Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          X0RK9izmKj7HVGAA0GetberYHokGAtt59q9kzaOhwYU=
Subject key identifier:   56:21:F0:41:B3:D2:7E:84:A9:03:27:2A:5C:11:04:98:31:3F:A9:5E
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       019FFD24F382C55DCEB887891F138B21B872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          088C
Signing time:             Thu 13 Aug 2026 22:01:24 +0000
Manifest this update:     Thu 13 Aug 2026 22:01:24 +0000
Manifest next update:     Fri 14 Aug 2026 22:01:24 +0000
Files and hashes:         1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: elzBkRk/mwLFA3VLuI4DEURTIOjCk2CiC4xnse/3EIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:24:f3:82:c5:5d:ce:b8:87:89:1f:13:8b:21:b8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Aug 13 22:01:24 2026 GMT
            Not After : Aug 14 22:01:24 2026 GMT
        Subject: CN=5621f041b3d27e84a903272a5c110498313fa95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:9f:cb:59:c4:95:ee:e8:e9:ac:d6:2b:75:
                    9f:39:bf:61:d7:28:5c:ba:96:ad:02:32:fd:51:e2:
                    16:05:4f:2d:3f:6e:37:86:1a:50:c5:57:d7:90:dd:
                    67:96:c0:42:31:48:5c:1d:bd:a0:f7:95:c2:81:6f:
                    c5:57:8c:09:6c:7f:72:f5:2d:f6:12:c9:18:e1:12:
                    ce:40:9e:19:04:0f:3c:ee:2f:8c:c2:36:83:d7:1c:
                    6e:47:8e:c7:6b:0e:d7:bc:f5:b2:8c:b7:5a:c7:7c:
                    29:7a:5b:88:62:4e:a7:a8:12:66:93:8f:85:ec:6a:
                    69:9e:9c:19:74:e9:ec:f6:34:19:6b:c3:b6:5a:71:
                    8b:c5:7f:d1:98:80:b8:64:46:2c:6a:d2:c7:8f:ac:
                    02:6c:94:ca:63:b8:88:0c:d6:2e:77:34:03:dc:57:
                    18:a0:81:f3:46:97:3a:bc:21:b7:ef:c2:d7:75:3a:
                    c6:1f:35:28:d4:4d:4a:22:0a:6d:0c:bb:18:5b:e7:
                    c8:0d:1e:93:5f:72:d2:04:55:e6:8c:53:9f:a2:ea:
                    4b:34:7b:3f:d2:8d:4d:26:82:03:8f:9d:ea:67:ba:
                    4c:ea:03:55:27:0d:0a:69:34:38:71:8b:d6:46:07:
                    81:e6:3d:73:d8:2d:8f:02:25:43:af:1a:66:56:a1:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:F0:41:B3:D2:7E:84:A9:03:27:2A:5C:11:04:98:31:3F:A9:5E
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:b7:ae:93:0f:86:19:bc:a4:55:1c:bb:eb:97:07:8d:8c:
         38:a7:a7:bd:91:a6:f8:a0:c6:f3:50:a8:ac:77:b6:75:c1:fd:
         fa:02:f5:8e:1e:35:38:72:c0:42:28:c0:cf:b6:78:6b:b6:2d:
         d4:9f:37:24:ec:a3:04:0d:46:e1:1a:7c:3b:60:e4:47:cc:b7:
         ee:13:70:70:65:c2:ab:64:59:22:cc:92:a8:5b:fd:b3:29:3e:
         35:33:67:f5:86:e3:18:dd:50:cb:5e:25:90:08:ae:ec:9b:ba:
         77:af:7f:2a:86:2b:32:2a:81:59:8f:66:5c:f4:1c:f8:44:30:
         12:77:ba:5d:ec:1d:5b:1c:01:e9:c1:d3:46:67:af:2b:38:98:
         5f:fb:6f:1e:9d:e8:c2:10:9e:bd:5d:19:e6:b6:dd:15:dd:83:
         b1:59:23:5b:17:a5:41:fd:8b:6a:aa:3e:39:8b:7f:32:17:8d:
         e6:44:8d:02:93:20:2b:71:c1:53:c0:f7:10:0e:1a:a7:48:66:
         07:45:1d:0d:db:da:52:dc:a2:9c:21:b6:71:12:43:40:c2:3e:
         3f:66:71:18:80:71:5d:2b:b4:7b:bb:bc:e1:f5:82:06:cd:18:
         ec:3b:69:93:0b:df:67:43:b6:92:69:4c:34:d4:20:22:3c:39:
         91:6d:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:10:42 2026 by rpki-client