Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File:                     9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier:          Ivbo4+GB/hc19DhWuhoM29X2cK9iM0ZsCVAWhNxidpw=
Subject key identifier:   68:77:60:1F:E1:66:0F:ED:D7:9C:11:F6:EB:C1:07:7F:71:52:BF:F9
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer:       /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial:       01A03FE00870CB6AC73FD9131F0543EAB881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number:          01AC
Signing time:             Wed 26 Aug 2026 21:00:41 +0000
Manifest this update:     Wed 26 Aug 2026 21:00:41 +0000
Manifest next update:     Thu 27 Aug 2026 21:00:41 +0000
Files and hashes:         1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
                          2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: E8d8pZ9I1V/pOGxVLLjDaHiQQinBpp2mu1maRgUjMIY=)
                          3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:e0:08:70:cb:6a:c7:3f:d9:13:1f:05:43:ea:b8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
        Validity
            Not Before: Aug 26 21:00:41 2026 GMT
            Not After : Aug 27 21:00:41 2026 GMT
        Subject: CN=6877601fe1660fedd79c11f6ebc1077f7152bff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:58:be:9c:bb:02:3f:8c:2e:eb:63:09:04:
                    db:a2:eb:d4:ad:d8:1d:b6:19:62:e7:e1:0d:79:fe:
                    5b:60:4e:3b:14:ce:5d:11:1e:0c:03:41:fe:16:a0:
                    1a:2f:d6:98:5b:d7:63:1b:8f:16:15:7f:91:fe:43:
                    1d:ae:73:cc:c6:c8:1a:96:e6:32:25:9d:29:84:4b:
                    de:da:ca:4f:40:9b:6a:3d:8b:a0:48:d9:b9:50:27:
                    a7:b3:81:51:9b:bc:47:62:ee:c8:3c:fa:1e:72:ff:
                    9d:8d:ca:06:ad:5b:39:0f:e4:b9:e4:3d:2c:d1:ce:
                    79:7f:6d:99:f4:8c:03:08:8e:b7:37:35:ab:6c:01:
                    76:f3:0a:45:7d:28:62:7a:b3:41:01:0c:ba:98:15:
                    95:27:1a:cb:81:10:86:da:3f:e4:f7:db:6a:02:7e:
                    4c:b1:dc:f8:bb:cd:40:8a:f3:97:8d:19:69:d6:9d:
                    59:83:60:7e:bf:f3:b1:57:40:33:32:b2:0b:95:8a:
                    aa:9c:97:4b:92:33:1c:7f:49:07:38:06:a9:61:71:
                    13:e3:3a:e2:fd:c2:dc:e9:5f:7f:29:df:53:f9:16:
                    b6:90:12:ad:97:2e:b1:6e:4a:01:3f:8f:7d:68:2c:
                    19:eb:80:83:4a:5d:35:f1:af:a4:38:e3:c8:45:bc:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:60:1F:E1:66:0F:ED:D7:9C:11:F6:EB:C1:07:7F:71:52:BF:F9
            X509v3 Authority Key Identifier:
                keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:42:41:1a:6a:aa:d0:a6:00:ac:30:66:34:37:70:6e:e0:3e:
         81:b5:dc:c7:9b:f8:4e:aa:73:71:f6:7b:48:1b:92:bc:5c:04:
         fd:40:62:28:bb:7a:fd:90:a7:5e:20:24:86:bf:94:75:f6:8e:
         ca:de:f4:74:c7:c7:5e:0c:d7:fc:ea:39:7b:8c:59:2a:ca:87:
         36:1d:dc:bc:38:7c:da:c6:87:40:f7:55:c6:e5:a4:2f:0c:13:
         d0:e3:6f:85:d2:4a:dd:9a:99:8f:d5:b3:33:63:03:0e:04:39:
         b2:79:a7:1a:76:61:3b:77:99:96:21:45:86:37:3d:20:30:ad:
         01:14:54:ee:08:58:0f:a6:5b:de:a6:ae:f1:a4:9b:dd:25:f9:
         08:24:33:25:15:9e:27:d2:9b:ef:4e:a2:92:84:28:05:2d:29:
         a6:c5:44:fe:66:50:50:80:fd:e2:12:f3:ae:44:20:16:4d:5e:
         dd:e4:3d:33:5e:26:96:4d:e7:9d:52:72:22:c2:0a:d6:c5:a6:
         b7:7c:aa:4b:6a:a2:71:f4:31:d9:67:c9:bb:19:3e:a3:ee:49:
         e5:f4:57:26:7b:95:5a:62:29:47:66:95:58:2c:51:7a:1c:c7:
         27:2f:6f:4c:2c:c8:9b:29:d6:1f:26:86:ff:2d:9e:f2:97:e5:
         14:f8:23:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/4Ahwy2rHP9kTHwVD6riBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjQ3YjlhZGYyN2ZhZjc3ZGY4MDgyYzU1NTFiNzM3NTZh
YzNkZWYwHhcNMjYwODI2MjEwMDQxWhcNMjYwODI3MjEwMDQxWjAzMTEwLwYDVQQD
Eyg2ODc3NjAxZmUxNjYwZmVkZDc5YzExZjZlYmMxMDc3ZjcxNTJiZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHxYvpy7Aj+MLutjCQTbouvUrdgd
thli5+ENef5bYE47FM5dER4MA0H+FqAaL9aYW9djG48WFX+R/kMdrnPMxsgaluYy
JZ0phEve2spPQJtqPYugSNm5UCens4FRm7xHYu7IPPoecv+djcoGrVs5D+S55D0s
0c55f22Z9IwDCI63NzWrbAF28wpFfShierNBAQy6mBWVJxrLgRCG2j/k99tqAn5M
sdz4u81AivOXjRlp1p1Zg2B+v/OxV0AzMrILlYqqnJdLkjMcf0kHOAapYXET4zri
/cLc6V9/Kd9T+Ra2kBKtly6xbkoBP499aCwZ64CDSl018a+kOOPIRbyiDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh3YB/hZg/t15wR9uvBB39xUr/5MB8GA1UdIwQY
MBaAFPVke5rfJ/r3ffgILFVRtzdWrD3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdSN210OG4tdmQ5LUFnc1ZWRzNOMWFzUGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZGFmNTgtMTRlOC00N2MwLWE0Yzct
YzY1MmJjNzI2NmVmLzEvOVdSN210OG4tdmQ5LUFnc1ZWRzNOMWFzUGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83ZGFmNTgtMTRlOC00N2MwLWE0YzctYzY1MmJjNzI2NmVm
LzEvOVdSN210OG4tdmQ5LUFnc1ZWRzNOMWFzUGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUJBGmqq
0KYArDBmNDdwbuA+gbXcx5v4TqpzcfZ7SBuSvFwE/UBiKLt6/ZCnXiAkhr+UdfaO
yt70dMfHXgzX/Oo5e4xZKsqHNh3cvDh82saHQPdVxuWkLwwT0ONvhdJK3ZqZj9Wz
M2MDDgQ5snmnGnZhO3eZliFFhjc9IDCtARRU7ghYD6Zb3qau8aSb3SX5CCQzJRWe
J9Kb706ikoQoBS0ppsVE/mZQUID94hLzrkQgFk1e3eQ9M14mlk3nnVJyIsIK1sWm
t3yqS2qicfQx2WfJuxk+o+5J5fRXJnuVWmIpR2aVWCxRehzHJy9vTCzImynWHyaG
/y2e8pflFPgj4A==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:00 2026 by rpki-client