Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File:                     x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier:          iyT41J5Wveupr7cf8xvgiVQbcar88h4U1XV3O3SVutQ=
Subject key identifier:   15:3D:DB:8F:CF:70:39:99:1D:D1:A8:E4:C2:87:14:10:92:9F:0E:6C
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       01A0273376228142C909476049BCF8548A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number:          1A1A
Signing time:             Sat 22 Aug 2026 02:01:19 +0000
Manifest this update:     Sat 22 Aug 2026 02:01:19 +0000
Manifest next update:     Sun 23 Aug 2026 02:01:19 +0000
Files and hashes:         1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
                          2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
                          3: wzFUmExrbfhJGO9J_KmqSJOAv_s.roa (hash: EUfocXXtzQ4PPAMu6osjSAolxe2DCe3wU+6Eub2eN14=)
                          4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: UHN7gEMKTdbP5KUT0+AcDiYMANgKX96naARvLvuv56g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:33:76:22:81:42:c9:09:47:60:49:bc:f8:54:8a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: Aug 22 02:01:19 2026 GMT
            Not After : Aug 23 02:01:19 2026 GMT
        Subject: CN=153ddb8fcf7039991dd1a8e4c2871410929f0e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:a3:9c:c9:85:e9:d2:f0:6e:9c:82:d3:28:
                    aa:f7:b9:6d:0c:d9:05:bd:06:42:01:a0:06:9b:d8:
                    81:0f:74:4d:62:f1:22:5b:46:a1:fd:d3:06:e6:2c:
                    14:e9:59:03:59:86:65:b3:56:e8:1e:58:ac:de:f3:
                    f4:c8:e4:0f:1e:6c:44:f2:b3:93:f5:e6:d1:8a:23:
                    eb:9c:58:e9:59:4f:03:c8:52:32:d5:94:a1:94:c3:
                    2e:49:c7:ee:37:1f:e5:a8:3f:78:35:ed:c4:3a:73:
                    c6:6e:1a:db:99:ab:95:29:0a:2d:20:7d:bc:3a:7b:
                    6d:99:b7:82:d2:d0:c3:06:be:ab:7d:73:5c:83:b5:
                    27:97:27:25:04:ec:f7:36:2a:c4:9d:17:f3:c9:8b:
                    79:ff:41:f8:44:26:44:57:3f:f6:4f:78:e3:ba:c5:
                    2d:8d:8d:e2:26:97:79:a8:81:b6:6a:02:7d:6d:b6:
                    a9:2c:62:2b:22:11:be:8e:62:b4:5c:de:47:c7:9f:
                    59:4f:46:53:fb:53:24:83:9c:58:81:44:7c:86:ef:
                    b6:cd:85:bf:59:eb:b2:c7:f7:1c:50:61:65:4e:5d:
                    90:16:f3:61:95:5d:69:32:e9:64:df:c0:14:d3:a2:
                    9a:7c:5e:22:8e:bc:44:9f:5a:19:19:a5:d5:58:a2:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:DB:8F:CF:70:39:99:1D:D1:A8:E4:C2:87:14:10:92:9F:0E:6C
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:27:92:f0:2d:6f:11:fa:b6:b8:0b:f6:54:22:ba:36:83:6b:
         be:0e:15:38:f5:3b:28:0c:7f:05:e4:c2:39:a3:96:ff:8f:9c:
         51:94:7f:61:fe:c4:2d:d5:f7:1d:1b:4a:37:30:69:80:a4:a4:
         03:2a:ea:7e:e7:0e:bf:43:95:9e:5c:25:7f:a6:e6:c4:01:da:
         e5:90:4e:0e:bc:e5:98:77:e3:fe:1e:ee:25:d9:08:36:ed:5f:
         c6:8e:f2:40:0b:2d:7c:1c:87:67:3f:ef:52:3a:d5:24:d7:5c:
         cd:94:63:43:22:d1:fb:fd:81:b7:73:99:d2:d0:23:cb:ed:f0:
         b8:fb:e9:a1:8f:6f:02:84:79:b2:b3:75:c9:14:03:37:fb:10:
         2b:5c:6c:f9:3f:ab:d2:5e:77:7a:a2:0c:85:3a:83:59:7c:cc:
         8a:97:74:8b:8e:47:b6:ed:1e:4f:54:72:cc:e2:09:bf:bc:31:
         18:bf:d4:04:78:54:08:e3:f2:c9:b6:9f:a1:a0:c6:ab:1b:0b:
         bf:5f:7a:97:ae:51:ec:5a:bc:c6:2e:d6:b6:31:d8:36:4c:fa:
         12:24:a4:d0:e8:22:21:10:cc:fb:d1:88:fc:f1:20:12:f6:a9:
         df:7d:4d:ff:18:69:47:df:91:79:89:b1:14:3d:6a:1d:cf:76:
         0a:c6:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:02 2026 by rpki-client