Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File:                     fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier:          BHCzUHzIVm8url/lLQ8Qo/h2XLft1J4xZnzMSTauRJc=
Subject key identifier:   59:82:88:24:48:14:F6:36:1D:D6:91:FB:D8:E4:72:BF:BE:63:0A:33
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer:       /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial:       01A00214165A365EF8B85B0EA25A60EEA9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number:          14C7
Signing time:             Fri 14 Aug 2026 21:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:05 +0000
Files and hashes:         1: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: MsDvXGboZkTSI4fvzN+CP3pmCisghgSq01xBJ//1Jw8=)
                          2: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (hash: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:16:5a:36:5e:f8:b8:5b:0e:a2:5a:60:ee:a9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
        Validity
            Not Before: Aug 14 21:01:05 2026 GMT
            Not After : Aug 15 21:01:05 2026 GMT
        Subject: CN=598288244814f6361dd691fbd8e472bfbe630a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:1d:65:4e:f9:17:bb:ae:3e:66:f4:16:c3:
                    02:3a:c9:48:48:08:1b:52:87:81:f5:4e:73:c4:4f:
                    0a:f3:17:e4:db:ba:77:41:1d:82:1f:02:b9:b7:61:
                    00:cf:99:01:28:82:46:ba:39:d4:ef:26:a8:09:fd:
                    b9:9b:49:f0:51:9c:89:aa:86:3b:b2:36:76:0c:c4:
                    ad:71:de:07:92:10:7d:07:e7:dc:64:48:6a:eb:d3:
                    fd:1e:1c:55:8e:ca:dc:95:5a:a3:85:8f:29:f6:a1:
                    66:2b:fc:ee:03:d5:1f:70:6b:7f:8a:83:93:14:17:
                    2d:33:c3:e3:07:15:c6:70:67:e7:75:32:11:54:f8:
                    b2:77:a6:d7:b0:e8:2e:5a:7b:84:f2:c9:e5:06:2c:
                    93:53:98:08:9c:f8:7a:f4:66:96:3f:7b:8c:1f:3c:
                    04:c2:de:9a:eb:70:d2:4c:b2:01:17:60:b3:d0:f4:
                    ed:59:f4:59:11:06:6b:0e:3d:06:ff:41:39:ff:ca:
                    8b:a7:ed:61:68:38:a6:f9:7e:3d:e6:9d:e4:30:0f:
                    42:49:81:75:0f:a5:b7:a2:d4:b8:b7:96:4f:89:41:
                    5e:3e:af:d2:af:c6:2e:c0:26:0f:5a:fa:77:08:a6:
                    1a:82:a1:55:21:0d:7c:c5:7f:9e:1c:38:d6:70:88:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:82:88:24:48:14:F6:36:1D:D6:91:FB:D8:E4:72:BF:BE:63:0A:33
            X509v3 Authority Key Identifier:
                keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:dc:d0:67:ae:99:0d:52:78:a2:35:5d:4e:70:f5:d6:4c:
         02:cd:c9:e3:89:4a:33:69:59:c9:22:34:4e:a2:65:50:54:0d:
         f6:06:ff:9d:f7:e3:d9:69:3e:2d:e5:f9:07:25:25:77:04:4b:
         e4:04:f5:d8:1f:09:dc:55:89:ea:83:9b:02:b0:d5:03:da:e2:
         09:a8:57:8d:06:74:8b:fc:81:75:7e:5f:4e:8f:c1:b0:2b:14:
         43:81:0a:5e:9d:00:35:28:23:d4:e6:1a:61:8e:d1:60:ae:e4:
         aa:57:31:45:9b:a5:84:fc:76:04:ca:b2:83:1e:12:c1:66:fd:
         e4:61:25:2d:b7:83:aa:82:de:03:43:68:8e:d1:8f:f7:68:27:
         ff:65:03:84:a5:a9:3b:69:e1:5d:2c:3f:e5:72:e9:f8:2d:d2:
         4a:bc:0f:77:df:8a:12:2f:9a:04:5f:d8:88:88:44:24:4f:49:
         be:2c:ec:c4:4f:22:62:04:53:5e:97:2d:81:5f:e8:50:02:a5:
         3a:a7:20:11:d9:fe:62:8c:62:66:e3:02:fe:51:22:66:3a:0e:
         8c:77:99:66:e3:39:84:25:13:9a:ab:08:2a:4a:d9:f8:14:43:
         17:67:33:06:78:ce:4d:31:ba:ff:32:4e:0d:09:2d:16:54:11:
         d9:6b:cf:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFBZaNl74uFsOolpg7qnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz
NmExZDEwHhcNMjYwODE0MjEwMTA1WhcNMjYwODE1MjEwMTA1WjAzMTEwLwYDVQQD
Eyg1OTgyODgyNDQ4MTRmNjM2MWRkNjkxZmJkOGU0NzJiZmJlNjMwYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j4dZU75F7uuPmb0FsMCOslISAgb
UoeB9U5zxE8K8xfk27p3QR2CHwK5t2EAz5kBKIJGujnU7yaoCf25m0nwUZyJqoY7
sjZ2DMStcd4HkhB9B+fcZEhq69P9HhxVjsrclVqjhY8p9qFmK/zuA9UfcGt/ioOT
FBctM8PjBxXGcGfndTIRVPiyd6bXsOguWnuE8snlBiyTU5gInPh69GaWP3uMHzwE
wt6a63DSTLIBF2Cz0PTtWfRZEQZrDj0G/0E5/8qLp+1haDim+X495p3kMA9CSYF1
D6W3otS4t5ZPiUFePq/Sr8YuwCYPWvp3CKYagqFVIQ18xX+eHDjWcIgIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmCiCRIFPY2HdaR+9jkcr++YwozMB8GA1UdIwQY
MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct
ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1
LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMLc0Geu
mQ1SeKI1XU5w9dZMAs3J44lKM2lZySI0TqJlUFQN9gb/nffj2Wk+LeX5ByUldwRL
5AT12B8J3FWJ6oObArDVA9riCahXjQZ0i/yBdX5fTo/BsCsUQ4EKXp0ANSgj1OYa
YY7RYK7kqlcxRZulhPx2BMqygx4SwWb95GElLbeDqoLeA0NojtGP92gn/2UDhKWp
O2nhXSw/5XLp+C3SSrwPd9+KEi+aBF/YiIhEJE9JvizsxE8iYgRTXpctgV/oUAKl
OqcgEdn+YoxiZuMC/lEiZjoOjHeZZuM5hCUTmqsIKkrZ+BRDF2czBnjOTTG6/zJO
DQktFlQR2WvPeg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:46 2026 by rpki-client