Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File:                     ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier:          QFzZzpHTl9d2zJi0Dgk5pDLXqJrD28cCg4ZUAp1SPq0=
Subject key identifier:   6A:58:DD:16:F2:79:B2:F8:BF:00:66:FE:6A:96:80:E5:E1:C7:C9:D7
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer:       /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial:       01A0005C6F205F8ED9E08EDBD145D46C3994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number:          0F31
Signing time:             Fri 14 Aug 2026 13:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:52 +0000
Files and hashes:         1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: pEjmSjgz7An5JZnUxrbUvPNeY9U97lttvSAkIwSYZRo=)
                          2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
                          3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:6f:20:5f:8e:d9:e0:8e:db:d1:45:d4:6c:39:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
        Validity
            Not Before: Aug 14 13:00:52 2026 GMT
            Not After : Aug 15 13:00:52 2026 GMT
        Subject: CN=6a58dd16f279b2f8bf0066fe6a9680e5e1c7c9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:00:8f:71:dc:a5:8e:89:7d:e9:98:6c:a0:
                    17:1a:ba:82:71:1d:87:45:ea:63:59:b0:09:6a:63:
                    85:1f:31:31:a2:0b:b9:97:7a:11:11:86:ec:b3:32:
                    de:a8:b7:71:2e:2c:16:ab:63:1e:97:75:60:7f:45:
                    28:bd:f7:af:f5:76:78:33:2c:2c:9d:15:52:34:d4:
                    e5:94:17:7f:ed:33:ca:d3:a5:60:f9:d5:ea:dc:78:
                    f4:5f:ec:d9:fb:35:5b:c9:66:73:d9:4f:f7:0d:33:
                    89:6f:2d:7c:e4:9f:3a:a1:8b:1c:6b:2a:3c:96:93:
                    60:cc:b5:cd:36:da:f1:f2:5f:f5:09:33:2c:4b:ed:
                    3a:ce:f3:6e:59:92:50:45:2b:14:6f:a1:0e:08:aa:
                    cf:d0:91:12:68:9c:68:05:cf:0e:f8:16:ae:fc:da:
                    e0:d3:eb:61:0d:34:9e:cc:e2:f0:34:8f:40:25:b0:
                    7d:e9:93:e2:44:42:de:d2:cf:f9:e3:ee:99:18:4f:
                    9a:af:d7:64:0a:dd:df:b9:12:c4:4b:20:8c:2a:c1:
                    cf:db:f7:40:4f:26:49:12:68:f8:ad:0d:6f:b0:45:
                    01:3c:ed:2a:d8:db:41:6d:8e:0f:d7:52:05:4d:6e:
                    c3:b0:25:c4:ea:af:fe:60:41:8d:5b:82:0c:cf:d2:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:DD:16:F2:79:B2:F8:BF:00:66:FE:6A:96:80:E5:E1:C7:C9:D7
            X509v3 Authority Key Identifier:
                keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:45:3d:8f:08:11:95:01:5d:66:76:a9:c4:46:fa:b9:c2:
         f5:37:b8:1e:fd:01:81:63:13:f9:91:78:16:5d:9f:44:a5:d6:
         5e:ef:86:f2:52:09:ba:89:fd:c2:68:ac:dd:e4:f5:15:6d:15:
         d4:55:87:1b:14:0f:25:45:8b:1c:17:b6:51:da:28:73:31:e4:
         10:b1:d7:c0:e3:6f:e6:39:9d:67:3b:43:11:a1:58:cc:53:6b:
         e1:da:ff:a0:98:8d:af:07:7b:6a:4e:cf:50:bc:e0:dc:53:10:
         3e:50:66:f7:1e:ec:e5:e4:8a:4a:93:89:2e:e9:a6:1f:02:be:
         b5:5c:58:b8:68:8d:7e:2a:0d:b5:87:71:96:d0:c2:c9:28:0f:
         44:13:da:b5:b5:f4:82:ff:41:26:18:1e:38:87:da:e4:89:1b:
         88:30:d1:66:8f:81:af:9b:2b:99:67:95:15:93:10:24:36:9e:
         47:e2:94:dc:bd:80:94:6d:1c:01:36:19:7e:3b:5d:33:53:45:
         57:18:ef:57:0b:26:a3:71:4a:28:e2:68:c9:01:9b:59:42:af:
         10:78:a0:b7:31:08:6e:e0:a9:a8:55:f6:5b:4a:fb:4c:8c:a4:
         99:b0:4c:e5:5d:e7:da:46:97:39:6a:0c:f2:e8:ab:50:c9:95:
         bc:09:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:36 2026 by rpki-client