Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
File:                     6uYgsFna8H5G_DUi0JsZCVFs_O8.mft (raw, json)
Hash identifier:          YF0V1RMIRkr+BjvnIi3evxoZb0nWZbwm5J4t105M62Y=
Subject key identifier:   9D:20:A2:A8:97:E6:D5:C1:F3:18:64:65:4F:27:40:1F:F0:FE:40:A2
Authority key identifier: EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF
Certificate issuer:       /CN=eae620b059daf07e46fc3522d09b1909516cfcef
Certificate serial:       01A039DEA03A6F521AF360F5BB7C37153A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
Manifest number:          0232
Signing time:             Tue 25 Aug 2026 17:01:26 +0000
Manifest this update:     Tue 25 Aug 2026 17:01:26 +0000
Manifest next update:     Wed 26 Aug 2026 17:01:26 +0000
Files and hashes:         1: 14k9WBYTwB5rY8Es6FCkuGE_LQ0.asa (hash: EbDiuMLMeOTXlBB/rfAnpSziN3nz5jdOmMgYker4Qok=)
                          2: 6uYgsFna8H5G_DUi0JsZCVFs_O8.crl (hash: JagIsj1RYHxtJoIzO55INqTvAre18X6RODA5yHqW6MI=)
                          3: JufwG4y3MsIG7jxqVGEbh3ksTPA.roa (hash: fJpYP0RGygpZ8ZQop6IUb72Uh29ffAUMjbeCaPVw2Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:de:a0:3a:6f:52:1a:f3:60:f5:bb:7c:37:15:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae620b059daf07e46fc3522d09b1909516cfcef
        Validity
            Not Before: Aug 25 17:01:26 2026 GMT
            Not After : Aug 26 17:01:26 2026 GMT
        Subject: CN=9d20a2a897e6d5c1f31864654f27401ff0fe40a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:69:cc:42:f4:44:85:a5:22:3f:f1:ba:6d:
                    5b:f7:83:57:cb:2c:b0:06:86:f1:64:71:d9:8b:6a:
                    e0:c8:25:92:cc:7f:91:91:35:06:c7:22:86:d8:a8:
                    26:b1:87:3c:54:3a:73:36:2a:ac:4e:0a:53:32:b1:
                    5c:13:f9:fb:b0:05:dc:5e:03:e2:db:70:98:b8:85:
                    64:d1:7f:0f:07:1a:67:e7:32:21:b2:71:32:44:19:
                    01:1e:d7:a3:7b:3b:7f:b8:5a:b1:c1:16:22:cb:ce:
                    59:79:cf:5c:5e:6f:a9:c2:42:33:66:cc:65:cc:24:
                    ff:dd:bb:0d:fd:32:8c:39:fa:7d:58:e7:57:02:85:
                    68:4e:10:4e:cd:cf:a6:f7:57:65:52:17:0b:c0:96:
                    ef:63:71:f0:dd:4f:79:67:2a:45:95:f1:5f:05:93:
                    33:95:d3:8c:77:60:df:97:51:2a:cd:df:16:66:68:
                    b3:96:33:4d:a0:e6:72:5c:6e:f4:d9:d4:93:42:f0:
                    4c:c6:71:37:25:f8:bf:18:78:21:03:bb:94:e1:3e:
                    d9:37:29:aa:4b:6a:fc:a3:e5:67:86:e1:ed:81:5c:
                    ca:fb:71:3a:bc:85:b4:a5:33:d2:1a:44:37:f2:ba:
                    4d:a9:db:99:fe:38:24:c9:66:24:69:ca:9c:44:c0:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:A2:A8:97:E6:D5:C1:F3:18:64:65:4F:27:40:1F:F0:FE:40:A2
            X509v3 Authority Key Identifier:
                keyid:EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:60:69:a6:27:c6:bb:af:19:8b:fc:ea:e2:62:52:dd:d8:b1:
         f7:cd:f9:c4:8e:12:8f:e0:ce:c3:96:ff:7d:3c:b1:5b:50:99:
         b3:54:ae:6b:2d:fa:2a:09:45:2e:19:de:57:1c:0b:84:81:e5:
         4b:54:06:59:ec:18:42:3e:e7:d1:31:9c:23:84:b0:84:2c:e1:
         fe:57:ff:81:6d:7c:38:c4:9a:0d:3d:d3:c1:76:39:d4:80:93:
         80:90:cc:d8:68:58:c1:da:9b:41:36:3a:85:57:84:ac:43:3c:
         2f:95:d4:76:85:00:c3:b0:ed:b5:4d:9c:fd:7b:0c:a4:d6:12:
         e7:68:bf:bc:f7:c0:ea:3a:d5:28:f6:de:a6:61:97:09:e1:70:
         b6:39:c0:f1:ea:0c:8a:b9:ac:c3:d6:cc:a9:52:f2:18:f7:54:
         1f:fc:a8:a0:4a:da:ab:27:e1:03:e1:f7:f5:ca:6e:ea:7c:4c:
         de:3b:8e:57:d0:ee:11:d6:06:d3:35:b4:9c:4a:7d:4f:02:44:
         b8:d8:d8:5c:88:f9:de:6c:6a:2d:8e:da:55:43:fc:e5:4a:55:
         08:92:c5:32:2f:2a:d6:9d:34:3c:ad:e1:bb:a6:4c:6d:98:83:
         64:b7:04:76:05:7a:50:d6:8c:fe:21:92:9b:ea:80:d7:e6:fc:
         d1:64:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:45 2026 by rpki-client