Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File:                     1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier:          TNnsYOoUAgzXQ+jVSfD9Nf7gRcsc5IEn+5EO9i9wJrM=
Subject key identifier:   26:2B:86:B9:86:A8:0F:9D:2E:BD:48:06:67:D7:93:8B:C2:E1:E4:C9
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer:       /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial:       01A00213A8EAB356BC12D9DF045E6367DD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number:          16BE
Signing time:             Fri 14 Aug 2026 21:00:37 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:37 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:37 +0000
Files and hashes:         1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: 0W7o/0VXU+r4do4ATpO181POA0gYC+/y3e7lYqgKRhc=)
                          2: _NoPoUoovEHF7_g2mo_GVWos_Yk.roa (hash: WfV7LHKWbqBWomKa+gYdLJeTrP2nSVSjWaw254GPNZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:a8:ea:b3:56:bc:12:d9:df:04:5e:63:67:dd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
        Validity
            Not Before: Aug 14 21:00:37 2026 GMT
            Not After : Aug 15 21:00:37 2026 GMT
        Subject: CN=262b86b986a80f9d2ebd480667d7938bc2e1e4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:ad:09:ca:6a:d3:d2:99:a7:db:c1:31:c6:
                    2f:03:ad:1d:3b:39:bc:5b:c8:75:c3:f0:7e:9c:28:
                    cf:7e:c0:b1:fa:80:f4:57:b6:5f:7a:d7:64:b5:69:
                    95:d6:fc:5e:0f:1b:78:66:4f:3e:8b:4e:ef:6a:0f:
                    c2:46:c9:f8:6d:b7:e5:a7:ec:75:a9:8f:22:d7:0e:
                    fc:3b:48:1b:0c:a8:b4:e2:bd:cd:26:6c:58:9e:fd:
                    ce:bd:85:83:0b:e9:47:66:29:13:38:d4:ec:8a:5e:
                    76:fb:a5:bf:86:e4:d7:1b:1e:7e:a9:d7:5a:be:0d:
                    42:18:19:f2:d1:f6:99:b3:dc:78:04:b3:f5:8a:27:
                    26:2e:38:3a:91:6b:3f:f8:fc:93:25:09:ff:18:2b:
                    8d:85:08:b7:d7:c9:c4:80:11:ee:57:42:c8:c6:19:
                    e1:3e:f0:61:a1:f2:a8:fe:89:a8:ea:1f:ac:4a:fc:
                    2c:f2:6f:f9:4b:2e:de:63:0a:5b:3a:cd:b5:fc:4e:
                    e4:33:47:b3:3c:b9:0b:3a:3a:91:b5:52:2c:07:2e:
                    73:e5:97:a6:ba:22:d8:1c:bf:e7:b6:be:6c:03:54:
                    5e:cf:88:e2:f5:65:ac:1f:7e:2b:e9:ad:6a:f8:57:
                    6a:8f:78:23:e3:1f:f3:f2:55:11:82:cf:ef:56:89:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:86:B9:86:A8:0F:9D:2E:BD:48:06:67:D7:93:8B:C2:E1:E4:C9
            X509v3 Authority Key Identifier:
                keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:88:33:75:96:f2:78:7e:8b:8f:6f:d0:8a:24:5e:02:af:ef:
         dd:0b:44:46:7d:45:10:4e:91:c7:51:10:34:79:2f:7b:86:1c:
         5b:cf:a0:1d:96:87:b6:89:95:a8:00:22:c0:81:fb:40:1e:cb:
         64:b3:c7:c1:43:9b:31:18:c2:8a:ce:8a:69:1a:ea:0e:d6:2b:
         f7:a1:fc:55:fc:7f:53:bc:bb:e9:c1:3b:41:26:61:64:02:de:
         d5:55:f2:ba:96:80:57:f6:9d:93:c9:cd:90:b7:7f:9d:38:f3:
         bb:b4:de:78:5e:f9:19:fe:8b:02:ec:fd:57:49:40:bc:10:b3:
         ba:3d:ba:29:77:27:58:ad:67:41:5d:22:08:22:8c:de:e2:13:
         04:13:79:ec:d2:50:7f:cb:33:35:7c:45:ef:fe:2f:72:d3:06:
         12:4e:47:a9:ca:75:4d:a4:a5:d4:f8:2b:f1:66:92:6a:c6:69:
         0d:5f:80:28:6f:b2:db:82:fa:a0:f0:79:a7:3a:99:64:00:46:
         02:57:03:31:a7:6c:86:dd:e6:b9:b7:fb:ba:b0:7c:92:ee:6e:
         1f:22:69:41:0e:6b:01:96:a8:69:81:86:e4:be:d9:27:62:82:
         92:cb:ff:f0:cb:c2:c5:54:0a:fc:59:a3:22:51:54:35:c2:85:
         22:4b:47:1a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaACE6jqs1a8EtnfBF5jZ901MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy
NTMwMWEwHhcNMjYwODE0MjEwMDM3WhcNMjYwODE1MjEwMDM3WjAzMTEwLwYDVQQD
EygyNjJiODZiOTg2YTgwZjlkMmViZDQ4MDY2N2Q3OTM4YmMyZTFlNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqytCcpq09KZp9vBMcYvA60dOzm8
W8h1w/B+nCjPfsCx+oD0V7ZfetdktWmV1vxeDxt4Zk8+i07vag/CRsn4bbflp+x1
qY8i1w78O0gbDKi04r3NJmxYnv3OvYWDC+lHZikTONTsil52+6W/huTXGx5+qdda
vg1CGBny0faZs9x4BLP1iicmLjg6kWs/+PyTJQn/GCuNhQi318nEgBHuV0LIxhnh
PvBhofKo/omo6h+sSvws8m/5Sy7eYwpbOs21/E7kM0ezPLkLOjqRtVIsBy5z5Zem
uiLYHL/ntr5sA1Rez4ji9WWsH34r6a1q+Fdqj3gj4x/z8lURgs/vVomz3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCYrhrmGqA+dLr1IBmfXk4vC4eTJMB8GA1UdIwQY
MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz
LWRhZDA0MjBiODVkMy8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2LzFjOTgwOS0xZjYwLTQzYzItODEwMy1kYWQwNDIwYjg1
ZDMvMS8xLVJuaDhfNXB0T3ZmOENxYWhYNThiQ3NsTUJvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4gz
dZbyeH6Lj2/QiiReAq/v3QtERn1FEE6Rx1EQNHkve4YcW8+gHZaHtomVqAAiwIH7
QB7LZLPHwUObMRjCis6KaRrqDtYr96H8Vfx/U7y76cE7QSZhZALe1VXyupaAV/ad
k8nNkLd/nTjzu7TeeF75Gf6LAuz9V0lAvBCzuj26KXcnWK1nQV0iCCKM3uITBBN5
7NJQf8szNXxF7/4vctMGEk5Hqcp1TaSl1Pgr8WaSasZpDV+AKG+y24L6oPB5pzqZ
ZABGAlcDMadsht3mubf7urB8ku5uHyJpQQ5rAZaoaYGG5L7ZJ2KCksv/8MvCxVQK
/FmjIlFUNcKFIktHGg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:39 2026 by rpki-client