Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File:                     AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier:          A06v1ArUd9AA1xQihP+yOvK7ATwlRbtSvVbPuMzDTNg=
Subject key identifier:   DD:43:47:DC:E0:0C:8D:D6:5D:23:AD:9B:BF:33:4B:89:BA:95:18:02
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer:       /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial:       01A001DD5FEB8FA86D5042C68EFE6A785B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 20:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:20 +0000
Files and hashes:         1: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: rBemsVix5hTWFO1AQEkG+iAbm7pv3HzIf2e9vxTE3B0=)
                          2: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:5f:eb:8f:a8:6d:50:42:c6:8e:fe:6a:78:5b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
        Validity
            Not Before: Aug 14 20:01:20 2026 GMT
            Not After : Aug 15 20:01:20 2026 GMT
        Subject: CN=dd4347dce00c8dd65d23ad9bbf334b89ba951802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:6b:8a:a9:e6:8b:dc:2a:a6:b3:65:e2:6a:
                    2c:4b:8c:38:6d:ed:76:47:d8:9a:25:da:42:26:94:
                    f6:f1:70:e6:30:2d:97:b2:d1:da:7d:a0:8f:38:4b:
                    e1:5d:bb:12:2a:85:5b:c2:71:91:58:7f:3d:7b:f3:
                    be:fe:a5:e2:aa:06:ec:d3:01:ea:7e:b8:e6:b9:1d:
                    3d:21:73:84:7c:f9:45:3e:fc:76:8d:1c:4e:43:f5:
                    dd:e9:d9:a1:69:4f:c9:09:1b:38:a5:3f:a9:de:fe:
                    f4:0f:3a:7b:ce:68:c8:69:26:90:a2:ba:e1:32:21:
                    be:1c:ce:17:2d:af:f2:12:72:b5:28:a7:42:ff:06:
                    84:07:c3:b0:1d:60:cc:a0:11:f5:a4:96:4b:cd:42:
                    c9:9b:14:fe:fa:38:c9:bd:61:d4:33:a7:f6:32:cb:
                    01:5b:9c:a8:a3:f9:e2:85:66:fb:4a:81:4d:0f:c4:
                    9f:90:af:ca:af:0b:1f:ce:b8:d1:0a:c9:a2:02:79:
                    03:4e:84:7d:e0:31:74:60:80:cd:0c:ac:26:d1:9e:
                    35:e7:77:05:6c:64:d9:b4:b4:f0:d1:33:94:d7:08:
                    de:47:1d:a8:e4:f2:6e:cb:f6:8d:23:e7:d3:36:86:
                    9d:26:8b:49:ad:5f:f4:b3:98:77:d7:02:35:5f:7c:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:47:DC:E0:0C:8D:D6:5D:23:AD:9B:BF:33:4B:89:BA:95:18:02
            X509v3 Authority Key Identifier:
                keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:16:23:35:4f:ed:85:78:40:f2:b3:5a:57:6c:38:0b:4c:
         e3:8c:dc:c0:bc:80:46:fa:6c:2b:48:07:ba:5c:37:23:62:b5:
         8b:7b:d7:59:b5:82:4d:0f:fa:6d:10:aa:d9:ca:2e:41:c3:f7:
         86:c7:6b:ce:88:95:bf:40:eb:c2:8b:45:7b:ee:c2:90:b6:44:
         4c:9b:ae:d5:d2:08:72:b0:e3:a4:7a:3c:b9:3a:a5:5f:a6:e7:
         77:b2:f3:b3:f5:8a:94:79:d6:8f:c9:fb:1a:2a:3b:84:fb:f8:
         f4:20:ef:70:52:b8:b0:58:89:6b:bb:0f:e2:e2:3f:b4:ba:c2:
         6e:f7:34:6a:6e:e1:3c:5d:b1:ac:85:fc:d0:dc:8b:49:06:27:
         12:ea:bf:58:1a:2a:62:d1:ef:8d:ea:0c:4e:a3:37:4d:4a:6e:
         a8:be:b1:19:f1:4d:0f:64:5c:a2:2f:43:6d:d5:ff:fb:5d:9d:
         fb:32:85:2a:c9:df:d1:d8:23:eb:b2:3e:8a:a6:65:c0:79:52:
         a0:52:64:26:6b:75:2e:17:be:79:29:0c:f7:7f:ad:14:c0:2b:
         35:a1:ac:d7:24:92:41:b4:33:3c:85:b9:14:00:d4:71:8e:a5:
         2f:7b:60:34:83:c8:d2:cf:5c:56:d3:1d:e5:81:0e:56:1c:10:
         48:09:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:53 2026 by rpki-client