Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          Iv001HFYw8kguqiH4mbZQyTW4kRzYk+VtJMP0rP5Hxg=
Subject key identifier:   87:AB:41:4C:46:17:B5:85:00:48:D5:B4:E1:D9:EE:95:44:D5:F3:54
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       01A0299037AB053CDF4A4633B9537D19CC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          1548
Signing time:             Sat 22 Aug 2026 13:01:52 +0000
Manifest this update:     Sat 22 Aug 2026 13:01:52 +0000
Manifest next update:     Sun 23 Aug 2026 13:01:52 +0000
Files and hashes:         1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=)
                          2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=)
                          3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=)
                          4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=)
                          5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: ScBaRUyC8gZAFCHkF7H2DCyBq6s0HDuFXOOofh3xuZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 13:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:90:37:ab:05:3c:df:4a:46:33:b9:53:7d:19:cc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Aug 22 13:01:52 2026 GMT
            Not After : Aug 23 13:01:52 2026 GMT
        Subject: CN=87ab414c4617b5850048d5b4e1d9ee9544d5f354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:81:a5:0b:78:22:c9:6e:aa:e6:85:d4:9c:
                    e2:bc:f8:fe:65:7d:e1:9b:fe:25:dd:de:12:99:87:
                    70:a4:8a:cf:c8:80:76:92:35:c8:5d:d0:7c:54:f5:
                    b4:ee:ca:d4:7a:b6:99:c1:25:38:a1:83:12:04:11:
                    32:22:e0:b2:97:15:77:3b:4b:56:8d:64:1b:d2:db:
                    b0:15:1b:b4:95:aa:72:a1:a8:75:e9:32:64:b5:0c:
                    a3:6c:42:a7:35:05:c9:50:36:31:45:ef:5a:c7:75:
                    71:d7:0d:aa:f7:32:7c:3c:4e:58:d5:f0:67:ea:94:
                    50:98:b0:db:59:23:1b:82:e3:43:8d:09:94:b1:45:
                    3f:26:6c:98:2c:88:7f:74:67:b3:24:6d:e1:79:97:
                    54:c9:ab:6c:f1:2e:82:87:f9:ae:41:aa:42:b3:89:
                    2c:ae:f5:76:8f:75:f1:11:64:4b:71:de:a1:40:c6:
                    7f:6c:07:f3:53:85:c6:a0:30:42:ef:9e:ee:75:60:
                    03:c8:e4:65:8b:b6:1f:8d:3f:ce:59:f4:a7:67:ac:
                    40:46:f5:bb:64:ea:41:03:8c:35:15:fa:de:0d:47:
                    2c:01:d1:a6:0d:5c:d1:fd:42:64:dd:2b:53:3a:be:
                    db:ec:33:b1:db:e9:0b:a2:cb:d5:08:0d:14:ca:55:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:41:4C:46:17:B5:85:00:48:D5:B4:E1:D9:EE:95:44:D5:F3:54
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:a8:56:bb:b2:83:0d:2e:5a:38:03:c7:a2:57:86:17:77:
         b8:79:cb:90:8d:98:99:e9:b5:b7:83:88:0e:16:2b:aa:7e:2b:
         37:00:84:83:2b:81:1e:62:5d:dc:04:09:61:89:0e:88:e1:ee:
         d6:98:2e:72:8c:9e:10:0e:d3:d8:5b:0c:b5:46:88:e8:3d:e5:
         60:25:84:6e:53:8b:17:ed:56:39:9e:7e:3a:3d:58:18:e8:20:
         c6:ab:8f:97:5c:83:33:ee:a8:f7:e7:ab:63:1a:87:47:2a:b2:
         a1:37:cc:94:6d:d5:9a:56:ad:3a:26:9e:2a:2f:ad:3d:95:fc:
         6c:18:e8:fd:46:7f:19:32:98:7a:4a:bc:12:be:d6:3f:e3:40:
         f9:14:36:eb:7a:d3:96:4e:88:22:18:c7:b9:f9:f4:a8:11:fb:
         57:a5:b1:df:3d:e9:c9:ca:30:a5:03:9a:92:9f:60:eb:5a:f0:
         55:19:17:4e:c9:fb:3c:06:56:72:bf:bc:a3:7d:db:bc:3b:0b:
         34:5e:c3:eb:6e:4a:e1:3f:88:cf:26:1a:6c:d6:39:28:52:0d:
         53:9c:e0:59:cc:02:9c:79:dd:f3:da:fc:67:d0:f9:06:a3:03:
         2f:55:b1:84:e9:8d:fc:69:aa:41:41:83:65:fd:54:e1:77:fb:
         46:1d:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:09:02 2026 by rpki-client