Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          B8paYkRsaGk/i74x9dHzjchbFaUGXmrh2FfZ0J/YSjs=
Subject key identifier:   2E:A0:2D:9B:19:41:7B:8E:84:1D:99:55:BB:B8:1B:37:7D:39:D5:FE
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       01A00101674C9DE23E9F78EAC627539A833C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0E39
Signing time:             Fri 14 Aug 2026 16:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:04 +0000
Files and hashes:         1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: W1qnw9UBZsqSqHPjY5zINxGxoJpOo4Hc7YW4DJWjt20=)
                          2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:67:4c:9d:e2:3e:9f:78:ea:c6:27:53:9a:83:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Aug 14 16:01:04 2026 GMT
            Not After : Aug 15 16:01:04 2026 GMT
        Subject: CN=2ea02d9b19417b8e841d9955bbb81b377d39d5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:85:52:70:43:e4:5c:ea:c1:32:03:36:c3:
                    be:ab:a6:e4:17:e3:05:da:bb:02:df:82:49:2e:18:
                    0e:36:2d:d1:78:46:ca:0c:ec:26:2d:f3:bb:b1:de:
                    ed:7a:8f:12:e2:9c:b0:63:fd:c9:00:4b:57:5b:6a:
                    0e:e5:d3:42:ca:14:9f:59:dc:a9:ad:ca:67:82:10:
                    a4:b0:09:f9:4b:0d:7f:1d:a8:00:61:16:da:e7:7b:
                    08:fb:88:4a:7f:fc:0e:4c:e2:67:08:5e:6b:cf:d5:
                    dd:9d:37:64:83:43:54:fe:90:2b:31:71:d1:7f:a3:
                    6b:28:62:35:96:c1:19:07:65:98:b1:ff:4a:45:14:
                    41:1e:e3:04:39:70:81:5c:44:87:c0:6d:26:01:b3:
                    b1:ad:bf:a9:48:ab:07:ad:1b:f1:f3:09:dd:b3:02:
                    61:72:dd:cf:7a:f1:66:62:cd:9c:28:73:3a:24:4a:
                    d5:b1:9c:e5:86:91:96:0b:1c:42:64:9b:20:62:d6:
                    db:58:11:cc:69:ad:01:84:d0:1f:ba:48:ff:db:9e:
                    51:55:43:66:c5:9a:a2:f6:d3:bf:60:d1:62:a3:a1:
                    5a:38:d3:68:e7:ec:f9:78:46:e8:74:73:7f:6b:40:
                    f3:17:9f:42:86:aa:42:5b:f1:0a:c8:30:3f:f3:01:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:2D:9B:19:41:7B:8E:84:1D:99:55:BB:B8:1B:37:7D:39:D5:FE
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c4:f8:52:35:08:45:c1:d5:87:26:3f:4d:98:b2:17:d5:08:
         75:39:af:ee:b0:3b:94:1d:36:3d:e8:91:b6:d4:c8:24:a6:c7:
         b6:91:49:f7:bf:28:d9:a8:c0:cb:b8:f7:ff:20:ab:d5:83:9a:
         31:fe:77:87:3b:30:87:bf:14:f3:1e:be:fd:80:fd:4d:55:b8:
         29:4b:5f:b7:e8:10:7a:f0:6a:be:68:18:11:6a:a1:32:ac:d8:
         2c:49:c4:6b:74:46:b6:59:7a:91:cb:13:6e:0a:54:ae:8c:c5:
         3f:37:e6:a9:e8:90:2a:f7:95:ab:33:b5:dc:c5:14:0e:c2:44:
         43:37:a6:cc:be:bb:2c:4b:5e:57:b2:3e:fb:21:2e:90:e3:05:
         4a:17:bb:bb:2f:a1:0f:3a:b3:d8:2b:f5:70:97:b3:0a:1a:60:
         4d:06:76:be:3a:fc:3c:63:1a:f7:b8:fe:68:24:b3:c8:e2:38:
         43:08:4e:03:f8:5a:65:33:c1:9b:9f:45:df:8a:40:e8:fa:3e:
         7d:58:ca:50:d2:e4:98:9b:79:ee:51:bc:53:d4:af:5c:5b:5f:
         40:c0:8b:69:5f:0d:d3:72:aa:47:4c:00:21:25:f9:14:a6:7c:
         d7:e6:2d:4b:a9:e8:0b:f6:3f:12:c8:0d:f3:69:41:01:7d:38:
         6b:fe:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:15 2026 by rpki-client