Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          CaTX16jXd9J3seDl7Dm9v+SxeHVBOopAJETLnMwP7D8=
Subject key identifier:   1B:66:CE:A4:CC:18:60:7C:D6:D4:F7:3D:67:6F:15:14:4E:53:80:58
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       019FFA90F9EF69677514F9EFBA4BFEB3816A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          06D1
Signing time:             Thu 13 Aug 2026 10:00:32 +0000
Manifest this update:     Thu 13 Aug 2026 10:00:32 +0000
Manifest next update:     Fri 14 Aug 2026 10:00:32 +0000
Files and hashes:         1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: rNkXbLHZgmSjMqFZEoMs52v5Yz+3zKN/1Qo3JwdVdRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:90:f9:ef:69:67:75:14:f9:ef:ba:4b:fe:b3:81:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: Aug 13 10:00:32 2026 GMT
            Not After : Aug 14 10:00:32 2026 GMT
        Subject: CN=1b66cea4cc18607cd6d4f73d676f15144e538058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:54:ec:bc:3a:e0:1b:a4:60:fe:7e:92:2d:
                    dc:14:e2:8b:cc:cf:b6:8e:d2:ae:47:27:50:8d:4e:
                    6c:80:81:f9:bf:c6:f3:fe:97:90:6a:b5:6b:6b:73:
                    77:5b:2a:62:8a:ef:1e:20:62:d8:db:8b:cc:c6:5d:
                    80:15:57:a4:96:27:11:16:88:95:0e:e3:7d:36:6f:
                    32:e3:ea:7e:cb:f4:26:60:33:ce:ab:41:41:58:65:
                    f5:6a:26:26:db:c6:f5:39:1e:51:03:f1:f2:f6:aa:
                    b3:4a:62:78:a2:d6:90:a5:af:b3:91:92:3f:4f:33:
                    e2:7a:ac:2c:11:78:75:6b:5d:d8:26:1f:b9:5d:a9:
                    8d:c6:c9:6a:6f:e8:e6:ad:a7:cb:f4:8a:f7:b3:14:
                    65:36:2d:20:31:1c:88:30:2d:5e:b6:e1:54:82:63:
                    3f:50:10:a6:fa:be:33:f6:0c:04:cd:9b:53:79:ed:
                    1b:59:38:f9:ce:4f:69:32:19:b4:87:41:dc:2e:cf:
                    b6:2e:52:a5:8b:60:45:76:65:20:ba:f7:0d:fe:f4:
                    b1:90:4d:49:bf:f6:40:74:99:06:ab:cd:98:a0:2a:
                    10:13:9e:1b:08:0f:f3:d0:19:d6:22:04:ed:38:37:
                    2a:f6:52:eb:c4:f6:3e:81:e4:ec:f1:e2:ec:07:9b:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:66:CE:A4:CC:18:60:7C:D6:D4:F7:3D:67:6F:15:14:4E:53:80:58
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:f3:9f:30:e5:34:5d:53:e3:b5:85:b5:62:45:32:df:cd:
         05:82:ed:bc:ec:93:68:93:51:dd:00:69:47:e7:c7:3b:8f:a3:
         69:7f:c7:02:57:4d:aa:a6:c7:d1:6e:d9:c9:22:ae:5b:74:b9:
         00:2a:71:72:25:c9:32:7f:00:d3:d4:c2:28:49:60:32:2e:bb:
         3e:a3:64:57:e7:40:7f:0a:94:2b:45:64:50:ab:8f:6d:8b:e4:
         d4:f8:fd:6c:b1:06:0e:e3:b3:18:27:ef:82:8e:82:01:af:4e:
         45:70:a8:d5:1e:9a:02:18:81:b7:6b:8d:b4:6a:92:06:32:9e:
         80:05:42:f9:a4:3b:0d:61:5a:91:1d:c2:40:6b:88:54:86:08:
         73:e2:8b:47:1b:c3:c0:96:63:12:34:0b:55:0e:61:6a:65:02:
         39:65:bf:70:9a:43:2f:f3:00:d4:c3:75:ee:1e:30:7f:ff:24:
         82:0e:aa:68:eb:a4:24:61:f7:80:1a:e0:d3:09:42:20:68:59:
         3c:84:49:73:40:07:e2:08:a3:75:98:f5:18:f4:a8:f9:22:38:
         d2:bd:e4:6b:7b:29:32:e3:2c:16:52:0d:c4:10:9c:56:ae:dc:
         7f:99:34:87:6c:53:bc:50:54:81:5e:f2:b4:07:cb:1f:0f:de:
         4c:19:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:13:58 2026 by rpki-client