Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          yCErLrP8wtTNiHweQ4X7EAiS78gToW6g2U1zGu3tmrs=
Subject key identifier:   9F:66:23:59:54:02:21:DD:87:2E:FB:4D:4E:29:CB:60:A8:68:8D:2C
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       01A0016F268A6030BAE0034D986E1B3190C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 18:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:56 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: a5TyOHXp0/hUSS2Z1UtbMgox0e1AxSE9wa0PsrimDZg=)
                          2: JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa (hash: Je/rPrN5iQLTZAw+1b3i8YRBUtHfjaLY04H9s+UkqOw=)
                          3: WNCvUST9GFQgH9lNnrBxz7wn1MA.roa (hash: Y8xEIX8tbfw6KstlTGIt4As/gEkptm/Cc262V8KE5HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:26:8a:60:30:ba:e0:03:4d:98:6e:1b:31:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Aug 14 18:00:56 2026 GMT
            Not After : Aug 15 18:00:56 2026 GMT
        Subject: CN=9f662359540221dd872efb4d4e29cb60a8688d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:a2:a4:72:9f:f6:68:c2:3f:14:12:fc:a0:
                    b1:30:db:c9:8d:92:99:31:64:83:79:9f:db:89:9a:
                    bd:f2:fd:c7:7b:6b:ba:19:b5:a0:7c:c5:8b:6e:83:
                    59:55:ee:7c:98:22:72:c7:c4:f8:17:e9:53:3d:60:
                    7a:5f:97:d1:22:00:a5:1f:cc:47:06:5b:37:da:34:
                    86:40:5c:cf:40:83:9a:98:cf:d5:19:6f:cb:f7:d0:
                    34:ec:49:08:53:69:3a:34:ea:41:49:b0:2b:6c:26:
                    1f:87:60:17:53:df:70:92:c1:30:73:50:87:35:d4:
                    34:63:b6:9b:c8:07:14:e9:c3:11:2e:71:52:81:9a:
                    05:ab:f0:6a:80:98:1c:c1:12:a7:46:81:05:22:94:
                    41:63:4c:c1:e9:91:70:bf:13:c0:07:a1:db:4f:64:
                    69:38:de:13:87:f7:e1:80:ea:85:9c:98:19:81:41:
                    ee:c2:f8:16:cc:96:9b:66:0d:14:f2:c7:b6:26:a1:
                    c4:0d:42:d5:38:4b:9a:f9:c8:38:dc:7d:dd:1c:e7:
                    e6:bc:ae:e2:b1:eb:1d:8d:d7:b0:8a:55:ba:8f:96:
                    2d:41:7e:85:a5:b9:d4:3f:b4:a6:a1:4f:e8:57:1e:
                    c3:e8:1d:1c:07:51:a8:cc:aa:cb:ff:37:49:76:63:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:23:59:54:02:21:DD:87:2E:FB:4D:4E:29:CB:60:A8:68:8D:2C
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:46:0c:c0:fe:b4:3f:e6:39:14:76:2b:51:1c:d9:9d:36:
         72:23:7b:07:2a:65:f5:09:e3:07:61:fa:54:b5:8c:f4:24:93:
         40:d0:c3:40:59:2a:9f:43:4c:46:61:d2:f2:f6:40:0a:bb:d3:
         7c:f9:6a:e3:ed:2d:94:c8:15:ab:14:d6:01:48:7d:ba:3a:4f:
         a8:eb:f6:d0:ec:76:25:42:64:2a:59:94:c7:5c:fc:13:8b:9e:
         fe:5d:2a:f1:ce:2e:65:21:3f:92:26:d1:e5:ff:1d:44:0f:a1:
         87:44:51:c4:4f:85:d9:46:c6:9f:90:05:36:24:66:be:b1:04:
         f6:d1:e5:86:50:2d:b6:a7:8e:1c:0a:6c:58:a9:43:41:36:c0:
         e1:2a:94:ee:5a:96:8d:20:b4:3d:91:95:7c:11:48:c1:90:ab:
         b6:a1:7d:63:50:61:f6:09:8f:6b:38:ed:d3:74:51:45:94:7f:
         4a:e4:f3:20:31:0a:01:d2:a3:f6:94:36:30:11:de:8a:06:1e:
         03:88:60:b9:2e:62:b5:33:76:98:23:b4:64:f0:fc:b8:78:29:
         49:14:12:b0:28:13:25:9e:c7:2d:d4:ff:42:fc:d5:4e:04:24:
         6a:81:e5:1b:18:94:cd:a4:bc:60:89:4b:8c:f1:88:46:ba:64:
         e6:b9:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:42 2026 by rpki-client