Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File:                     NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier:          NfFjgHaU3+RUWQkPWKIF1PfYlWSEsXqFA0jZcvSTkvw=
Subject key identifier:   6B:9B:44:F2:51:61:CD:61:24:43:C4:F1:3E:F3:A8:2F:A9:CF:D0:ED
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer:       /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial:       01A0024AEF056E96ACDC3EC4C5D092E2FE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number:          1A06
Signing time:             Fri 14 Aug 2026 22:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:00 +0000
Files and hashes:         1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
                          2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: ARBHb1PEqKiq6bd4eNfIUSbpdYvddZp7BIhLcH+Gijk=)
                          3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
                          4: h47V2oqauqZZ_rfHQWw19ZbUYg0.roa (hash: TrkwxoC10+VUKUU/FFOH1cGks+KjznkFnR4WMUPTGNA=)
                          5: zCVYNwSb6R9Q5adien3vj6-COxI.roa (hash: 4WkrjYGFdpzJeGxKIOg7LPmr739iupPTe/+MPRyS+UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:ef:05:6e:96:ac:dc:3e:c4:c5:d0:92:e2:fe:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
        Validity
            Not Before: Aug 14 22:01:00 2026 GMT
            Not After : Aug 15 22:01:00 2026 GMT
        Subject: CN=6b9b44f25161cd612443c4f13ef3a82fa9cfd0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:4a:3b:b6:9e:47:09:14:d7:44:c9:dc:e7:
                    da:c3:83:4b:57:1f:86:95:c8:fb:73:22:82:ff:fe:
                    70:10:3a:58:e1:48:d7:5b:31:de:fe:ef:a5:77:60:
                    e3:4b:7d:02:58:3d:51:71:5b:a1:0e:7f:5b:b3:b9:
                    c4:ec:80:d9:75:87:1d:d1:79:e7:9c:95:1d:81:85:
                    97:16:9e:42:52:03:4a:83:dd:b3:03:60:2c:a7:8a:
                    14:ed:43:b6:07:c3:57:1f:00:23:06:ba:57:56:91:
                    aa:bc:fe:48:05:09:b2:d5:b5:8d:45:4b:be:da:22:
                    80:66:29:9f:4a:cb:60:0b:81:78:22:6e:de:0b:80:
                    80:b6:6b:f5:87:bb:c8:76:12:92:a5:80:e5:99:9b:
                    4f:98:a9:f1:25:7a:f1:47:0b:4e:7f:ae:c1:00:b8:
                    49:3c:ce:f5:64:5b:5a:ec:be:6b:f6:67:f2:05:66:
                    b8:29:86:2a:13:17:15:12:d0:04:bd:a2:9e:64:82:
                    a7:6d:dc:8c:ed:a6:cf:fb:a4:31:3f:3f:c5:35:8c:
                    6e:ca:1d:06:e0:2b:16:f8:34:19:f6:3c:39:38:81:
                    e6:13:d7:80:4b:55:74:45:4a:cc:c1:ce:75:cf:97:
                    3f:de:38:50:6b:34:d9:16:ec:a9:d9:cb:31:9a:19:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9B:44:F2:51:61:CD:61:24:43:C4:F1:3E:F3:A8:2F:A9:CF:D0:ED
            X509v3 Authority Key Identifier:
                keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8f:04:ba:f8:b2:5e:1f:a4:03:1a:4d:ad:15:2d:f4:b0:5b:
         f2:70:3e:54:2b:91:c2:07:fc:83:43:b8:78:83:b7:f9:f3:4c:
         b0:7c:1d:4b:dd:a4:91:ec:03:e5:1f:e1:4f:dd:99:4c:5b:6e:
         81:89:12:69:b8:f2:90:16:dc:ea:56:7c:84:cf:2d:b9:c1:34:
         88:b9:2a:55:d5:be:97:51:f5:c1:77:90:50:9a:f3:43:12:cd:
         ef:66:25:66:48:03:5a:5c:fe:20:ea:90:4a:aa:c4:48:dd:99:
         1f:fb:7c:89:b4:51:43:60:05:6d:2d:71:e7:86:0c:35:ea:e6:
         82:f6:be:e2:07:5d:a2:24:07:e5:bb:89:3e:5f:1b:50:92:95:
         71:61:54:dc:ec:6c:91:a6:2d:f5:ff:69:58:b1:21:09:f7:3d:
         73:65:58:13:c5:40:59:cd:c5:d6:91:e8:e2:a6:3c:3f:f0:57:
         6d:78:bd:8d:7b:5e:f4:f7:f7:09:dd:51:c1:c5:2f:e9:42:54:
         9f:ae:aa:0b:31:ef:00:b4:a2:89:b6:52:4f:48:a9:f1:18:2f:
         e9:f7:f5:b5:01:00:22:df:6d:b9:46:b4:21:e7:56:d8:e6:a0:
         7d:71:04:be:11:df:87:fa:5c:8a:7f:21:21:a8:d0:6e:32:d4:
         ce:dd:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:52 2026 by rpki-client