Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          /L4lVUvdrcFYbpYKSA63aP8gV5951OeV3DfPgpiaIjQ=
Subject key identifier:   A1:7C:E3:4D:1B:9D:BA:3D:AC:BB:98:4F:69:E6:34:84:DD:98:97:52
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019FCB93DFB6564607D2382D28AB3DF7E098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          123B
Signing time:             Tue 04 Aug 2026 07:01:33 +0000
Manifest this update:     Tue 04 Aug 2026 07:01:33 +0000
Manifest next update:     Wed 05 Aug 2026 07:01:33 +0000
Files and hashes:         1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=)
                          2: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=)
                          3: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
                          4: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=)
                          5: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          6: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: KlGbl5xcHqwnh7yBNZJOGZXGx5r/8fez8B6WC6kXcIs=)
                          7: kb1i0Euop8uoZI3hbnb2E8DBgcA.roa (hash: /59t43jCATUh6sMhTHPSZs3hBikNt8v++IxN2wJ5leg=)
                          8: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
                          9: rjckdxrOW6yb8UbBlQuItd3xhV8.roa (hash: 0JVOip2Nlhin+Ly1iQyyyD/alQ1c3usrAontHun6a3c=)
                          10: xddt07zyoLb-y4ddIpmNk_Ngnlo.roa (hash: yi5hHDSKd9O5g6YykPT5aDJKpKMiWzWCSa5v86IH4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:93:df:b6:56:46:07:d2:38:2d:28:ab:3d:f7:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Aug  4 07:01:33 2026 GMT
            Not After : Aug  5 07:01:33 2026 GMT
        Subject: CN=a17ce34d1b9dba3dacbb984f69e63484dd989752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:70:29:16:7f:5d:fa:56:99:0d:65:d5:3e:
                    3a:87:d7:96:40:9b:dc:35:eb:40:81:61:14:18:a6:
                    23:45:16:85:f6:4d:fd:24:f3:a6:d6:64:9a:5b:8b:
                    a5:7b:64:92:e9:60:b6:e4:4c:9f:f0:97:41:5f:75:
                    15:be:e0:8c:1e:29:cd:cd:1e:a6:8d:6e:2b:d5:6f:
                    02:8e:79:db:a2:17:16:f2:64:90:ef:ae:e4:27:eb:
                    b8:44:5e:87:9c:40:b6:09:24:f1:a9:d8:48:0c:14:
                    db:6d:51:8e:c8:3a:77:23:d8:7b:29:6e:c0:56:85:
                    05:6a:37:e2:3a:c0:4d:c7:6a:84:0d:a6:56:78:91:
                    64:ca:27:56:40:46:fa:cd:c5:36:28:48:44:45:aa:
                    6d:a3:b2:44:7d:8d:cd:bc:cb:2e:2e:12:3d:b4:df:
                    de:30:a3:a2:86:c3:23:3c:33:8a:ec:8a:f9:85:3e:
                    5b:1f:bc:b5:af:5c:45:4a:0a:01:61:57:d8:a9:77:
                    f0:a6:4e:4d:2b:95:e1:a1:0b:86:6f:ae:72:47:a4:
                    d9:51:d1:71:70:e0:00:36:b6:ca:29:db:78:6f:4f:
                    0c:6d:8c:5b:b9:77:a3:25:3b:0e:80:cf:fb:61:5f:
                    73:9e:d9:e9:c6:5a:a1:7d:e3:da:50:99:4d:48:04:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:E3:4D:1B:9D:BA:3D:AC:BB:98:4F:69:E6:34:84:DD:98:97:52
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:b2:1e:0a:03:a1:42:5d:6f:f7:73:e3:fe:f9:19:c4:da:
         96:1f:79:a3:1b:d1:8f:19:f2:e4:5d:93:70:f7:e9:b6:18:f3:
         f1:8f:16:80:03:44:45:7f:4e:47:c9:f7:5f:67:4c:85:f2:c5:
         76:39:ad:12:20:d6:00:20:14:a0:99:49:8d:72:88:55:30:14:
         f0:81:d8:55:91:35:3a:94:d5:c5:65:43:e2:02:65:23:58:dc:
         72:d4:f0:04:98:46:d0:39:58:62:ba:14:97:24:f9:aa:32:58:
         5c:ec:fd:7a:1d:a1:79:a0:00:e8:20:1a:4a:0c:3e:fc:bc:95:
         45:01:0f:a7:25:9e:c2:2e:5f:f7:48:d3:f8:f6:e7:f6:e5:ad:
         44:4e:9a:eb:21:ff:95:55:e3:89:78:f3:ec:76:1a:37:c1:c6:
         85:cd:71:c1:f9:8b:ec:35:ad:0e:70:c0:e5:5f:e7:22:73:3c:
         6e:54:e6:39:39:10:8f:bb:35:c4:bd:93:76:59:ec:cc:3c:86:
         ec:41:12:77:e8:6f:31:bf:8b:a2:a6:3b:b6:67:6e:d3:30:ea:
         5a:6a:b2:92:a7:2a:69:01:3a:4c:fc:8e:98:60:6e:0b:43:66:
         60:48:f6:6a:4a:24:29:84:5f:33:6a:35:15:02:73:c6:63:79:
         29:f0:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:58:27 2026 by rpki-client