Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier:          IO0gMq7oF+f4o5HeUmD0b/OvSChs8+1ji3fCsqNXh/A=
Subject key identifier:   B2:C0:3D:47:1A:7F:D5:78:4F:3E:53:2B:DF:B6:C6:49:B2:6B:C7:C7
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       01A001A66394F31B20F2F686F3F05DEEDEED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number:          1090
Signing time:             Fri 14 Aug 2026 19:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:16 +0000
Files and hashes:         1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
                          2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
                          3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: xc2I3BpX4WjxcS80HwfE/5F9mYZFW8i1pM0P+mFgr58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:63:94:f3:1b:20:f2:f6:86:f3:f0:5d:ee:de:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: Aug 14 19:01:16 2026 GMT
            Not After : Aug 15 19:01:16 2026 GMT
        Subject: CN=b2c03d471a7fd5784f3e532bdfb6c649b26bc7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:e5:ec:08:ea:c0:34:64:56:54:ff:a3:c7:
                    d5:3b:84:07:ce:4a:43:93:ae:bf:d5:47:d8:10:68:
                    19:08:dd:9d:ce:c0:b6:d7:5f:c9:7a:31:63:71:50:
                    0c:41:b2:78:fe:63:30:86:e1:bb:58:92:74:c5:3b:
                    66:4f:f4:df:3b:f7:59:aa:8f:ad:f1:5e:62:69:a1:
                    97:de:08:c4:29:bb:69:3f:2f:8a:5e:81:21:ce:b4:
                    34:dc:3c:3d:22:ce:bc:4f:fb:38:2d:ee:aa:a4:e8:
                    53:cf:3f:aa:22:06:34:9d:c9:7b:81:12:fd:1e:00:
                    b3:f1:5e:45:34:b6:86:1f:36:2e:e5:18:9b:66:02:
                    58:71:36:c0:eb:29:76:3b:d7:c1:b2:3d:07:d6:0d:
                    0c:7d:00:43:e8:dd:d5:3f:67:91:9c:a0:11:ae:50:
                    42:8e:d8:5c:d2:b1:86:f8:b6:68:9d:a2:5a:f8:56:
                    2f:ec:10:a9:95:9b:8d:17:6d:db:68:43:69:96:15:
                    5d:e0:c7:c3:12:43:95:55:c1:af:aa:41:cc:b0:95:
                    fa:62:d0:95:3c:a8:0a:1f:03:10:29:fc:f3:43:29:
                    05:dd:7f:18:ca:cc:84:ca:42:6b:83:94:45:27:fd:
                    d4:95:54:a1:8b:4e:f8:13:d3:a3:e2:0b:9f:2f:5c:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:3D:47:1A:7F:D5:78:4F:3E:53:2B:DF:B6:C6:49:B2:6B:C7:C7
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:d4:7f:4c:30:82:ac:15:89:6a:6c:0f:55:b6:76:42:89:
         6d:82:75:81:51:ed:0e:d0:7d:86:51:6a:7b:7f:16:e8:79:52:
         db:dd:99:29:a5:b1:31:0b:63:40:25:d8:4f:1c:fc:12:62:1f:
         d3:e5:34:ba:65:39:98:f5:fc:54:60:c0:02:b6:2e:c7:97:cd:
         70:8b:ca:0a:8e:86:08:f4:f1:3c:95:90:7e:30:d5:7c:ad:39:
         46:88:c2:e6:ae:26:a3:51:1a:56:70:4d:3d:63:02:c8:81:84:
         a1:db:a5:aa:63:1e:ee:91:5c:12:ac:5a:e5:cb:10:cc:38:51:
         51:d5:de:7d:42:41:59:fe:f7:fd:03:d3:d5:7d:78:a7:51:f2:
         d9:f5:3e:05:47:59:b8:b1:d3:de:1a:9a:a2:5a:13:9c:65:ad:
         c0:a1:8f:c0:67:95:bc:9b:44:4e:4f:56:f1:4d:c7:b4:39:f8:
         37:d1:0f:b6:93:2a:87:a4:2c:db:5a:48:d1:c6:df:57:ab:4c:
         2c:d2:2b:d0:0b:e5:c3:55:af:32:22:6f:dc:66:d6:b3:8d:c1:
         26:f5:46:72:1d:25:1f:ba:25:f7:0e:37:93:a1:44:a6:d2:bc:
         d4:9d:fa:b2:8d:b0:a1:6b:cc:d0:ae:e7:56:4d:07:01:e5:0e:
         d1:78:7d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpmOU8xsg8vaG8/Bd7t7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWUyZjJkNWU3MDkzZmY4ZDQwMDNhMDJiN2QzZTEzMWNl
NzBhMTIwHhcNMjYwODE0MTkwMTE2WhcNMjYwODE1MTkwMTE2WjAzMTEwLwYDVQQD
EyhiMmMwM2Q0NzFhN2ZkNTc4NGYzZTUzMmJkZmI2YzY0OWIyNmJjN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzPl7AjqwDRkVlT/o8fVO4QHzkpD
k66/1UfYEGgZCN2dzsC211/JejFjcVAMQbJ4/mMwhuG7WJJ0xTtmT/TfO/dZqo+t
8V5iaaGX3gjEKbtpPy+KXoEhzrQ03Dw9Is68T/s4Le6qpOhTzz+qIgY0ncl7gRL9
HgCz8V5FNLaGHzYu5RibZgJYcTbA6yl2O9fBsj0H1g0MfQBD6N3VP2eRnKARrlBC
jthc0rGG+LZonaJa+FYv7BCplZuNF23baENplhVd4MfDEkOVVcGvqkHMsJX6YtCV
PKgKHwMQKfzzQykF3X8YysyEykJrg5RFJ/3UlVShi074E9Oj4gufL1xTUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLAPUcaf9V4Tz5TK9+2xkmya8fHMB8GA1UdIwQY
MBaAFFBeLy1ecJP/jUADoCt9PhMc5woSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQt
OThlOWUyNTEwYmI2LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQtOThlOWUyNTEwYmI2
LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiurUf0ww
gqwViWpsD1W2dkKJbYJ1gVHtDtB9hlFqe38W6HlS292ZKaWxMQtjQCXYTxz8EmIf
0+U0umU5mPX8VGDAArYux5fNcIvKCo6GCPTxPJWQfjDVfK05RojC5q4mo1EaVnBN
PWMCyIGEodulqmMe7pFcEqxa5csQzDhRUdXefUJBWf73/QPT1X14p1Hy2fU+BUdZ
uLHT3hqaoloTnGWtwKGPwGeVvJtETk9W8U3HtDn4N9EPtpMqh6Qs21pI0cbfV6tM
LNIr0Avlw1WvMiJv3GbWs43BJvVGch0lH7ol9w43k6FEptK81J36so2woWvM0K7n
Vk0HAeUO0Xh9DQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:02 2026 by rpki-client