Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File:                     kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier:          8GDIE1kDZmILzxoYZ+t8SpB+kpiMaFVnLvFUThiVt2M=
Subject key identifier:   F5:E0:3D:F0:0D:9D:18:F5:A7:58:EC:02:F6:DD:F7:4C:9F:03:BE:31
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer:       /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial:       01A00394A31853115522A33FC84614BD3874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number:          03BD
Signing time:             Sat 15 Aug 2026 04:01:07 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:07 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:07 +0000
Files and hashes:         1: MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa (hash: gDgNzdOYz3KjBH95RxNa3YAdnlDk82nruMEoI3Ezi38=)
                          2: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: s1Omf/FATGxWhLjXmsAZBQPjH/yDx7owCOKiwRx7wqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:a3:18:53:11:55:22:a3:3f:c8:46:14:bd:38:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
        Validity
            Not Before: Aug 15 04:01:07 2026 GMT
            Not After : Aug 16 04:01:07 2026 GMT
        Subject: CN=f5e03df00d9d18f5a758ec02f6ddf74c9f03be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:30:ee:76:55:50:a8:f3:74:bd:03:6a:83:
                    31:b5:46:ca:64:27:5c:2c:6c:da:55:4b:d1:22:8a:
                    a1:50:78:ae:4f:bb:76:0c:36:ea:d7:5e:dd:59:8d:
                    e4:af:01:70:06:3e:41:2c:26:a1:91:29:50:6b:1d:
                    fa:7d:04:fc:1a:f6:1f:82:a4:42:12:a6:54:69:f2:
                    c3:9f:84:d9:37:65:a1:e0:8a:ae:85:2e:49:68:0d:
                    54:6b:a8:e1:01:82:af:02:7e:24:be:94:42:07:58:
                    30:f4:e0:73:b7:ad:56:ba:57:6a:71:8e:e4:46:e8:
                    7d:76:1e:4a:19:a1:9b:b4:f6:2e:0d:7a:e1:5f:31:
                    d1:b6:57:71:ed:98:4a:6e:04:77:14:4a:09:5d:26:
                    0d:e1:f5:94:f4:db:3b:69:13:61:95:94:ba:a8:78:
                    03:98:7c:0a:8e:89:70:53:37:5e:28:b2:5d:f7:c1:
                    43:cf:c3:73:78:54:f0:27:af:0e:33:16:3e:fa:b0:
                    c9:39:70:e3:18:1b:12:a5:d9:a8:99:81:06:9c:7f:
                    91:62:53:09:c0:fe:02:2c:a8:25:61:63:7b:3e:d3:
                    21:d2:3e:a6:50:7f:43:00:79:6a:51:20:0f:bb:d4:
                    a0:9d:74:9d:e9:36:07:a8:da:ed:37:fd:79:80:47:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:3D:F0:0D:9D:18:F5:A7:58:EC:02:F6:DD:F7:4C:9F:03:BE:31
            X509v3 Authority Key Identifier:
                keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:e6:02:0c:22:19:15:10:e8:d9:51:00:4f:18:8e:86:b2:
         ec:87:3e:0f:e5:81:bb:79:3b:06:c9:76:68:25:b4:35:eb:73:
         f5:d6:a3:52:d9:7a:ca:25:10:65:dc:2c:5c:85:dd:d8:bd:dd:
         bb:00:b8:4e:c3:f8:3e:5a:65:36:c8:35:57:c3:39:a9:f5:27:
         d8:99:41:0d:ae:b9:53:38:d5:c5:d9:34:e5:b3:12:c4:9c:83:
         19:c6:32:4e:41:31:9c:f1:82:92:e9:6b:6c:0b:f8:56:8d:f8:
         99:96:71:b9:7a:cc:4d:09:b0:47:94:b4:3b:68:54:62:25:b3:
         c3:0f:c3:ca:31:72:cb:9d:58:da:29:7e:04:da:22:64:cd:67:
         68:cb:eb:a4:7f:9a:be:06:de:64:8d:f1:8c:87:6d:f3:31:a2:
         30:66:75:cf:6b:fa:a3:db:ae:1c:f1:3b:fc:11:e1:d6:1d:06:
         0f:9b:20:1e:e3:4c:71:e9:db:70:bd:50:39:21:6a:d0:43:eb:
         67:95:d2:2f:bd:7f:00:a1:bd:55:a6:6d:84:6f:05:cd:bd:08:
         94:a4:13:b8:ad:72:3f:70:b3:78:3a:77:46:82:dd:f8:18:b1:
         e4:f2:35:ad:ae:1d:de:9c:db:47:99:d8:60:37:74:d6:b7:72:
         8d:6e:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:54:37 2026 by rpki-client