Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File:                     46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier:          a1DNFA3adD4WrEWL82he/ws0xT/8bZMdY2ujDq5np0o=
Subject key identifier:   2B:04:B1:6E:3D:0F:E1:CF:D9:5D:DC:51:29:A5:7B:8A:D9:1D:2E:3F
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer:       /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial:       01A0005C6AF1805F819F36064EB4A0C7B99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 13:00:51 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:51 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:51 +0000
Files and hashes:         1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: 6717ch49SBRynREZ84jqcYF7fOYffMMdhMitlCJ7vb0=)
                          2: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (hash: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:6a:f1:80:5f:81:9f:36:06:4e:b4:a0:c7:b9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
        Validity
            Not Before: Aug 14 13:00:51 2026 GMT
            Not After : Aug 15 13:00:51 2026 GMT
        Subject: CN=2b04b16e3d0fe1cfd95ddc5129a57b8ad91d2e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:fe:09:fe:11:cd:50:57:d5:c5:58:51:c4:
                    03:5f:36:6a:ab:3b:83:2e:4a:cd:3c:ac:76:37:f0:
                    8e:16:f7:5c:04:b8:2c:2a:39:16:11:6f:a6:fb:81:
                    a5:e8:0c:63:13:71:a8:c1:29:7a:f9:ff:6b:a7:ca:
                    b8:69:f7:13:00:4c:5a:54:49:60:f9:a8:31:35:a7:
                    97:ab:0b:c2:d2:b3:90:dd:0f:bc:a6:56:dd:10:0b:
                    13:19:8e:bf:2e:49:1c:d8:b7:b2:28:44:02:ab:83:
                    fd:bf:5d:c8:7f:ef:91:6b:54:df:9c:11:01:f7:c6:
                    4f:73:f5:43:d5:62:9a:ec:76:b1:79:1f:0d:88:c8:
                    e7:62:8d:e1:66:1f:41:c9:26:7b:84:70:69:c6:65:
                    ec:a5:63:b3:d6:a8:28:58:e2:ad:a2:c5:d1:6b:08:
                    c4:de:ab:8d:c4:1c:b3:3c:52:9c:c0:30:65:2a:f0:
                    7f:29:f4:d4:4f:57:48:d3:8b:8c:0b:d4:c7:ff:5f:
                    08:fd:e7:90:6d:de:32:59:20:c6:7b:bf:d6:1d:ce:
                    4c:72:ec:ab:b8:5e:7d:a9:eb:6c:61:fd:6f:f0:a0:
                    fd:7f:89:aa:4b:dd:98:07:31:29:a2:6f:4d:e5:7c:
                    f5:23:c0:6f:2b:c4:77:3c:24:7a:d8:9f:f6:22:ec:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:04:B1:6E:3D:0F:E1:CF:D9:5D:DC:51:29:A5:7B:8A:D9:1D:2E:3F
            X509v3 Authority Key Identifier:
                keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9f:f9:41:1a:f6:7c:82:c2:6b:cc:6b:04:16:6e:50:1f:dc:
         cb:a4:ed:91:44:87:35:34:7d:66:09:0c:f0:92:d6:27:bc:a7:
         97:8c:38:71:5d:ce:8f:fe:4b:7f:a5:53:29:cf:53:ca:5f:7f:
         36:35:00:90:38:9a:8b:86:ea:f1:bd:c8:10:03:cc:31:20:3d:
         0c:17:3c:8e:7c:a9:f9:cf:b7:0c:e7:3b:35:e9:74:70:98:cd:
         43:52:1d:5a:f5:ae:ba:da:78:bd:86:92:d2:9b:6d:4d:41:ae:
         50:5a:3f:0b:fd:35:2b:e7:d8:e4:f5:a5:5f:16:80:de:8d:57:
         0a:6e:fd:bf:d3:8a:90:bd:e6:ee:ff:d0:9e:8d:40:cf:fb:e1:
         20:e2:a7:6f:8b:26:47:43:85:96:70:2d:4f:16:04:43:b7:97:
         bd:55:33:ec:ef:bc:e4:34:45:3b:80:84:f8:f4:e0:d7:f8:a3:
         68:39:68:72:7c:f1:39:f2:43:b8:02:18:4a:89:21:d2:17:e4:
         07:2a:15:47:f4:99:70:8e:e3:53:3d:02:db:f5:ef:43:d3:21:
         36:fd:a5:12:22:56:51:89:7a:4a:11:ae:06:05:41:06:d3:96:
         8d:d8:39:4c:83:13:3d:d0:99:b5:e0:19:89:2c:05:dc:e8:88:
         fe:e2:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:00 2026 by rpki-client