Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
File:                     1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft (raw, json)
Hash identifier:          lGhRgAzjsBc8adcVqgrknrqkfXxEJDR3aFRRYP9ETcE=
Subject key identifier:   E4:DD:E3:C9:FB:9C:16:D7:14:79:41:CA:45:46:4F:49:8E:69:D5:D0
Authority key identifier: F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A
Certificate issuer:       /CN=f98e9f76ce936fe1975f354263b4563cad1c414a
Certificate serial:       01A02056376038DDB41D8C3B16D080675313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
Manifest number:          8A
Signing time:             Thu 20 Aug 2026 18:01:56 +0000
Manifest this update:     Thu 20 Aug 2026 18:01:56 +0000
Manifest next update:     Fri 21 Aug 2026 18:01:56 +0000
Files and hashes:         1: 1-4qDeSxKiudA3BEYHfwIENpu-FQ.roa (hash: MiUA8mMOBjGU1Knl32o+l6lwZVzhLxPAp+E5RuW9W90=)
                          2: 1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl (hash: Fslesl5kkTHltwjAPWXd+8LKi2n6EiOB0uvzDWHOVbQ=)
                          3: 1T-ceJjNkjIp-JzXf9B_UjQfr-Y.roa (hash: DwJMamMahTf9klv4UWUPQLpymIfAcqahU8vNJ7u5S4k=)
                          4: 82wAbhd74c0z6ICEOBs-0Y_oQfY.roa (hash: kBFT5s4QmJIedyfi/sxxBI04254S641NgjUTrd53nw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 18:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:56:37:60:38:dd:b4:1d:8c:3b:16:d0:80:67:53:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98e9f76ce936fe1975f354263b4563cad1c414a
        Validity
            Not Before: Aug 20 18:01:56 2026 GMT
            Not After : Aug 21 18:01:56 2026 GMT
        Subject: CN=e4dde3c9fb9c16d7147941ca45464f498e69d5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:1b:e9:7d:1c:46:78:4f:0a:61:a1:5b:a2:
                    9c:60:8f:ef:05:b2:d3:53:68:3a:f4:f1:b8:a2:a7:
                    ef:96:1f:8a:20:03:7d:8f:9f:a2:da:e9:92:d5:a7:
                    0b:60:a3:59:d3:05:d0:52:27:93:50:38:ac:d9:67:
                    65:66:94:8c:6b:0a:63:ba:5e:fc:35:aa:8b:eb:52:
                    0b:2c:96:e6:91:a4:2d:dd:7e:a9:c2:f3:19:c4:0d:
                    83:0a:2b:90:f5:85:d1:90:85:a1:f8:37:6a:e1:98:
                    ac:ee:a7:d3:5e:4f:c7:72:c1:42:d5:56:b5:b2:cf:
                    db:31:21:3f:43:a4:7f:8f:f3:34:13:1b:8f:77:89:
                    63:ba:9b:13:76:0d:64:8f:85:7f:19:b6:18:bf:55:
                    df:d1:4d:1b:80:0a:85:8f:2e:05:b2:52:37:62:27:
                    87:e9:60:a0:78:32:38:0a:fd:55:d7:18:dc:4f:d0:
                    d5:ef:34:c5:3a:61:64:9c:f8:06:67:45:e1:56:1a:
                    b2:7d:4d:65:3d:4c:99:eb:05:88:95:9e:ef:b7:53:
                    23:1b:a7:20:d4:47:cd:6a:26:ab:26:c1:ac:d8:37:
                    88:40:96:5a:34:ac:d1:cf:21:e4:b9:06:9a:28:e9:
