Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File:                     MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier:          +oP03hxWc9n5T2SelWTy6OtU1bY2Eg2QEru5rSNSRQM=
Subject key identifier:   CC:1C:FB:63:6A:94:0E:D6:64:23:17:49:2E:10:7B:93:D7:E1:96:20
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer:       /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial:       019FFFEEB8A6AB227605A07F4AD18591AFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number:          1A1D
Signing time:             Fri 14 Aug 2026 11:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 11:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 11:01:02 +0000
Files and hashes:         1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
                          2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
                          3: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (hash: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=)
                          4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: LZeNzVkgiKY9tlaOfQ7KpsL7oxzLyIWqjWetOigk4OQ=)
                          5: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (hash: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=)
                          6: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ff:ee:b8:a6:ab:22:76:05:a0:7f:4a:d1:85:91:af:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
        Validity
            Not Before: Aug 14 11:01:02 2026 GMT
            Not After : Aug 15 11:01:02 2026 GMT
        Subject: CN=cc1cfb636a940ed6642317492e107b93d7e19620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:81:e7:88:1d:76:19:5b:69:74:4f:c1:4d:
                    99:1a:2f:b8:ed:03:a8:e8:e0:cd:d8:2a:e4:8d:86:
                    ca:d2:e4:5a:ae:b7:4f:57:0a:e8:51:3b:79:fd:f9:
                    1d:90:32:b2:5f:1a:82:6b:23:8a:30:74:40:f7:ae:
                    42:11:4e:0b:95:4e:d7:9f:17:ad:39:5e:68:69:77:
                    1d:8b:06:20:64:25:6f:c0:e4:be:0d:fd:0e:4e:58:
                    39:42:68:14:97:7f:98:49:69:4d:8c:0d:62:99:b1:
                    88:d0:b4:62:98:81:e1:50:68:b7:0a:c0:0b:76:d3:
                    31:42:50:a3:ee:e8:f7:21:1e:ba:76:20:4f:65:9b:
                    39:28:a0:5f:9b:47:e3:2e:cf:10:02:5f:f2:de:a3:
                    08:62:a9:46:6c:7c:fe:0d:98:d5:d8:b0:94:7c:55:
                    b3:8b:49:24:b7:31:74:c0:24:7e:c3:56:3e:8c:a7:
                    4a:41:e4:08:2d:28:0c:6a:98:46:dd:29:57:ba:38:
                    f7:8a:33:82:7f:47:8d:01:ec:0c:16:35:6e:8e:82:
                    24:b9:05:70:00:32:d1:50:bf:45:d8:90:d8:f6:69:
                    ce:7a:8c:ae:66:83:11:bf:d4:fa:af:31:8f:de:7f:
                    8c:85:c0:3e:bd:98:6f:fa:49:fd:10:41:2c:d7:d8:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:FB:63:6A:94:0E:D6:64:23:17:49:2E:10:7B:93:D7:E1:96:20
            X509v3 Authority Key Identifier:
                keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7d:72:b7:d0:51:5c:33:61:b4:cb:a5:33:3b:a4:2c:00:f5:
         3a:87:9a:b6:a6:d3:5a:36:5d:0a:fe:1d:75:48:93:aa:e9:7c:
         b2:7e:18:c2:f9:c9:0f:a6:1b:34:53:7e:5d:c4:9a:f7:85:25:
         69:9e:06:69:7e:ae:c6:89:43:86:9e:bc:a7:41:d2:7d:67:e8:
         5c:a3:a6:37:d7:90:25:19:44:a6:26:60:ae:f5:e4:38:93:34:
         b2:e4:dd:41:ed:7c:b1:ca:7a:68:dd:91:7d:4c:44:24:c2:b1:
         ea:81:d8:a9:4a:75:04:65:b5:96:0a:88:ed:3e:be:71:d9:1e:
         63:a1:73:aa:b2:c6:9a:80:45:5f:fa:f2:61:19:21:e1:04:6d:
         b7:d3:4d:11:12:ba:b5:cc:ae:0d:ee:d9:8f:5c:5d:a4:89:ed:
         4d:67:f0:93:6a:c5:e4:92:10:af:98:e7:3f:72:3a:d1:36:58:
         90:10:89:8f:e8:3b:ec:cb:90:4d:b6:cc:e0:a8:30:df:5f:02:
         54:3a:dd:bd:35:01:6c:ae:76:79:12:00:4f:4e:30:5f:e6:85:
         c2:1c:74:17:20:91:8d:f9:11:d1:bb:0b:12:18:52:f9:2c:d8:
         b2:93:2c:6f:62:a7:5c:53:da:7b:1c:b5:af:5b:8f:f5:ce:6e:
         3d:79:66:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 16:01:58 2026 by rpki-client