Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File:                     2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier:          kUe4I8Bb3mK+MTgiE2RigygKS895fqGB+CuNTJjJbps=
Subject key identifier:   C1:41:5A:E0:3D:C3:11:41:F2:68:69:6D:9E:E2:2C:5E:27:66:37:E4
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer:       /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial:       01A01F7A07171D0D39F68B09020CFE648CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number:          1A16
Signing time:             Thu 20 Aug 2026 14:01:25 +0000
Manifest this update:     Thu 20 Aug 2026 14:01:25 +0000
Manifest next update:     Fri 21 Aug 2026 14:01:25 +0000
Files and hashes:         1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
                          2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: gGDLrmkw/XA8phIsVpofEbi4J6zWimGHYdJtpS4Hz8U=)
                          3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
                          4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:7a:07:17:1d:0d:39:f6:8b:09:02:0c:fe:64:8c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
        Validity
            Not Before: Aug 20 14:01:25 2026 GMT
            Not After : Aug 21 14:01:25 2026 GMT
        Subject: CN=c1415ae03dc31141f268696d9ee22c5e276637e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:d6:c9:3b:b5:99:2f:9b:e6:34:80:6a:46:
                    78:32:4c:96:cd:df:b0:0d:6f:71:9c:ba:b3:2a:19:
                    8a:8b:45:d4:f0:5e:10:29:92:7d:83:81:bb:ea:b0:
                    07:55:15:ce:cd:87:ba:88:24:aa:16:41:8c:34:01:
                    e4:db:c6:e6:d0:97:ec:23:ff:30:f3:42:8b:05:2b:
                    b0:84:fb:5a:96:e7:a9:96:0a:c3:a8:25:1d:2d:d7:
                    49:c6:ad:0a:f0:d6:6c:f1:4e:98:c3:d0:b7:ae:ce:
                    96:1d:46:fb:3d:b0:b4:ee:c5:da:ec:98:f0:8c:95:
                    72:73:f6:f1:00:eb:9f:ab:fb:fd:75:87:da:b0:11:
                    d0:40:e0:88:63:c9:0a:3e:a6:47:ee:3f:3b:36:32:
                    eb:88:92:76:cc:d2:94:28:89:34:38:de:f4:8b:0a:
                    3a:c4:41:4c:90:ce:a4:94:72:3e:04:db:a2:83:1b:
                    58:95:b6:6e:32:2f:91:0c:ef:59:2a:32:fa:b6:19:
                    ad:8c:77:11:98:03:5b:1f:b3:0d:8e:1c:b9:40:f9:
                    e8:1a:e0:7d:40:d9:fe:3c:84:f2:a4:3f:c3:6d:9b:
                    ad:42:de:a3:6c:1b:64:f4:d3:f8:5a:44:92:e4:df:
                    15:b1:34:5e:30:2f:be:d6:c3:2a:24:61:b2:3d:a6:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:5A:E0:3D:C3:11:41:F2:68:69:6D:9E:E2:2C:5E:27:66:37:E4
            X509v3 Authority Key Identifier:
                keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:7d:58:84:dc:6f:df:74:36:64:ac:da:b5:fe:f3:25:05:
         62:08:af:ea:aa:63:cb:dd:71:aa:d7:d5:63:c7:79:a5:82:6d:
         69:59:3f:a9:1b:62:19:ea:5a:8f:83:3f:89:a5:c2:e3:c2:40:
         60:09:f3:8a:fa:cb:3e:8a:a9:a5:d6:c1:e3:f7:4f:1a:e6:cc:
         87:e0:1e:66:a4:23:ea:3b:30:57:9a:70:29:49:a7:57:9a:82:
         c2:82:cc:e8:c4:0f:23:f6:7c:bf:82:0e:db:92:c1:36:ae:f4:
         06:c7:ea:b3:c1:55:0e:ed:f6:6c:d6:03:64:e9:47:d1:7c:ff:
         f8:fb:80:9b:52:ec:96:3d:db:15:96:b0:f0:26:df:3e:52:22:
         93:5a:21:66:8f:7b:bd:b3:7a:1e:3a:4f:a7:ca:50:98:2e:7f:
         25:1b:8e:c1:00:32:3e:83:39:37:a8:37:81:47:c5:94:c5:de:
         30:d0:41:2c:fb:4d:26:cb:1e:73:41:52:3a:54:8d:c6:b4:2c:
         12:7e:a6:49:de:8c:d4:3c:73:98:3e:55:ea:96:6e:1d:e3:06:
         d0:f2:2e:e3:a9:79:aa:eb:70:25:8e:5b:ed:01:af:d7:88:36:
         20:88:01:8b:3c:9d:8f:b3:d8:bb:21:63:f3:7f:45:9a:73:67:
         01:ce:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:09 2026 by rpki-client