Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File:                     aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier:          R8mgQqeByBq2UYoTeAdqzgLvzLRtE8Q2cglsQxPJwsc=
Subject key identifier:   02:1F:50:13:8C:60:1E:A8:A5:6B:00:97:E4:AF:80:E3:1B:00:5C:06
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer:       /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial:       01A0028217D72BCF3B9C595D0EAB308243E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number:          0594
Signing time:             Fri 14 Aug 2026 23:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:15 +0000
Files and hashes:         1: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (hash: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw=)
                          2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: 4BGON2/WTeAuQkSJgK3iM5bK27D2237OKXG1Gcx+qTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:17:d7:2b:cf:3b:9c:59:5d:0e:ab:30:82:43:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
        Validity
            Not Before: Aug 14 23:01:15 2026 GMT
            Not After : Aug 15 23:01:15 2026 GMT
        Subject: CN=021f50138c601ea8a56b0097e4af80e31b005c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:df:3b:65:0f:8a:61:25:56:b0:07:5d:9c:
                    12:a6:c9:c8:6e:70:19:f0:57:89:1c:b4:7a:f2:2c:
                    6b:df:30:3d:0d:9d:44:c9:cc:63:4d:98:fd:3b:72:
                    05:51:a6:63:7a:1f:ef:df:fe:fc:5f:14:1f:e2:bc:
                    83:09:56:9b:9d:a4:1b:46:82:70:7e:36:f9:6e:90:
                    ec:97:4b:1e:c0:68:67:d7:31:a0:ce:ce:ea:89:64:
                    c7:a5:da:39:a9:b6:81:37:73:30:77:00:90:20:67:
                    6e:96:8b:e1:aa:c8:47:77:1d:71:1a:1b:6e:b0:1a:
                    27:7e:f3:68:1e:fe:68:c1:08:14:29:9a:4c:6f:68:
                    ff:7d:6b:cd:92:d2:83:9a:66:a9:7d:a2:09:3b:88:
                    37:b1:b1:27:98:23:7c:b4:bf:e4:c2:84:d1:68:55:
                    56:50:71:ad:32:5b:78:50:16:df:fa:47:f8:f6:c4:
                    2f:d6:46:fe:52:cd:97:49:03:2b:7d:2a:ee:eb:90:
                    fa:f1:87:b4:2c:2c:4c:f2:7d:34:92:15:dd:64:c5:
                    36:c3:2a:af:2f:78:67:9e:ed:2f:70:76:b0:52:9c:
                    60:13:c3:77:70:c4:37:91:fa:87:1b:ea:a6:70:eb:
                    93:4b:a5:be:45:c3:5f:f0:f9:0c:4c:38:ce:3e:41:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1F:50:13:8C:60:1E:A8:A5:6B:00:97:E4:AF:80:E3:1B:00:5C:06
            X509v3 Authority Key Identifier:
                keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:04:14:f7:e1:4e:79:a9:3c:24:b4:dd:8a:58:71:7b:b9:
         22:5a:3f:72:e7:6e:92:f7:5f:7a:a1:95:6c:f6:2f:c5:f2:70:
         71:84:1a:ac:3f:63:7b:59:70:fe:d0:d5:a3:01:bb:0d:04:f3:
         20:76:33:f7:c5:4b:eb:1a:b7:83:a5:98:f1:99:99:6c:3b:ac:
         a8:3e:ae:9f:c6:e6:14:6f:3c:10:44:41:64:22:c0:53:9c:ee:
         0f:b3:f0:07:56:c4:5a:23:c4:a5:da:3f:ac:5a:e0:fe:9d:c4:
         23:80:d8:e3:f1:9f:65:f0:48:87:54:c8:87:41:70:bc:29:ed:
         23:e7:52:42:f6:bb:17:38:0d:66:1b:f9:52:ed:5f:32:27:b7:
         87:83:88:fd:f8:f3:0e:24:9e:67:4e:d7:66:47:4c:55:80:99:
         48:53:03:58:36:f6:52:62:a7:1a:4e:44:8c:14:50:87:4b:13:
         3f:29:e1:38:24:22:2b:f4:18:d0:df:30:94:f4:28:25:55:25:
         8c:34:fb:55:4d:88:e0:39:07:d1:3c:76:61:b9:4a:f9:fe:a1:
         9f:09:4f:57:8b:c4:11:02:e5:b8:aa:3a:29:79:27:68:57:06:
         39:a0:80:54:85:c7:ae:c0:f1:0d:4d:cc:22:89:94:ee:4c:58:
         f7:55:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:34:13 2026 by rpki-client