Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File:                     E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier:          OMLxwyLtZu4rPhjDN5Gov/niYOeHQakrUzVHaOhH24I=
Subject key identifier:   E1:42:60:AF:3A:1A:8E:6F:16:49:F9:96:5F:8B:BA:C6:40:E7:CF:B0
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer:       /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial:       01A001A6078467B391476462E822DCF0E8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: thStGsjYEdjRLt61ANHVC+q6aPxNWdA+rSazxXeVhAY=)
                          2: Kh2ibrrlvAJA0BPytF3vpct5nG8.roa (hash: 9S+B5OPrOVNMPF41i1ZV7e9GhndsXm9HajUBATSWGss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:07:84:67:b3:91:47:64:62:e8:22:dc:f0:e8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=e14260af3a1a8e6f1649f9965f8bbac640e7cfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:10:ce:cc:69:b8:44:63:13:17:58:d8:1e:
                    d9:9f:a3:8d:cc:08:34:07:64:7d:f6:fd:42:da:67:
                    04:75:02:40:6f:75:d9:70:41:59:65:60:54:a4:ba:
                    9c:a6:8e:53:c7:3a:56:29:da:04:e9:ac:1a:a7:f5:
                    0d:bf:c8:34:80:96:c7:47:5d:a1:d7:16:dd:be:93:
                    23:22:d4:e2:53:29:7c:c0:c9:ae:ed:fa:13:36:0b:
                    83:f9:3c:53:cf:08:c5:bd:e3:fb:b6:c1:e4:b1:67:
                    aa:91:0c:cd:04:b8:5b:f7:83:76:c6:cb:9c:3a:2b:
                    3e:65:89:e3:95:da:f3:75:03:65:44:31:09:5a:37:
                    df:55:74:01:f1:6d:c7:95:ca:7b:cd:0c:ac:09:9f:
                    42:1e:80:97:b9:33:2c:e8:bc:45:57:90:af:5e:1f:
                    8f:b3:5d:73:65:3a:92:10:c4:20:3a:e6:28:56:a1:
                    c8:5d:f6:2f:48:ea:5f:fd:a8:16:67:98:ec:30:c8:
                    6e:03:9a:b9:b5:69:85:cb:b0:0b:d3:e0:04:73:b7:
                    d6:37:e3:a1:9a:b1:a9:a9:f0:ae:95:22:26:8b:25:
                    83:2c:8c:8a:b7:50:5f:8a:e7:e9:51:5f:0e:38:7b:
                    69:f2:58:55:b0:9d:f7:98:10:41:74:33:7c:b3:1b:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:42:60:AF:3A:1A:8E:6F:16:49:F9:96:5F:8B:BA:C6:40:E7:CF:B0
            X509v3 Authority Key Identifier:
                keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:81:f0:6d:e5:f4:8e:79:7b:9f:9f:1d:28:97:cb:0b:80:
         c7:24:7c:6e:9e:dd:64:c2:3b:7f:e2:ab:93:e7:c0:fd:7f:c5:
         e2:c6:34:95:02:2b:48:85:8e:db:15:b4:58:b2:db:22:21:ad:
         19:2c:af:96:32:03:d0:f0:af:4a:75:2d:e4:56:8b:a4:0c:b1:
         68:34:2c:dc:35:0c:3f:98:e7:65:50:fb:04:ce:f6:9c:15:b1:
         50:77:13:26:e7:6c:b8:2a:42:c5:95:a2:f9:8f:d3:1e:b8:6e:
         d8:15:c7:47:61:f8:b9:e5:b4:0d:a0:7e:dc:a6:dd:a1:0c:c0:
         ae:cd:eb:87:aa:25:ba:93:9a:87:67:b0:a2:55:6b:69:36:b8:
         65:be:30:ce:3d:33:98:5e:5a:58:61:a1:02:ff:0d:65:e9:c4:
         77:de:c0:d2:7a:5c:f9:61:58:ef:13:8c:8f:75:56:cd:0d:15:
         c1:0b:ce:64:9f:47:ce:84:f4:d3:28:97:9e:23:34:1f:01:d1:
         c3:77:bd:9a:3e:ba:c0:c4:61:d5:77:af:8c:4a:84:f9:84:03:
         17:3a:f3:b7:57:2b:7f:4e:7b:ed:e1:cc:1d:20:5b:f1:79:03:
         a1:b6:b3:9d:12:e5:ad:8f:63:6e:1d:fb:c0:55:d2:e8:3d:2a:
         9b:94:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:23 2026 by rpki-client