Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          +cY9bGETtzWGINLcCojR6h57OWXawZBYW/VuKXLl1bU=
Subject key identifier:   C6:C7:62:DE:81:09:76:D8:B1:FF:9E:A0:D6:07:41:00:39:CA:FE:3D
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       019FF759A59963DC21C9E8FC2D2DC101E361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          1A0C
Signing time:             Wed 12 Aug 2026 19:01:15 +0000
Manifest this update:     Wed 12 Aug 2026 19:01:15 +0000
Manifest next update:     Thu 13 Aug 2026 19:01:15 +0000
Files and hashes:         1: 05pxQUZ3O5g7XwtchpzgXkYXLrM.roa (hash: pSBaxXr7aIa0AV76Ml4OFVZIYb8NNW03JRmIFNcA92E=)
                          2: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: 8EtL7yVNF9jM38WJZA25rUix4CeCw193OXDXnsSAH+w=)
                          3: 4zc0TbZEkLFIHswzFPhuNpSxjI4.roa (hash: YDxBwpVQ5ct0e9UMy7Eo6tKf/5X6TUwON0SibETkWO4=)
                          4: 8sE9vfnxVkhmpv_cPv6lSgophbw.roa (hash: pgSz+be35K3IsVHSxBC7rLqa8AF08GPc30TZx1/DC/o=)
                          5: O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa (hash: pVOrFHAX/Lnb3FuStEB2bMj1QRU4ZVatYcxzuU5OSMo=)
                          6: QHPyg5iWbWbbW5gr34naY63NDvo.roa (hash: yEtOkw8pnNFWUem/+gYHXLql4MYn18HzTEqZKWbEw9U=)
                          7: bH0F2mV_dRL1r12H9Kv5329qGfI.roa (hash: zDXdXDEtcJePiYih7GNQU0Vm0lUa6Wpo3l7juYolzJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:59:a5:99:63:dc:21:c9:e8:fc:2d:2d:c1:01:e3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Aug 12 19:01:15 2026 GMT
            Not After : Aug 13 19:01:15 2026 GMT
        Subject: CN=c6c762de810976d8b1ff9ea0d607410039cafe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:48:d1:dd:5d:b0:39:bc:d0:d5:58:4c:ea:
                    28:1d:b6:6f:92:52:e1:c2:80:69:7d:c8:e2:a1:f3:
                    44:10:fd:17:1f:01:d5:65:3d:01:7d:22:fc:6a:55:
                    9a:d9:71:e5:63:d4:ba:23:79:54:ac:6e:cf:a5:8a:
                    de:ac:a0:6b:67:39:d6:8c:b7:8d:d5:3b:c7:32:23:
                    c4:a3:30:aa:68:81:f8:38:de:0a:3e:cb:a2:9d:31:
                    f2:49:f9:38:3a:e5:b3:34:0c:56:15:23:21:fc:9e:
                    05:95:64:5f:dd:f2:59:29:3a:e3:05:19:84:82:1d:
                    5a:e3:28:5a:8e:ab:94:86:55:13:d6:60:0c:99:66:
                    11:23:49:5a:88:f1:88:7c:80:34:76:06:ec:ca:b6:
                    fc:da:54:e3:14:6e:3d:96:98:fd:e8:28:4a:a9:c5:
                    09:25:46:5e:f7:1c:6a:a9:6a:86:2c:d6:e6:bc:b8:
                    d6:6e:9f:b8:fe:b5:9e:53:da:f9:5f:88:4c:f8:c8:
                    2f:bc:d2:01:4e:81:35:9a:e9:5f:14:3c:41:38:9e:
                    ff:98:35:95:db:d2:c2:37:46:a5:4d:33:92:e9:33:
                    e9:d3:d9:4a:87:35:52:4e:de:af:70:ec:16:90:14:
                    62:f1:0f:59:68:6d:36:33:cc:a8:d4:6a:05:71:13:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:62:DE:81:09:76:D8:B1:FF:9E:A0:D6:07:41:00:39:CA:FE:3D
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:de:13:62:75:40:6a:24:8f:7d:db:99:98:1b:78:fb:f6:cc:
         58:fc:af:17:5b:53:29:f8:77:84:e0:db:7f:39:51:6a:c6:d1:
         6d:58:fd:08:25:7c:eb:63:b9:d0:5a:96:ad:91:af:78:35:a8:
         97:99:37:5d:0e:68:10:40:d8:5e:dd:51:34:26:09:03:2c:f8:
         4f:35:39:f6:03:60:d0:d0:a2:61:fd:47:bc:bc:79:8e:98:26:
         5e:90:f7:9a:15:01:f4:3e:f2:39:86:d2:bd:97:3f:b8:be:64:
         c1:be:e9:b0:3c:49:db:5a:ec:75:ca:1f:d2:86:e5:fd:a8:3b:
         5b:ae:05:94:2b:37:85:c9:aa:f9:c6:d0:6e:56:38:f1:27:06:
         50:86:4b:26:cc:dc:d3:35:1a:89:4f:20:e3:e7:55:5c:f0:85:
         58:d9:a3:72:20:e9:a3:63:28:7a:90:07:01:a2:95:fb:b4:c2:
         3d:9f:3f:5f:58:15:17:c7:79:2e:20:cb:12:18:89:83:f4:24:
         22:5c:a0:cc:4f:52:77:a4:68:75:74:7e:de:a5:9d:ce:d1:d3:
         20:2b:f3:29:03:97:cb:e1:99:33:eb:57:5b:64:46:e6:93:1f:
         06:9a:65:21:27:1c:f9:53:7a:a7:94:ff:95:ca:0e:8a:b9:3c:
         88:73:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:28:21 2026 by rpki-client