Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File:                     i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier:          q6T2WMbBzRPXt6o75UigKhf0VDBed8B0LPBtX4A3D14=
Subject key identifier:   3A:2C:53:F3:5C:4E:01:3D:60:7B:CE:EA:10:5B:17:62:09:1C:B9:EA
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer:       /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial:       01A029FD1ED07BA42A4D20555B29305ED72C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number:          1A1F
Signing time:             Sat 22 Aug 2026 15:00:49 +0000
Manifest this update:     Sat 22 Aug 2026 15:00:49 +0000
Manifest next update:     Sun 23 Aug 2026 15:00:49 +0000
Files and hashes:         1: AtDFD7_qKk4jrpKjelR8svE01P0.roa (hash: gTykOYo+tU9/XQ+/e23jrH05kkPYVNgaKARt/D3c+C8=)
                          2: Ppo8zp5LmchB33jNrvk9bBT1gBY.roa (hash: p3Wx4W4uCna+Td0Px+Vvc7pZpjBuiRji7FFkTSU5prU=)
                          3: SGD5GcL8l9REwij1xB0V3ArZ6IM.roa (hash: CbbI/yFIt3p0EMou0tP1jzrb/qN0JlHcNbbxYjLJqoA=)
                          4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: ogZ/XKfwHE79dVciPU4EKvcKC0cyQEGB1EMvOERBYB0=)
                          5: kQp_ZLe15Zu0M6kNuE6RUIpLUlY.roa (hash: 7PWI3K79oOniAkWfGGFPuJUr+xMaJSAED92LF0a6Q2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:fd:1e:d0:7b:a4:2a:4d:20:55:5b:29:30:5e:d7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
        Validity
            Not Before: Aug 22 15:00:49 2026 GMT
            Not After : Aug 23 15:00:49 2026 GMT
        Subject: CN=3a2c53f35c4e013d607bceea105b1762091cb9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:8f:e6:7d:d7:57:e4:d7:26:7b:fe:f0:f2:
                    5c:2a:0e:e7:84:ef:07:50:9a:1b:87:b1:c6:50:69:
                    ef:60:03:df:0f:9d:aa:f0:e1:fc:e7:37:31:6f:fc:
                    93:02:7c:d8:8d:90:5c:91:c8:0e:fe:4a:30:a8:91:
                    47:a1:c4:83:a8:14:4e:c0:22:94:c8:b2:e3:4e:29:
                    55:db:7c:2a:03:b2:6b:6f:f9:30:c8:f6:cf:24:3c:
                    10:af:66:26:8d:02:c6:25:c3:ac:7a:2d:21:15:24:
                    40:f3:3b:6d:c8:22:6e:e7:8b:58:8c:f8:83:d4:64:
                    40:11:12:13:8c:b9:6e:5d:e3:a7:6c:1b:97:41:84:
                    40:e5:51:eb:f7:e0:be:5c:2d:4a:1e:dc:c1:95:a3:
                    a2:b9:d3:db:31:d8:bf:83:a6:d2:be:40:7e:0a:cf:
                    3e:bb:8f:11:80:c5:18:82:9d:f2:90:48:e0:38:aa:
                    c5:12:fd:26:00:89:ae:f4:7f:6e:5d:81:0e:f6:2f:
                    f8:13:0b:81:90:b9:7b:3c:8d:64:a0:1b:0d:f2:b5:
                    26:d7:4e:68:d6:ac:d2:67:29:b7:52:3b:61:71:35:
                    34:2c:38:fd:61:8e:54:c1:9e:9a:02:04:5f:57:08:
                    d4:bc:89:30:f7:28:9d:39:27:01:bd:07:ee:0d:46:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2C:53:F3:5C:4E:01:3D:60:7B:CE:EA:10:5B:17:62:09:1C:B9:EA
            X509v3 Authority Key Identifier:
                keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ca:cc:f5:f2:45:30:3c:b3:fa:96:cd:0e:37:55:98:4d:7c:
         42:47:56:61:f8:c0:7b:c0:03:1e:8d:de:ac:65:9c:56:87:d2:
         54:06:a7:2f:4f:ca:52:38:2d:56:42:1f:29:71:5f:22:0c:e6:
         0a:e4:ee:93:67:7a:33:90:5b:a0:9f:44:0b:63:d3:d0:4a:88:
         41:f1:77:f5:50:0d:9d:b6:00:6a:43:38:1a:e9:5c:ae:0d:b7:
         e0:51:07:6a:8c:ab:b5:54:3d:66:44:13:65:86:c2:a0:10:48:
         29:6c:47:9e:87:23:4a:9e:ce:84:0c:8c:34:dc:77:d5:36:44:
         b7:b5:16:24:73:fd:c9:9b:e8:b2:58:8a:46:ea:dc:c2:4e:fe:
         01:50:35:88:16:52:62:e0:c8:12:56:e6:7d:d7:6f:f3:c4:4e:
         6d:c1:fc:78:78:75:bc:3a:5c:46:a9:5c:51:8d:c6:9a:fe:04:
         9d:31:cc:07:a1:41:b4:e4:d6:5c:cc:4f:d3:6c:dc:1b:d1:de:
         9b:8b:50:0b:c6:ae:c5:fd:24:49:9c:a7:ac:3d:52:af:7b:d8:
         7b:86:de:63:fd:e1:79:8d:5b:11:49:d9:e3:2c:63:0f:9b:c6:
         88:0f:b9:55:01:16:86:a3:4c:54:dd:dd:3b:f1:a2:8d:f0:56:
         2a:45:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:12:14 2026 by rpki-client