Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File:                     4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier:          /QLWq7VT+ReAQFxE2FGn/E9+nfn1wrUEM/VMjICLHnE=
Subject key identifier:   DC:F5:21:59:BA:97:61:E5:07:1F:75:37:AC:E6:5E:14:46:65:56:11
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer:       /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial:       01A0005D3C38F7878332D57B7F9C5C991AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number:          1A06
Signing time:             Fri 14 Aug 2026 13:01:45 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:45 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:45 +0000
Files and hashes:         1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: H6+7iy+aabSSWyJzyCDIikpXi5qmKa1rTLQC2VHRmyY=)
                          2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:3c:38:f7:87:83:32:d5:7b:7f:9c:5c:99:1a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
        Validity
            Not Before: Aug 14 13:01:45 2026 GMT
            Not After : Aug 15 13:01:45 2026 GMT
        Subject: CN=dcf52159ba9761e5071f7537ace65e1446655611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:84:66:9d:30:19:e7:a2:99:c8:84:1b:b7:
                    73:b8:f1:17:ca:c1:90:98:67:80:f3:4c:87:05:4d:
                    b4:78:6d:76:28:d8:1d:53:07:48:a5:a9:33:17:9c:
                    75:e3:0d:d3:f7:13:53:5f:e6:58:7d:36:a9:58:7a:
                    b6:31:ce:68:34:69:a2:cc:02:45:28:20:0a:0f:36:
                    35:c1:7b:86:d4:82:51:9a:36:22:21:ab:15:43:12:
                    b6:68:b7:10:d8:f2:b7:b9:5f:d2:ec:16:25:ea:bb:
                    ae:6e:15:64:2d:6a:37:2a:87:e1:36:6c:a9:f4:31:
                    e4:c8:ce:02:24:72:9f:26:4a:f9:cf:f7:ed:06:cc:
                    fc:f0:c3:bc:e7:0a:e4:53:9b:7f:9a:6c:7d:df:07:
                    43:46:70:4a:07:61:81:4f:4b:d1:38:8c:67:2b:41:
                    3b:f7:a2:78:ca:d0:21:95:7c:a5:c9:83:6f:be:25:
                    79:2d:13:6b:3b:a3:45:df:dc:fc:51:75:b9:4f:7e:
                    18:12:da:30:25:24:11:92:61:a1:06:b6:11:6e:e9:
                    06:9a:ce:92:c5:b8:44:4b:49:2a:e0:2e:c6:a0:33:
                    79:d5:a8:ce:5f:a8:e2:94:c5:7f:1a:ef:1b:6c:b9:
                    6f:01:db:53:80:a6:6e:af:3b:7b:c0:ae:ee:5c:ad:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:21:59:BA:97:61:E5:07:1F:75:37:AC:E6:5E:14:46:65:56:11
            X509v3 Authority Key Identifier:
                keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:3a:bd:cf:3d:ec:86:5d:a5:1f:d2:05:55:ff:85:a0:8b:
         04:6d:ba:c1:df:72:8e:de:1e:a6:78:ed:7e:e1:3b:52:f3:44:
         01:17:ba:18:e8:78:bc:92:68:54:ed:b8:1b:bf:13:f2:6f:a3:
         7e:96:c9:84:0d:6b:86:f6:74:a1:44:36:95:0c:5a:82:ea:d2:
         73:83:2a:a5:ac:a2:be:c7:9d:fa:57:87:3f:b8:be:b1:58:7b:
         bf:9d:30:13:67:66:73:fc:bd:09:da:7c:6e:50:17:a3:12:49:
         0e:5e:7e:72:f8:71:41:04:35:3d:8b:78:7c:28:0a:a0:5c:10:
         bc:74:98:6a:23:e7:53:5b:ad:65:c5:32:16:47:ee:eb:b1:10:
         15:38:43:3e:0d:78:29:59:48:69:7e:dd:91:c9:8a:f2:8d:b7:
         f2:41:37:6f:45:1e:4b:f0:88:6d:de:6d:ee:54:80:3d:f1:f1:
         eb:bb:21:c6:9a:e6:2f:53:96:12:95:7c:65:d7:f6:84:ad:ab:
         6b:7b:03:8d:a3:cc:4c:b3:ad:4e:ad:0e:82:bf:2d:d9:31:7c:
         3f:56:ca:72:0b:09:fb:37:93:2f:e6:84:ec:76:e3:0a:ed:8c:
         fe:5a:ea:02:3d:81:89:1d:e0:f6:a2:a6:a5:80:2d:d4:d5:5b:
         e7:3b:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:27 2026 by rpki-client