                    98:1a:cf:59:1b:e5:35:86:db:07:e4:24:c5:0d:45:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DD:E3:C9:FB:9C:16:D7:14:79:41:CA:45:46:4F:49:8E:69:D5:D0
            X509v3 Authority Key Identifier:
                keyid:F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:2d:70:77:5e:57:fa:08:ac:00:85:c5:16:be:94:2f:a6:
         cc:58:42:76:06:91:c2:ed:90:8b:8a:96:7e:40:89:9b:09:39:
         56:39:cf:7c:2e:b7:4c:51:10:bf:55:b7:8d:58:81:16:f3:56:
         53:52:b2:d6:58:9f:bc:c8:e2:cc:03:0a:d3:65:3a:98:24:a9:
         72:eb:b9:e0:17:53:54:6e:ca:7c:c9:e5:56:a9:9d:7a:15:bb:
         a9:de:c8:e3:07:53:49:f4:d2:92:1e:2e:d1:03:ed:c9:7a:01:
         50:73:79:7f:d9:bf:0f:ee:d4:ea:80:a4:60:7b:ac:6e:c0:ce:
         ed:e0:18:c1:f1:df:6f:db:7a:63:d2:e5:5c:f6:1a:54:e9:58:
         0d:09:36:c0:23:bd:a4:65:11:97:6a:ca:aa:bc:07:b2:b0:93:
         ae:52:2e:81:c3:ab:a4:47:a5:f0:ea:24:46:f3:e9:e1:82:f9:
         17:2f:31:f0:2f:7f:9b:a1:31:02:3b:b8:45:62:34:f8:94:d5:
         78:6a:34:b5:f8:ce:a5:66:04:67:ca:ce:69:d2:2f:19:29:86:
         7f:71:11:cc:e8:a6:e9:0d:be:99:26:89:3a:a0:93:aa:e9:d3:
         c9:cb:ff:84:78:a9:f7:bd:37:f1:75:78:23:06:97:c0:f8:bc:
         34:38:c8:e3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaAgVjdgON20HYw7FtCAZ1MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGU5Zjc2Y2U5MzZmZTE5NzVmMzU0MjYzYjQ1NjNjYWQx
YzQxNGEwHhcNMjYwODIwMTgwMTU2WhcNMjYwODIxMTgwMTU2WjAzMTEwLwYDVQQD
EyhlNGRkZTNjOWZiOWMxNmQ3MTQ3OTQxY2E0NTQ2NGY0OThlNjlkNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzUb6X0cRnhPCmGhW6KcYI/vBbLT
U2g69PG4oqfvlh+KIAN9j5+i2umS1acLYKNZ0wXQUieTUDis2WdlZpSMawpjul78
NaqL61ILLJbmkaQt3X6pwvMZxA2DCiuQ9YXRkIWh+Ddq4Zis7qfTXk/HcsFC1Va1
ss/bMSE/Q6R/j/M0ExuPd4ljupsTdg1kj4V/GbYYv1Xf0U0bgAqFjy4FslI3YieH
6WCgeDI4Cv1V1xjcT9DV7zTFOmFknPgGZ0XhVhqyfU1lPUyZ6wWIlZ7vt1MjG6cg
1EfNaiarJsGs2DeIQJZaNKzRzyHkuQaaKOmYGs9ZG+U1htsH5CTFDUVmnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOTd48n7nBbXFHlBykVGT0mOadXQMB8GA1UdIwQY
MBaAFPmOn3bOk2/hl181QmO0VjytHEFKMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZNmZkczZUYi1HWFh6VkNZN1JXUEswY1FVby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMDhiOWM0LTBhZmQtNDg3Ni05ZWY3
LTJlODRiOGQxOGU0ZS8xLzEtWTZmZHM2VGItR1hYelZDWTdSV1BLMGNRVW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZiLzA4YjljNC0wYWZkLTQ4NzYtOWVmNy0yZTg0YjhkMThl
NGUvMS8xLVk2ZmRzNlRiLUdYWHpWQ1k3UldQSzBjUVVvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ0t
cHdeV/oIrACFxRa+lC+mzFhCdgaRwu2Qi4qWfkCJmwk5VjnPfC63TFEQv1W3jViB
FvNWU1Ky1lifvMjizAMK02U6mCSpcuu54BdTVG7KfMnlVqmdehW7qd7I4wdTSfTS
kh4u0QPtyXoBUHN5f9m/D+7U6oCkYHusbsDO7eAYwfHfb9t6Y9LlXPYaVOlYDQk2
wCO9pGURl2rKqrwHsrCTrlIugcOrpEel8OokRvPp4YL5Fy8x8C9/m6ExAju4RWI0
+JTVeGo0tfjOpWYEZ8rOadIvGSmGf3ERzOim6Q2+mSaJOqCTqunTycv/hHip9703
8XV4IwaXwPi8NDjI4w==
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:06:47 2026 by rpki-client