Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File:                     8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier:          yI2LyffcxfNIBccqUCrHm5m8J11lzi4tVLnKWjcWBCE=
Subject key identifier:   B3:43:8D:29:A8:53:D3:FC:52:82:B5:D3:A4:E7:EC:10:0B:97:9D:E3
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer:       /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial:       01A000CA6848B4E565881AA93D98A165321E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number:          0D83
Signing time:             Fri 14 Aug 2026 15:00:59 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:59 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:59 +0000
Files and hashes:         1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=)
                          2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: SzcomVGBYLSZlmOqr/AWJ1GpYbejiXdWghQRNR/VFIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:68:48:b4:e5:65:88:1a:a9:3d:98:a1:65:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
        Validity
            Not Before: Aug 14 15:00:59 2026 GMT
            Not After : Aug 15 15:00:59 2026 GMT
        Subject: CN=b3438d29a853d3fc5282b5d3a4e7ec100b979de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:70:29:c6:0c:be:92:82:cd:32:e6:3e:50:
                    8f:94:88:a0:43:bd:5a:2a:3f:db:dd:a3:ab:ca:bf:
                    63:a9:02:1d:e2:ad:fa:32:9b:3e:95:a6:23:4a:72:
                    b8:4c:fc:fb:b7:6c:dd:31:62:75:f0:e1:9d:c8:35:
                    b9:92:9e:a3:91:54:87:59:4e:9d:f3:a4:82:60:3f:
                    92:18:35:1c:e9:e9:f3:f0:bb:99:12:89:84:49:89:
                    f7:df:77:fd:68:3b:67:8a:7d:b5:72:76:3b:5e:1e:
                    d4:1e:5c:0a:52:a0:19:e0:96:42:ee:64:d6:57:76:
                    a0:fd:00:e3:c1:e1:ce:5a:4b:11:12:14:cd:66:ad:
                    26:eb:30:89:97:a3:35:82:39:c1:9e:7d:56:7e:85:
                    de:1e:eb:4b:08:5d:1d:da:e0:00:bc:f3:d3:0e:1a:
                    2e:b3:78:b6:01:4f:4f:66:fe:fe:36:49:ab:1d:60:
                    86:32:35:98:9a:27:26:cd:85:f3:b2:92:31:83:ea:
                    2d:79:c8:ac:54:21:1b:73:51:85:31:bf:10:b5:21:
                    d7:dd:38:e4:d4:a4:26:67:9a:7b:2f:f1:26:93:e9:
                    74:c4:b2:ff:cc:43:ee:60:74:7e:ca:bf:ae:7d:00:
                    9e:a7:b5:e1:50:13:70:48:82:9e:fa:02:0b:48:d1:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:8D:29:A8:53:D3:FC:52:82:B5:D3:A4:E7:EC:10:0B:97:9D:E3
            X509v3 Authority Key Identifier:
                keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:be:ab:8c:cd:7a:58:8b:40:7a:88:6c:4b:47:ff:8c:17:54:
         a3:ae:4a:26:2d:f4:aa:71:29:c2:dc:4d:ea:d6:b9:a4:dc:73:
         4e:72:59:3a:21:76:95:2a:77:b8:cc:15:47:4f:c5:5c:35:38:
         8b:43:00:81:a1:61:dc:e1:73:3d:cc:49:45:21:29:46:bd:c1:
         a2:4a:b3:73:34:8b:33:bf:ee:60:d1:63:8f:26:94:dd:13:63:
         10:fa:08:f0:c1:c4:1f:26:bc:33:dd:81:2d:24:5b:7b:56:85:
         32:db:84:a1:b7:f4:a9:6c:45:ec:0d:62:51:5b:53:13:c3:34:
         2f:1a:53:79:00:28:8d:17:5c:11:6c:2f:6b:fb:c6:71:73:6c:
         08:c7:c3:c8:88:44:16:c0:bc:8e:b3:08:be:17:6c:b9:19:8b:
         45:c6:04:f3:f4:6f:b2:71:ad:fa:6e:32:54:be:89:d4:6e:6f:
         9e:af:7c:41:02:50:4c:5b:14:70:31:8f:bd:70:6c:42:ee:0e:
         91:26:3b:eb:ed:f3:2e:ad:00:b8:63:aa:42:58:80:a9:ea:a1:
         eb:70:43:ee:ab:1f:54:4c:2b:ff:ea:5f:7e:8e:1b:c0:b5:28:
         96:a9:2b:65:34:29:f6:ba:09:01:85:ae:77:aa:ea:ba:02:7b:
         24:46:ff:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAymhItOVliBqpPZihZTIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx
ODdkMzAwHhcNMjYwODE0MTUwMDU5WhcNMjYwODE1MTUwMDU5WjAzMTEwLwYDVQQD
EyhiMzQzOGQyOWE4NTNkM2ZjNTI4MmI1ZDNhNGU3ZWMxMDBiOTc5ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNFwKcYMvpKCzTLmPlCPlIigQ71a
Kj/b3aOryr9jqQId4q36Mps+laYjSnK4TPz7t2zdMWJ18OGdyDW5kp6jkVSHWU6d
86SCYD+SGDUc6enz8LuZEomESYn333f9aDtnin21cnY7Xh7UHlwKUqAZ4JZC7mTW
V3ag/QDjweHOWksREhTNZq0m6zCJl6M1gjnBnn1WfoXeHutLCF0d2uAAvPPTDhou
s3i2AU9PZv7+NkmrHWCGMjWYmicmzYXzspIxg+otecisVCEbc1GFMb8QtSHX3Tjk
1KQmZ5p7L/Emk+l0xLL/zEPuYHR+yr+ufQCep7XhUBNwSIKe+gILSNE7xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNDjSmoU9P8UoK106Tn7BALl53jMB8GA1UdIwQY
MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt
N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi
LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr6rjM16
WItAeohsS0f/jBdUo65KJi30qnEpwtxN6ta5pNxzTnJZOiF2lSp3uMwVR0/FXDU4
i0MAgaFh3OFzPcxJRSEpRr3BokqzczSLM7/uYNFjjyaU3RNjEPoI8MHEHya8M92B
LSRbe1aFMtuEobf0qWxF7A1iUVtTE8M0LxpTeQAojRdcEWwva/vGcXNsCMfDyIhE
FsC8jrMIvhdsuRmLRcYE8/RvsnGt+m4yVL6J1G5vnq98QQJQTFsUcDGPvXBsQu4O
kSY76+3zLq0AuGOqQliAqeqh63BD7qsfVEwr/+pffo4bwLUolqkrZTQp9roJAYWu
d6rqugJ7JEb/6w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:34 2026 by rpki-client