Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
File:                     8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json)
Hash identifier:          Jcp8MygvwVzxfmXCqXn3zR0YtfbMwabiw096OpsBm3E=
Subject key identifier:   9D:6E:A4:1A:F9:F5:10:B7:0B:4E:F4:A2:4D:8D:80:E6:A9:BB:46:B4
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Certificate issuer:       /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial:       01A06F15D8F00AB689C48F3373A4B4CC472F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
Manifest number:          020C
Signing time:             Sat 05 Sep 2026 01:01:37 +0000
Manifest this update:     Sat 05 Sep 2026 01:01:37 +0000
Manifest next update:     Sun 06 Sep 2026 01:01:37 +0000
Files and hashes:         1: 8uCWMBaWAfKrOPaxucU0CJPP8RM.roa (hash: 8TbK/6lzE8XJo6X13VzuN3zdyGNywLk9SzbZ334PGyI=)
                          2: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: HsRWtSitRVs6wMphk/lGkfo+E898htXZ8oBRvj/cWWU=)
                          3: K8OjdeZE4Br2GTESQBNt1eSDPwY.roa (hash: fIWa2xGxlcYKnph2SKf7XRil77W6h0VckxbilfoHwsA=)
                          4: dvXRkjs-45zB5XW29YCyKf1ztCg.roa (hash: aEvTO527goc2fGvDjuX652xQ1MJZNYgikCVMkI8HG+U=)
                          5: xF-cxA4SeqtGQA9ZB7-AVyYSB2M.roa (hash: RbNnO+KUGiOJuykRwnQ3Ov2/3BQdLz3gW3J/aCk0jpM=)
                          6: y31kGASp2zNH3cDWQizl3r6O43c.roa (hash: 7ulkExljIxl1cpFUvjA7+r26bnE26w6f10AU3mMSeCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:15:d8:f0:0a:b6:89:c4:8f:33:73:a4:b4:cc:47:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
        Validity
            Not Before: Sep  5 01:01:37 2026 GMT
            Not After : Sep  6 01:01:37 2026 GMT
        Subject: CN=9d6ea41af9f510b70b4ef4a24d8d80e6a9bb46b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:2d:f1:f7:b2:62:66:fe:f7:e3:09:b4:a2:
                    a3:18:a2:d7:d3:51:16:ba:6f:65:95:80:23:12:01:
                    0a:05:b4:16:e2:aa:90:f5:98:47:82:28:3d:45:c5:
                    00:19:8f:18:8f:9a:83:05:7e:1a:a7:d3:40:93:92:
                    8b:cd:db:71:c5:5a:ab:22:4c:94:fd:53:2c:3c:b7:
                    e4:eb:52:cd:a5:39:54:d5:20:41:8b:f1:94:74:c5:
                    ca:2a:73:3e:5d:43:89:cd:ea:49:7e:2c:f7:56:65:
                    4b:a0:9c:4a:80:b9:b0:c6:d0:a3:64:7f:7b:51:f1:
                    02:2d:c8:52:d6:2a:78:06:89:4b:cb:1a:f7:fe:84:
                    81:d6:6e:e4:5e:65:8a:af:3b:5f:dc:a0:08:2a:3e:
                    02:ed:c1:96:fd:d9:c4:d0:88:a5:fa:b9:33:7d:f1:
                    45:9b:c5:cc:d6:5c:a7:0a:9c:96:52:29:4e:95:0a:
                    0f:2c:bd:e3:82:c6:38:f4:ef:44:31:36:3d:8c:39:
                    25:d8:11:3c:25:36:13:bf:19:1b:d6:36:de:7b:df:
                    37:fb:9e:cf:b7:ce:1e:9b:0e:b0:ea:8a:8e:c0:58:
                    29:8e:d0:f4:63:ae:a8:ce:ca:a4:96:17:7c:8d:61:
                    e5:82:92:3b:1d:ca:21:80:8d:5f:4a:a3:4a:63:89:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6E:A4:1A:F9:F5:10:B7:0B:4E:F4:A2:4D:8D:80:E6:A9:BB:46:B4
            X509v3 Authority Key Identifier:
                keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:c3:03:0f:db:b9:dd:d9:55:49:36:d5:45:67:56:60:71:
         95:5a:96:d5:73:38:5d:b0:ce:56:b6:d9:b9:07:74:ad:fd:c2:
         58:74:76:d9:42:f3:b6:19:93:75:13:10:0e:8d:72:4e:7f:0b:
         2b:d1:ac:ce:28:f8:5b:1b:38:e2:7d:d8:f3:d3:94:48:4e:ca:
         78:89:26:da:03:f4:c2:5e:51:d9:01:42:50:78:4d:83:09:d3:
         5f:18:10:90:1e:2d:99:95:e6:d3:2a:4e:ea:7e:c9:fc:58:dc:
         aa:cf:88:11:44:35:fd:57:e7:9a:ea:87:4b:5e:fb:58:1e:0a:
         e2:7f:c4:7b:7e:89:77:83:c3:62:8f:3f:b9:1c:a7:ac:1c:7e:
         9f:e5:3e:59:d0:37:02:78:88:86:84:68:53:c2:74:93:d4:1b:
         ae:b7:8b:78:3e:6f:00:d1:3b:bd:7e:73:99:02:35:12:77:cf:
         fe:35:3a:4d:82:36:dd:1c:27:cb:17:53:e5:39:ab:6a:f3:d8:
         0d:4f:49:64:fd:f1:52:84:7f:1a:9b:54:fe:ef:9d:7c:39:0e:
         32:f4:5f:85:b9:d8:97:ab:4e:5b:ee:0b:6a:51:4d:1b:53:a2:
         34:24:5a:78:01:08:ae:32:9c:9c:30:b7:17:0f:72:aa:40:07:
         22:bf:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:27 2026 by rpki-client