68:4b:b7:b0:da:a9:b9:61:ec:ad:08:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
        Validity
            Not Before: Aug 21 21:02:09 2026 GMT
            Not After : Aug 22 21:02:09 2026 GMT
        Subject: CN=1a5fc8e4100687953185006be015696a9c30288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:a8:7f:2e:bb:6f:7e:be:17:f7:91:42:1e:
                    7d:dc:ee:80:3f:48:8b:a3:54:26:0e:f3:4b:97:3f:
                    3d:58:f3:5f:d4:c7:47:af:21:63:96:18:85:9d:dc:
                    01:b9:01:93:9e:89:84:16:9a:57:81:52:c9:1e:87:
                    78:7c:b6:7a:82:57:e3:2f:4a:74:9f:a6:25:64:a3:
                    15:ff:58:31:fc:23:51:66:b3:43:de:82:ca:86:b7:
                    32:0f:d0:b7:7f:c4:6a:1e:c2:03:5e:1d:eb:41:49:
                    3b:1d:86:90:ba:39:70:c5:65:88:0d:df:c8:d4:36:
                    37:0d:4b:f7:74:d0:82:6b:1f:8e:5e:d7:0d:f3:d8:
                    c1:7a:d4:78:df:a6:ba:9a:b3:39:8e:f3:35:71:34:
                    03:82:56:ff:6d:7a:52:19:a6:1a:83:e1:78:e1:5c:
                    e4:6a:c1:af:52:39:39:f3:91:a7:5d:3e:2d:85:c7:
                    21:89:b0:e4:82:1d:a9:94:00:52:72:99:e7:33:fe:
                    87:be:05:4c:db:a2:0d:2b:21:07:63:59:fb:ff:6b:
                    36:bc:00:ec:e1:12:67:e1:87:fd:c2:f9:a9:58:9d:
                    cf:b6:fc:43:82:e0:29:3e:a3:96:6e:45:a3:f2:90:
                    c9:c5:5a:65:84:19:46:c1:4b:97:a4:a5:e0:c6:88:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:C8:E4:10:06:87:95:31:85:00:6B:E0:15:69:6A:9C:30:28:8B
            X509v3 Authority Key Identifier:
                keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:32:ca:d6:7a:f5:39:dc:d8:fb:28:b3:e7:c3:90:63:37:
         c8:de:6a:ab:3f:21:a1:23:31:5f:cf:85:54:ef:1b:99:ea:8d:
         3c:ac:65:79:3b:3b:32:c9:ac:2f:ed:52:e7:84:ae:89:60:eb:
         6f:da:45:f0:9f:0d:e3:07:89:f0:d1:6a:a7:9e:d4:8c:4e:5b:
         25:1c:d7:22:eb:88:98:ba:b3:19:fa:dd:d6:59:d5:a2:10:cb:
         e0:8b:74:04:69:2f:c9:22:a1:c8:6e:02:b1:7e:2b:f5:05:ff:
         a4:dc:56:2b:f3:bc:fc:44:e3:ae:57:9b:85:f4:b8:5d:e2:6e:
         a1:5e:36:80:65:bb:34:25:58:a0:a0:1e:be:10:86:59:71:91:
         f5:05:9c:da:f4:04:a6:e3:c1:0f:65:19:71:cf:16:d9:44:a9:
         34:b5:00:78:2b:bd:34:d9:ca:2d:b6:2f:1f:f3:51:a0:21:bc:
         f4:6c:61:c8:03:06:1b:73:df:16:f3:a2:f6:71:71:a6:56:9f:
         68:92:76:8b:12:0e:3a:83:93:15:92:17:ca:75:5b:e2:cb:d6:
         f8:29:4e:26:ef:8a:37:b2:de:f0:f3:9f:4c:97:07:ac:e9:65:
         5c:b2:c0:38:5a:9c:d4:4e:c7:07:f8:73:eb:3d:42:d2:f6:c7:
         9f:98:58:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmIZRoS7ew2qm5YeytCBiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDhlZDUwNDgwODIyMzRiNzJhODJiNjEzNmM5ZDIwYjAz
NmVlNzAwHhcNMjYwODIxMjEwMjA5WhcNMjYwODIyMjEwMjA5WjAzMTEwLwYDVQQD
EygxYTVmYzhlNDEwMDY4Nzk1MzE4NTAwNmJlMDE1Njk2YTljMzAyODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NOofy67b36+F/eRQh593O6AP0iL
o1QmDvNLlz89WPNf1MdHryFjlhiFndwBuQGTnomEFppXgVLJHod4fLZ6glfjL0p0
n6YlZKMV/1gx/CNRZrND3oLKhrcyD9C3f8RqHsIDXh3rQUk7HYaQujlwxWWIDd/I
1DY3DUv3dNCCax+OXtcN89jBetR436a6mrM5jvM1cTQDglb/bXpSGaYag+F44Vzk
asGvUjk585GnXT4thcchibDkgh2plABScpnnM/6HvgVM26INKyEHY1n7/2s2vADs
4RJn4Yf9wvmpWJ3PtvxDguApPqOWbkWj8pDJxVplhBlGwUuXpKXgxogurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpfyOQQBoeVMYUAa+AVaWqcMCiLMB8GA1UdIwQY
MBaAFKXY7VBICCI0tyqCthNsnSCwNu5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRqdFVFZ0lJalMzS29LMkUyeWRJTEEyN25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvcGRqdFVFZ0lJalMzS29LMkUyeWRJTEEyN25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvcGRqdFVFZ0lJalMzS29LMkUyeWRJTEEyN25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKYyytZ6
9Tnc2Psos+fDkGM3yN5qqz8hoSMxX8+FVO8bmeqNPKxleTs7MsmsL+1S54SuiWDr
b9pF8J8N4weJ8NFqp57UjE5bJRzXIuuImLqzGfrd1lnVohDL4It0BGkvySKhyG4C
sX4r9QX/pNxWK/O8/ETjrlebhfS4XeJuoV42gGW7NCVYoKAevhCGWXGR9QWc2vQE
puPBD2UZcc8W2USpNLUAeCu9NNnKLbYvH/NRoCG89GxhyAMGG3PfFvOi9nFxplaf
aJJ2ixIOOoOTFZIXynVb4svW+ClOJu+KN7Le8POfTJcHrOllXLLAOFqc1E7HB/hz
6z1C0vbHn5hYCg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:04:39 2026 by rpki-client