Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          IYwHlfFyElXk6g7gq03stsdSP1kvwzv0bQgZhCx7u5A=
Subject key identifier:   20:52:60:F3:59:2A:47:1F:48:36:BA:42:94:F4:BE:C9:F4:58:00:99
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       01A0016EEECEDAF1903073D92AA2CFBE1760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          1375
Signing time:             Fri 14 Aug 2026 18:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:42 +0000
Files and hashes:         1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
                          2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: gMTPlLhF7pEayBtgl1CxIswY9sYri4NX6d5CQvG0hLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:ee:ce:da:f1:90:30:73:d9:2a:a2:cf:be:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Aug 14 18:00:42 2026 GMT
            Not After : Aug 15 18:00:42 2026 GMT
        Subject: CN=205260f3592a471f4836ba4294f4bec9f4580099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:84:e3:73:e4:a5:ae:5d:0b:a4:3a:72:5c:
                    be:8e:cc:35:f8:9f:62:8f:0b:71:5d:0c:4f:20:9e:
                    f5:b9:7d:90:8e:46:49:e2:bd:71:77:f5:6f:e1:18:
                    34:84:46:95:bb:4c:a3:df:8c:8a:a1:e0:39:ee:23:
                    f1:ba:b9:28:ba:92:fb:c4:99:ea:28:88:a4:70:08:
                    d4:d3:47:39:44:cb:e5:e5:31:df:b5:7e:9c:e1:36:
                    64:4e:20:4f:fd:e2:00:45:b1:8c:70:c9:88:b6:52:
                    8d:74:f5:dc:86:88:6a:69:8f:81:34:64:cf:e0:59:
                    84:5d:63:71:2f:8e:4c:60:66:f0:b1:33:05:78:b3:
                    f0:fb:31:73:2b:2e:51:3f:7c:e7:46:99:1e:1c:e8:
                    8c:6e:2e:97:04:57:6a:7a:14:3d:88:b1:54:22:44:
                    25:a0:0f:0d:a0:e8:11:eb:a3:81:c8:d5:15:c5:61:
                    d9:09:47:21:98:e3:28:90:e5:73:56:08:22:bd:85:
                    d1:79:e4:ab:c3:99:6e:5e:58:32:87:0f:c5:c7:c5:
                    3f:c5:3b:80:41:62:90:92:db:91:b2:0c:16:e9:cb:
                    a5:04:88:71:37:03:20:d0:1d:7e:43:4d:5f:a7:9c:
                    90:ba:87:1b:84:58:11:60:d4:87:a3:b9:2d:7f:41:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:52:60:F3:59:2A:47:1F:48:36:BA:42:94:F4:BE:C9:F4:58:00:99
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:d2:51:a3:d4:b7:99:d9:2d:3e:a4:99:e8:f2:8d:92:98:
         9a:46:5c:51:74:55:d9:6c:4d:2a:7d:ed:68:62:4b:09:01:64:
         5b:47:e3:1f:19:05:60:32:fc:7b:7f:b0:6f:9f:85:f4:b2:94:
         39:fb:bb:15:0f:fa:60:39:6a:a5:59:17:0b:43:70:53:83:c5:
         7a:38:37:1f:a5:bd:dc:31:f4:aa:16:95:37:8f:91:04:52:74:
         44:05:48:63:98:0e:eb:18:c3:ac:fd:53:1d:1c:09:b5:6a:3f:
         73:32:b2:ff:b9:d7:06:15:cb:3b:b9:0c:1b:54:0e:65:83:aa:
         b8:32:b4:74:1a:ea:43:38:21:e3:eb:4e:49:68:0a:bb:29:9c:
         61:4f:15:15:ad:c1:f0:4a:45:90:58:48:5d:84:73:e3:e3:57:
         46:62:df:04:32:28:28:73:37:cd:4b:52:54:5f:c2:02:e0:9d:
         d9:9e:53:68:91:76:b2:c5:a5:06:4b:fa:52:0f:71:8e:dd:7f:
         5c:19:70:48:bd:73:bd:f2:87:46:2f:10:55:42:2f:55:a8:8b:
         39:90:24:4d:ec:1b:9e:73:8e:59:2e:72:bb:2d:4b:8f:6b:d2:
         1a:f5:f7:f0:68:95:64:bc:c5:75:50:d4:01:41:d1:0b:89:9c:
         9e:5b:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:16 2026 by rpki-client