Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File:                     9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier:          Fp8ENUVOA6PnA7jCGKK0dutk+4JmwIVMQf/JpPPO0dk=
Subject key identifier:   F0:61:C8:C2:01:9D:5C:B9:B9:0B:3C:F2:C6:4B:2F:95:C3:CA:73:B4
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer:       /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial:       01A00394198AABC82E7E6D8B9017257ADCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number:          0E2B
Signing time:             Sat 15 Aug 2026 04:00:32 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:32 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:32 +0000
Files and hashes:         1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: RLMDLqOjZtjvSX7wRPSY7oAjM/vQP4go3YSIHTHt8CY=)
                          2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:19:8a:ab:c8:2e:7e:6d:8b:90:17:25:7a:dc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
        Validity
            Not Before: Aug 15 04:00:32 2026 GMT
            Not After : Aug 16 04:00:32 2026 GMT
        Subject: CN=f061c8c2019d5cb9b90b3cf2c64b2f95c3ca73b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:6f:43:f0:90:23:a9:46:a5:42:eb:3c:30:
                    e9:6b:71:0e:b8:a1:45:83:52:9f:7a:87:f2:c1:19:
                    0b:72:63:94:69:02:fa:2a:99:52:3f:f2:23:4e:f8:
                    b0:0c:fc:34:f8:74:18:67:95:20:d4:50:ce:27:a6:
                    37:3f:90:7a:1d:a3:d2:03:b9:75:2d:d0:c9:82:48:
                    5d:46:e9:e9:2d:d5:75:15:df:80:3a:ab:d9:75:33:
                    c7:33:0e:81:a3:bd:6b:43:bf:18:20:96:7d:2d:96:
                    db:bc:94:97:90:0e:39:16:21:6b:b9:dc:db:a0:a2:
                    48:fa:ea:47:4f:db:7f:ee:2d:16:bf:7c:7c:9d:05:
                    77:73:a3:a5:9d:0f:64:dd:91:aa:e8:29:bb:6b:4f:
                    7c:09:dd:bd:ca:b3:7b:04:03:b5:bd:ef:6d:28:c6:
                    75:48:73:61:cd:31:b1:8c:89:f7:a4:c3:2d:70:a0:
                    db:9c:13:65:96:96:e9:66:30:c3:9d:3d:d5:1f:39:
                    72:a0:91:97:be:82:90:da:4c:8c:57:9e:b1:86:f6:
                    47:e6:39:28:c0:5a:36:ef:a7:6a:f0:db:c8:d9:6c:
                    32:d0:29:34:cb:9c:d3:15:f2:e9:1f:58:69:78:39:
                    42:79:fb:28:2a:eb:c5:43:c0:05:1a:a8:01:9e:78:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:61:C8:C2:01:9D:5C:B9:B9:0B:3C:F2:C6:4B:2F:95:C3:CA:73:B4
            X509v3 Authority Key Identifier:
                keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:54:14:d2:f7:1c:88:15:88:ab:01:92:9c:08:ab:bd:38:94:
         db:77:1f:a0:cc:df:56:0d:89:1f:b1:70:11:50:65:74:af:96:
         68:30:58:05:0d:4f:a4:f5:bf:bf:13:15:b8:d8:ed:e2:e7:7b:
         58:c5:69:fd:06:ef:8e:c5:4e:45:82:6b:fb:2d:d2:8a:34:38:
         7d:92:75:57:23:0b:30:53:de:46:04:0c:c0:de:a2:d7:31:53:
         e2:8e:ca:a3:6b:bc:58:19:3b:12:91:79:f2:3f:c9:6c:a5:2d:
         6e:2d:e5:2f:65:2b:c0:59:16:b9:07:6f:39:f9:de:e2:d4:e9:
         45:5a:b5:55:fd:81:a2:7e:7a:2f:26:19:75:96:c1:10:1f:29:
         0f:60:56:b4:71:9e:e2:4f:7e:69:32:98:ba:a3:c6:78:df:60:
         ee:d9:5a:30:51:76:c8:fe:e4:15:1b:81:15:6e:91:b5:75:5b:
         06:77:58:bb:af:58:90:67:74:f6:93:1d:e8:7a:55:01:fb:4f:
         0f:63:2e:ab:43:14:0a:b6:87:68:dd:de:c2:5d:07:8f:d8:4b:
         66:aa:90:ca:7e:e5:b2:75:cd:60:5e:16:18:3b:c9:51:12:24:
         93:06:d6:74:bb:6c:2a:4c:cc:20:50:f4:b7:8e:eb:5a:82:67:
         d8:4d:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:50 2026 by rpki-client