Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File:                     I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier:          3xWsnQ4D1al/O/gxnQlQb4x9cLp9PjX2nB/GBKOJ82M=
Subject key identifier:   E6:55:CC:A8:A9:74:D6:BB:7C:34:C4:D5:9F:D9:05:90:A6:9B:C6:5B
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer:       /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial:       019FF86C47B414CFFCD19107A8E3BCE9D6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number:          171B
Signing time:             Thu 13 Aug 2026 00:01:13 +0000
Manifest this update:     Thu 13 Aug 2026 00:01:13 +0000
Manifest next update:     Fri 14 Aug 2026 00:01:13 +0000
Files and hashes:         1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: qFmusOUFe4npUxDFA8/VOCBPPJpMGcTh9tmRslS0HDI=)
                          2: gJIL-yyLSZQ86WF72F2-y7lREqA.asa (hash: 1TPh56ssE+BAjyg4JEIEBgYU8LSU5sYtrun0tWfhLP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:6c:47:b4:14:cf:fc:d1:91:07:a8:e3:bc:e9:d6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
        Validity
            Not Before: Aug 13 00:01:13 2026 GMT
            Not After : Aug 14 00:01:13 2026 GMT
        Subject: CN=e655cca8a974d6bb7c34c4d59fd90590a69bc65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:88:b2:db:ce:0b:fc:bf:0b:f3:9c:1c:03:
                    da:1b:9c:7f:3b:b7:7b:96:84:5e:35:82:10:0e:3c:
                    cf:a9:48:30:22:ff:87:3a:17:ab:60:3a:8c:5d:c1:
                    36:96:86:a7:e7:39:05:b5:ee:2b:3c:96:86:4f:2c:
                    c0:b1:df:12:54:74:7c:d7:e7:34:b1:d2:bc:ce:f2:
                    64:bc:0a:d1:44:2b:f4:51:78:c3:e7:2a:71:76:30:
                    e2:9e:b3:3e:eb:91:41:5e:c4:a2:43:78:ee:bb:d5:
                    7c:76:91:55:13:6a:0c:b3:f4:3d:63:33:ef:c8:5e:
                    be:f0:ca:bb:9e:ba:fb:98:34:0f:ba:e6:b9:85:30:
                    ff:42:6a:0c:df:cf:07:ac:6f:5e:3f:cc:cb:69:ae:
                    53:e9:3d:fc:c3:82:f4:03:4a:b5:99:ab:da:6c:88:
                    9d:f3:05:e0:af:03:b1:56:ab:66:65:b3:52:f4:ab:
                    65:3e:b4:65:22:f8:9e:94:0d:55:14:b9:fb:8b:25:
                    7e:f8:27:e3:16:e9:d3:e9:91:48:23:73:53:8c:ce:
                    29:3c:e6:5d:db:e1:32:26:93:4d:b5:6d:5f:a1:89:
                    d0:4b:d5:6b:a5:22:ab:0c:fd:43:b3:cd:95:93:8d:
                    e4:b3:66:3e:3d:1a:aa:d8:0c:44:70:44:7f:3f:b8:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:55:CC:A8:A9:74:D6:BB:7C:34:C4:D5:9F:D9:05:90:A6:9B:C6:5B
            X509v3 Authority Key Identifier:
                keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:da:d1:5e:2a:cf:29:59:8c:89:ae:99:b4:b3:8a:55:72:
         c0:2d:a7:84:e7:61:0f:e8:94:d7:16:ea:77:e4:7f:bb:38:9f:
         3e:b0:eb:f3:af:e4:97:a0:71:c4:77:23:52:b3:e3:19:ae:23:
         24:17:f7:ca:64:ed:ad:d2:30:f0:80:cd:6f:1f:9c:f4:4f:97:
         d8:b3:1a:fb:1c:3c:5b:dc:9f:fd:56:ef:d3:64:a2:cc:5d:ef:
         66:dc:c3:b1:e8:4d:44:8e:4b:09:2b:0c:0a:f9:02:0e:27:3a:
         07:42:c1:ee:87:74:ae:ec:02:8b:53:70:02:85:5f:d3:0a:2f:
         1e:2a:82:1a:49:21:23:b1:70:a6:e9:f7:61:63:7f:05:55:be:
         0c:9b:9b:8a:24:66:37:d4:d5:a4:35:02:45:68:1c:11:f9:40:
         d3:e7:c3:f9:f5:af:9d:c3:43:b5:12:31:c6:98:5f:76:a2:68:
         96:b0:4a:f2:b4:df:f5:2a:45:c9:4b:75:6d:8f:3f:0b:19:aa:
         2d:17:b4:a9:ee:f4:36:1e:c3:a4:6f:f9:18:ec:eb:c9:28:cf:
         87:3a:6b:92:a7:75:f4:e3:c4:ad:a8:de:eb:6f:90:88:60:e7:
         c3:33:52:0e:c6:b1:03:fb:40:63:e7:13:b3:fd:6f:64:22:38:
         be:c8:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:52 2026 by rpki-client