Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          L87heQ/c2+q+g0geDuEdGZR1Lpcpd/36Q6ZVZgKEmf8=
Subject key identifier:   00:F9:93:BE:C3:2A:B2:52:60:80:D1:BC:2A:31:D1:4D:AD:D8:B4:B3
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       01A002B9424E4DDB8AC6CEB791E5C28A797D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          163A
Signing time:             Sat 15 Aug 2026 00:01:30 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:30 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:30 +0000
Files and hashes:         1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
                          2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: 4WxhBYbQGjEclPCKNlp4SSVEOuLrpz6GgaDoUepzW/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:42:4e:4d:db:8a:c6:ce:b7:91:e5:c2:8a:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: Aug 15 00:01:30 2026 GMT
            Not After : Aug 16 00:01:30 2026 GMT
        Subject: CN=00f993bec32ab2526080d1bc2a31d14dadd8b4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:33:a0:1a:90:ac:0e:8a:e9:b4:1d:1e:89:
                    64:f1:0b:8d:0c:93:eb:ab:21:eb:8a:ce:f3:35:49:
                    a2:2b:5a:2c:7e:00:01:83:af:14:26:dc:d7:c3:ee:
                    49:e9:a4:52:b2:9e:29:8b:23:df:76:54:84:c9:cf:
                    44:51:84:fa:18:48:e1:8e:3f:7f:3d:35:04:6c:22:
                    56:5d:6d:71:e9:2d:e5:eb:b5:d2:75:10:82:e2:cb:
                    b8:c4:ff:5a:0e:73:0f:06:c9:be:a1:30:ab:5c:f7:
                    ed:86:e1:da:f9:a4:10:38:b7:76:a0:15:2b:ea:9d:
                    72:d5:eb:8a:c6:8f:ec:22:c4:88:67:96:af:2a:7f:
                    c5:36:a4:9e:ef:c4:62:00:ad:a6:5c:99:3d:23:64:
                    76:f6:0a:24:91:1d:c5:34:e9:d5:6c:34:88:6c:1f:
                    ce:53:15:a5:e8:76:27:61:5b:e5:9b:cf:a7:cb:ff:
                    9e:01:1f:a7:af:85:6a:96:81:8a:d3:a4:cc:81:b0:
                    a7:59:e4:ad:cc:2c:72:4e:33:6c:00:5c:dc:9c:3b:
                    ea:e0:5f:c9:c5:2e:7b:89:95:f4:cd:b5:d9:63:dd:
                    c9:79:4c:21:cb:e4:35:c2:4d:cb:9d:53:f1:50:61:
                    0e:b4:24:96:22:4e:07:9d:2a:90:b1:4f:24:fa:4c:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F9:93:BE:C3:2A:B2:52:60:80:D1:BC:2A:31:D1:4D:AD:D8:B4:B3
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:7c:19:97:91:e8:50:19:b7:96:8a:f5:7f:8e:8c:c3:3d:
         e0:e7:d1:c2:af:e3:a5:a8:20:56:f6:c8:2f:40:22:6c:08:5a:
         21:7c:f3:6b:97:37:09:b1:f0:fc:09:87:6c:bf:5b:bd:40:17:
         8c:94:e5:62:b4:73:a8:03:d8:a2:d7:e8:c4:60:38:68:08:7f:
         2e:35:78:9c:01:a1:a4:8d:f5:9e:b0:47:a1:f5:8c:ef:1f:14:
         bf:26:c1:83:7d:85:6d:df:95:f5:ca:d6:7b:9c:d6:cc:90:0a:
         38:a2:f7:30:28:cf:ab:eb:a4:c9:5e:9f:39:bc:70:30:f3:98:
         89:0a:f3:74:f0:7b:ec:a7:d4:16:1a:21:e4:81:c9:c0:c3:82:
         1a:e7:e0:f6:c5:cf:7f:23:23:87:72:ae:66:23:a4:f8:bd:9b:
         c2:96:00:d4:4a:f1:f6:9f:00:94:10:f1:e9:b3:d1:6d:56:f3:
         1a:c0:28:20:f9:b6:96:05:f8:72:4e:19:54:0a:8a:28:40:98:
         91:80:1e:97:82:28:c5:81:8e:5c:c3:56:cf:3b:f2:4e:34:17:
         88:cf:1b:2d:7f:0c:4a:60:97:28:53:cb:a2:0c:db:2e:a9:71:
         48:de:bc:8d:b4:b1:51:b9:3f:e5:50:a6:55:c7:e2:8f:ee:9b:
         5c:e1:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:13 2026 by rpki-client