Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File:                     XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier:          VcLhJ6WbDcJSWXYxDNU0lPxxiJWUCl+xk7H/9DhBF9g=
Subject key identifier:   51:EB:FD:C0:91:58:39:F9:14:55:29:BA:07:D8:30:D1:7B:9A:10:3C
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer:       /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial:       01A0280EC82C8C1B64A0C75D3115EC54A2D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number:          0207
Signing time:             Sat 22 Aug 2026 06:00:52 +0000
Manifest this update:     Sat 22 Aug 2026 06:00:52 +0000
Manifest next update:     Sun 23 Aug 2026 06:00:52 +0000
Files and hashes:         1: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: KeBmFlRYGdY+wTjnp53DEjifFm4+hPHuQriHARhsMKo=)
                          2: hFrzrATwthoWhcz0MUU5me2hxsI.asa (hash: qasjw1PBGin1L+tvp/txSHK72tERURo1h0R6cieBtNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:28:0e:c8:2c:8c:1b:64:a0:c7:5d:31:15:ec:54:a2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
        Validity
            Not Before: Aug 22 06:00:52 2026 GMT
            Not After : Aug 23 06:00:52 2026 GMT
        Subject: CN=51ebfdc0915839f9145529ba07d830d17b9a103c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6e:00:73:75:05:b0:29:04:a8:0e:bd:ad:97:
                    d8:e5:01:6b:e2:a0:12:95:66:3a:75:70:0f:d8:4e:
                    b7:88:e0:fc:46:30:25:4a:cc:48:47:47:76:f3:d2:
                    6d:8e:e6:1b:e2:3d:f8:9d:75:d3:2d:77:d0:4e:e0:
                    4a:0b:3e:af:98:d0:85:33:ed:b3:d5:c0:f6:f4:b1:
                    be:b4:ec:b6:c1:97:3b:ab:b1:73:bf:7a:1b:d8:f2:
                    21:ed:a3:24:8c:bc:a7:95:31:77:ee:0c:7c:d0:ac:
                    d0:9c:92:22:d5:e3:3c:cc:ee:9e:49:72:df:21:16:
                    03:1e:da:37:63:a1:8a:85:4e:da:84:45:12:78:c6:
                    cd:cd:8d:b2:b7:cb:53:34:9a:a2:61:9d:a2:62:ce:
                    4d:fc:76:47:0d:3c:2f:fe:0f:d2:cb:f8:b0:80:d5:
                    37:75:c1:23:7c:9c:49:a1:37:c7:98:50:b7:2c:88:
                    83:b0:2a:fc:78:84:f2:b4:e9:4d:01:ec:de:15:8a:
                    b4:e0:e9:cb:8e:72:c6:32:62:bc:5f:92:58:ac:9f:
                    9d:f9:30:11:cd:4a:5e:ff:9b:cd:49:55:07:e0:a8:
                    92:e9:f5:5c:ef:b8:5e:c6:d6:03:31:3d:9b:d4:38:
                    f5:60:15:b9:fe:f0:bb:6f:99:b4:cd:e2:4d:e3:13:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EB:FD:C0:91:58:39:F9:14:55:29:BA:07:D8:30:D1:7B:9A:10:3C
            X509v3 Authority Key Identifier:
                keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:d3:69:19:57:b2:fb:cd:93:67:a8:b4:90:3c:fa:3d:e5:
         90:59:fd:a2:ae:ca:35:1b:84:84:f5:a7:97:03:15:b6:61:6f:
         ee:dc:6b:25:b4:ca:f6:72:47:35:3d:b8:4a:01:02:e2:86:9c:
         ab:12:72:00:8f:1d:a2:5d:23:86:ed:22:fa:1a:d3:fd:e5:68:
         c6:1a:95:b5:e1:7d:ad:fb:09:6e:84:54:87:f7:16:37:08:37:
         7c:19:db:84:b1:a6:52:08:ff:55:89:06:0b:60:69:93:85:ab:
         31:67:42:ee:86:08:20:9a:86:5b:22:3c:09:6b:b8:b5:3a:31:
         14:1a:92:00:f1:9f:52:6e:2d:6d:47:68:ed:02:7b:1f:71:b1:
         85:9a:8a:2a:e5:cd:f7:b0:eb:8e:1a:4e:5d:c7:6d:fa:a5:86:
         1f:ab:df:6b:aa:2c:bf:4a:4f:6c:91:63:d0:ef:c2:3d:a0:37:
         e4:69:30:c2:36:1f:98:51:e0:e2:d0:d0:11:f8:47:e6:20:f9:
         d1:4d:23:5b:66:2e:ba:16:00:55:bf:da:fc:ae:d4:88:2b:34:
         4e:08:d6:0b:10:8f:6f:cd:26:30:68:ca:ca:9b:46:3c:3c:66:
         b8:f3:1d:7b:81:1f:4d:c0:18:ca:9b:4d:c9:71:86:77:67:0f:
         ba:cb:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:12:13 2026 by rpki-client