Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          oUPkG4jFTWdZllvmN/sEgMn66uP3myc2uPa3/NgA1Jc=
Subject key identifier:   E0:AB:EB:5B:2F:15:A9:07:9C:C3:CC:E4:16:19:76:D2:15:51:6B:05
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       01A001DCDA34F8A3EF05D12D0181E5F01E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 20:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:46 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: LXBDkq/o5GP9o4FAARHNsP5IVvANFSe28qUv0DIIm50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:da:34:f8:a3:ef:05:d1:2d:01:81:e5:f0:1e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: Aug 14 20:00:46 2026 GMT
            Not After : Aug 15 20:00:46 2026 GMT
        Subject: CN=e0abeb5b2f15a9079cc3cce4161976d215516b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:a4:5e:fd:b4:d0:13:99:af:f2:c8:f7:02:
                    0a:4c:a1:ab:99:df:9e:80:61:ad:58:f4:6e:30:4f:
                    03:b3:13:d0:a1:97:04:a9:47:df:95:c3:26:f0:19:
                    45:de:9e:66:65:07:25:80:9f:d9:99:7a:51:be:23:
                    f9:6d:af:51:9f:6a:89:e5:cd:f8:e0:bb:24:21:47:
                    4c:9b:94:b7:41:22:ed:34:8e:8f:3f:2a:52:32:a1:
                    41:5e:9a:31:70:c9:fb:c1:aa:d1:f3:f7:60:d9:5f:
                    d4:25:45:2d:0c:8d:c4:e5:ea:78:7a:9f:84:03:c1:
                    1a:7e:9c:f8:48:93:15:8d:8f:3d:af:f9:22:61:d3:
                    ca:b7:49:f1:c3:a2:1d:cc:43:f0:85:fd:10:1d:ab:
                    17:a7:09:67:bf:92:bb:fd:23:d6:20:5f:05:5c:b5:
                    97:7f:5b:b3:29:89:16:59:a2:86:67:53:18:68:16:
                    95:be:b2:80:d1:8d:50:17:c2:b8:40:ef:a5:3b:d4:
                    3c:0c:8f:f5:33:fe:8d:f8:5d:f0:b7:64:db:a5:60:
                    ad:0c:34:88:33:90:61:67:0f:1d:da:35:6c:50:98:
                    e1:36:86:e3:ce:ee:b2:47:32:d7:47:56:6d:fb:91:
                    fb:72:1d:63:15:e2:50:57:25:cd:3f:42:64:ed:30:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AB:EB:5B:2F:15:A9:07:9C:C3:CC:E4:16:19:76:D2:15:51:6B:05
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:67:31:84:fb:b9:b7:22:6a:7b:38:e2:59:b6:70:49:68:
         db:4e:a8:47:96:a7:cc:e2:e8:58:0f:63:0e:73:d0:75:bb:3c:
         54:bc:7b:bf:d4:68:4d:0b:8d:ba:54:c5:a9:f5:8b:84:c7:4a:
         ab:05:3a:7e:bf:f7:c1:71:3c:b5:50:62:0d:c7:a4:f4:20:33:
         6b:98:c6:df:72:ec:c3:57:d1:67:c8:69:f2:04:f7:58:4b:8d:
         13:12:a3:66:29:62:74:07:98:1f:05:92:dc:d1:5d:9b:84:ff:
         89:48:7b:27:e7:8b:0a:2b:09:19:b0:84:40:db:4f:98:e2:48:
         32:00:f6:c6:e0:8b:44:df:48:1c:e6:fd:9f:d7:fe:cd:80:4b:
         8d:62:e5:89:8a:9b:bd:9f:57:1f:6a:5a:06:f1:b3:1d:11:04:
         63:35:12:4f:bd:1a:68:21:2d:6e:01:ab:a2:b7:a0:0f:8a:37:
         ba:e2:16:4c:75:82:da:77:94:89:80:9d:83:ad:f4:c2:46:7a:
         4e:de:6e:80:37:00:74:85:e7:38:73:a5:8c:1d:ae:21:97:e4:
         36:dc:5d:7c:a5:dd:ca:fe:06:3e:6e:b1:1f:07:d8:fd:d9:39:
         c3:d1:e7:b4:9a:d6:40:8c:bb:18:74:6b:0f:14:7c:80:52:2b:
         2f:d7:48:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3No0+KPvBdEtAYHl8B6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3
ZGQ3ZDIwHhcNMjYwODE0MjAwMDQ2WhcNMjYwODE1MjAwMDQ2WjAzMTEwLwYDVQQD
EyhlMGFiZWI1YjJmMTVhOTA3OWNjM2NjZTQxNjE5NzZkMjE1NTE2YjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziukXv200BOZr/LI9wIKTKGrmd+e
gGGtWPRuME8DsxPQoZcEqUfflcMm8BlF3p5mZQclgJ/ZmXpRviP5ba9Rn2qJ5c34
4LskIUdMm5S3QSLtNI6PPypSMqFBXpoxcMn7warR8/dg2V/UJUUtDI3E5ep4ep+E
A8Eafpz4SJMVjY89r/kiYdPKt0nxw6IdzEPwhf0QHasXpwlnv5K7/SPWIF8FXLWX
f1uzKYkWWaKGZ1MYaBaVvrKA0Y1QF8K4QO+lO9Q8DI/1M/6N+F3wt2TbpWCtDDSI
M5BhZw8d2jVsUJjhNobjzu6yRzLXR1Zt+5H7ch1jFeJQVyXNP0Jk7TBz1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCr61svFakHnMPM5BYZdtIVUWsFMB8GA1UdIwQY
MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt
ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2
LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQpnMYT7
ubcians44lm2cElo206oR5anzOLoWA9jDnPQdbs8VLx7v9RoTQuNulTFqfWLhMdK
qwU6fr/3wXE8tVBiDcek9CAza5jG33Lsw1fRZ8hp8gT3WEuNExKjZilidAeYHwWS
3NFdm4T/iUh7J+eLCisJGbCEQNtPmOJIMgD2xuCLRN9IHOb9n9f+zYBLjWLliYqb
vZ9XH2paBvGzHREEYzUST70aaCEtbgGroregD4o3uuIWTHWC2neUiYCdg630wkZ6
Tt5ugDcAdIXnOHOljB2uIZfkNtxdfKXdyv4GPm6xHwfY/dk5w9HntJrWQIy7GHRr
DxR8gFIrL9dIRA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:13 2026 by rpki-client