Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File:                     1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier:          sXLIAtYB5vVqWrSUNDW4QWhNltpHspd8vxbb891Yn9Y=
Subject key identifier:   E3:D4:D5:5B:DD:69:64:75:9B:2B:1D:60:7B:40:FC:F2:70:85:E7:B4
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer:       /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial:       01A0009386460205027D886B3BD967C67CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 14:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:03 +0000
Files and hashes:         1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: mM/Z9wOR5pwIa7ds1uyy6jQ8ek0w/3o3KqnXT6Cg3BA=)
                          2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:86:46:02:05:02:7d:88:6b:3b:d9:67:c6:7c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
        Validity
            Not Before: Aug 14 14:01:03 2026 GMT
            Not After : Aug 15 14:01:03 2026 GMT
        Subject: CN=e3d4d55bdd6964759b2b1d607b40fcf27085e7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:8c:72:d9:50:f6:a9:65:2f:fc:c9:36:6d:
                    13:7c:46:98:dc:66:85:da:54:6b:80:47:7a:57:11:
                    45:3b:39:c3:76:06:fc:93:a7:9c:6f:fa:28:69:e5:
                    47:4a:f7:98:b4:ed:6b:b3:02:88:2f:a6:fd:d7:59:
                    b0:95:1a:d6:61:c9:e0:a1:95:aa:10:94:45:db:be:
                    49:4c:da:30:46:32:52:86:df:83:ce:af:7a:09:dd:
                    ce:a6:9e:db:c2:63:ef:92:e0:53:26:96:6d:b8:50:
                    b6:48:d5:0f:bb:41:1a:e4:31:32:d8:e4:a6:fb:d1:
                    7c:30:36:b8:ee:d9:a2:3c:96:61:ce:6b:5d:11:b3:
                    12:c2:a0:41:c7:4e:94:d6:d8:30:9f:ec:9b:d3:09:
                    70:9d:ce:b1:6a:bb:2f:69:10:2a:db:c7:6f:8e:4e:
                    79:20:e3:dc:f6:53:66:5c:6f:f3:5c:be:4b:78:78:
                    3c:ad:6f:5b:5a:89:1c:40:94:f8:9b:d2:31:aa:9a:
                    23:62:bc:fc:5f:31:f4:43:7a:b7:a4:29:22:7b:14:
                    e6:65:87:dc:e9:d8:fd:96:aa:7c:ca:93:83:99:72:
                    77:c8:0d:82:ec:b6:34:51:38:84:fb:33:ba:16:aa:
                    e7:b8:7d:d7:8c:94:b2:3f:22:7c:9d:c4:b5:c9:6b:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D4:D5:5B:DD:69:64:75:9B:2B:1D:60:7B:40:FC:F2:70:85:E7:B4
            X509v3 Authority Key Identifier:
                keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:6c:91:0c:d3:0a:d7:41:81:ff:0c:0f:89:62:69:48:fa:9c:
         b2:b2:98:70:bc:dc:46:09:a5:7f:58:89:0d:0d:ff:ac:28:b0:
         90:5d:d6:c1:11:0e:54:87:fc:be:5a:b3:2f:41:ac:59:f2:31:
         e9:64:81:ba:47:ca:eb:de:6a:0a:e3:d9:bc:f9:6c:03:94:13:
         44:d3:3b:a6:48:96:e5:80:38:0c:59:31:69:19:c7:9f:36:1f:
         40:96:c6:04:6e:dc:a5:0a:c1:92:1c:8d:44:fc:ab:c4:04:46:
         6c:8d:34:13:f2:ca:e6:c2:6c:88:39:33:c3:82:bf:8b:a6:9f:
         b0:5b:3f:66:1e:0e:31:18:ae:a4:3a:3d:6e:d1:61:43:2a:31:
         37:4f:44:86:19:fd:30:1f:31:8c:82:61:d5:d3:b8:4f:9e:41:
         e3:28:be:8a:37:ab:91:ec:f2:49:91:eb:f4:99:93:16:9f:48:
         9f:b1:03:a5:a5:fb:c3:b9:e3:3a:db:af:81:68:0a:84:99:8c:
         28:1e:0b:dc:6c:be:a0:e5:81:9a:d6:33:5c:db:a2:dc:77:d5:
         93:bb:56:58:da:1f:c0:78:25:06:93:7e:c6:a6:a8:56:1b:28:
         15:05:c8:7b:65:e8:6a:9b:ab:08:5f:6e:6c:2e:6d:67:b4:8a:
         eb:c1:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:26 2026 by rpki-client