Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File:                     xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier:          HGydnHzhw1AZV/5lLm4YapdFTVQMpFCN5p9Ke9RpgZU=
Subject key identifier:   94:88:DB:28:00:BB:8B:1E:18:79:57:F2:98:CF:4A:8C:18:71:EC:4C
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       01A03D84639D0FCDB9EEEF798C4222EC600F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number:          102A
Signing time:             Wed 26 Aug 2026 10:01:21 +0000
Manifest this update:     Wed 26 Aug 2026 10:01:21 +0000
Manifest next update:     Thu 27 Aug 2026 10:01:21 +0000
Files and hashes:         1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
                          2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: XXekLmpDr7W9vf9PmPm6ja9XalLsh/CZio3jGYRFVsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:84:63:9d:0f:cd:b9:ee:ef:79:8c:42:22:ec:60:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Aug 26 10:01:21 2026 GMT
            Not After : Aug 27 10:01:21 2026 GMT
        Subject: CN=9488db2800bb8b1e187957f298cf4a8c1871ec4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:27:5e:5c:d8:71:44:af:d0:7e:be:be:5d:0d:
                    3b:d2:b2:61:3e:0e:59:54:bb:e4:36:75:72:c7:6f:
                    bf:17:c1:af:9e:3b:2f:5a:72:57:d0:54:f4:bc:f8:
                    1a:d8:8f:81:57:6a:34:4d:eb:79:65:eb:76:cd:fe:
                    62:e7:7c:8e:73:98:ee:70:c0:16:a4:e2:11:ec:ef:
                    47:a2:f1:c4:3a:6b:0a:b2:6b:d8:e6:fa:c0:13:57:
                    02:5a:bd:9e:78:9a:5c:d4:3b:6e:d0:6c:9f:c3:70:
                    ba:fb:89:f8:59:f6:8b:88:83:3e:48:07:25:94:fc:
                    0b:99:1e:c2:bc:9c:28:fe:ed:9a:d0:70:17:b2:7f:
                    5a:8d:3c:89:93:18:d2:8b:8d:61:b8:13:5f:30:83:
                    9a:b7:01:b8:30:33:c3:f1:61:81:1c:27:88:2c:29:
                    b3:be:b2:20:81:ac:f3:f0:cd:d2:1c:e2:77:ad:8d:
                    4f:e7:60:04:32:91:98:59:2a:64:98:01:a7:2e:6a:
                    27:84:f5:5b:76:e6:f5:7b:57:df:7a:37:49:4c:e0:
                    76:ee:45:64:5c:6c:91:b5:51:96:37:b8:aa:72:58:
                    07:2f:96:14:5f:6c:cb:a3:bb:60:d8:6c:27:8a:82:
                    52:db:c9:7d:43:7a:ed:f6:e0:06:81:7c:80:58:97:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:88:DB:28:00:BB:8B:1E:18:79:57:F2:98:CF:4A:8C:18:71:EC:4C
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:db:ef:28:38:b5:6e:52:bb:1d:99:82:8d:af:bc:4a:a1:ae:
         2d:1d:1a:ee:98:bf:0d:16:e5:67:bd:12:61:45:c0:7a:fa:39:
         8f:79:1b:ef:d0:3d:62:99:2d:53:24:1d:c5:46:dc:03:3c:07:
         82:5f:5d:7f:7a:c5:ed:8b:d1:d1:fc:c3:15:21:d7:dd:fb:07:
         d2:0e:0a:80:c8:3f:0e:c6:95:0b:58:2d:07:01:7e:08:bf:5a:
         80:d8:05:e5:a0:c5:13:6f:7b:14:d9:bd:da:73:80:80:43:77:
         3e:ba:a0:db:bc:41:7a:d2:cb:45:29:e3:bd:73:b1:4e:cf:6e:
         4e:29:bb:ea:45:b0:96:08:60:f7:13:d1:be:9f:fc:a7:f2:b1:
         92:4e:b3:6a:86:5d:02:4e:be:a7:ea:ca:fc:fe:c0:1f:c8:e2:
         ff:f1:e6:80:ad:99:0a:da:66:1e:04:f8:ca:39:9b:4c:80:14:
         23:e2:50:b7:84:bf:f5:cc:da:26:4b:00:87:1b:ec:f0:cb:65:
         ec:25:09:5e:13:c9:d9:e2:4e:41:d8:9c:41:2b:e9:d7:13:58:
         a0:c0:24:d0:70:e7:c9:c6:fd:36:fe:a5:7d:8e:63:15:87:29:
         37:4a:e7:bc:f6:98:33:ab:5e:73:34:81:f2:41:51:cf:4b:15:
         62:6b:c8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9hGOdD8257u95jEIi7GAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk
NGVkOTYwHhcNMjYwODI2MTAwMTIxWhcNMjYwODI3MTAwMTIxWjAzMTEwLwYDVQQD
Eyg5NDg4ZGIyODAwYmI4YjFlMTg3OTU3ZjI5OGNmNGE4YzE4NzFlYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CdeXNhxRK/Qfr6+XQ070rJhPg5Z
VLvkNnVyx2+/F8GvnjsvWnJX0FT0vPga2I+BV2o0Tet5Zet2zf5i53yOc5jucMAW
pOIR7O9HovHEOmsKsmvY5vrAE1cCWr2eeJpc1Dtu0Gyfw3C6+4n4WfaLiIM+SAcl
lPwLmR7CvJwo/u2a0HAXsn9ajTyJkxjSi41huBNfMIOatwG4MDPD8WGBHCeILCmz
vrIggazz8M3SHOJ3rY1P52AEMpGYWSpkmAGnLmonhPVbdub1e1ffejdJTOB27kVk
XGyRtVGWN7iqclgHL5YUX2zLo7tg2GwnioJS28l9Q3rt9uAGgXyAWJcabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSI2ygAu4seGHlX8pjPSowYcexMMB8GA1UdIwQY
MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt
Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1
LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtvvKDi1
blK7HZmCja+8SqGuLR0a7pi/DRblZ70SYUXAevo5j3kb79A9YpktUyQdxUbcAzwH
gl9df3rF7YvR0fzDFSHX3fsH0g4KgMg/DsaVC1gtBwF+CL9agNgF5aDFE297FNm9
2nOAgEN3Prqg27xBetLLRSnjvXOxTs9uTim76kWwlghg9xPRvp/8p/Kxkk6zaoZd
Ak6+p+rK/P7AH8ji//HmgK2ZCtpmHgT4yjmbTIAUI+JQt4S/9czaJksAhxvs8Mtl
7CUJXhPJ2eJOQdicQSvp1xNYoMAk0HDnycb9Nv6lfY5jFYcpN0rnvPaYM6teczSB
8kFRz0sVYmvIhg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:52 2026 by rpki-client