Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          zk+ufgSSBkQDDYdEDWsY+3XrL5ZVxTiSjFJkgvUS35g=
Subject key identifier:   56:13:10:AF:F2:2F:56:8E:3D:66:5E:C9:42:84:29:84:34:33:F1:1A
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       01A02A6BC805515EA71D289CE211E1F3C4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          1A1A
Signing time:             Sat 22 Aug 2026 17:01:41 +0000
Manifest this update:     Sat 22 Aug 2026 17:01:41 +0000
Manifest next update:     Sun 23 Aug 2026 17:01:41 +0000
Files and hashes:         1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
                          2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
                          3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
                          4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
                          5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: KTKA4895ElcwjSpYZZFas/h/n7MSsp1j/XjoHnJjRbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:6b:c8:05:51:5e:a7:1d:28:9c:e2:11:e1:f3:c4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Aug 22 17:01:41 2026 GMT
            Not After : Aug 23 17:01:41 2026 GMT
        Subject: CN=561310aff22f568e3d665ec9428429843433f11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:70:b6:f4:01:e1:b7:23:4f:1c:8c:87:82:
                    9b:b0:41:cd:6b:da:cc:98:36:16:d8:05:7e:fa:08:
                    7e:f9:d9:cd:33:f3:8e:e8:17:48:80:d7:c7:da:b5:
                    cd:ee:de:b9:c6:97:f7:4c:05:18:83:83:db:d5:d7:
                    0c:46:d3:3e:d8:49:3e:1a:0b:9a:29:a3:13:fd:8d:
                    f8:8b:3d:28:bd:9c:f3:cf:23:ee:56:26:93:75:11:
                    ef:de:48:35:70:79:92:7e:70:e0:6c:5d:3f:3c:c2:
                    fe:97:df:a2:26:12:60:a3:57:92:c5:4f:69:b1:b6:
                    b2:dd:c6:d5:c7:87:1a:65:36:1a:f7:6a:96:34:f2:
                    86:e3:74:b7:89:d1:9b:f9:38:aa:c6:87:34:12:f1:
                    03:33:b5:34:a4:c5:e2:91:72:46:bb:9b:85:fa:09:
                    b4:e3:ec:66:8c:0c:a3:d7:72:03:e4:13:5b:72:a0:
                    34:f0:f5:8a:cb:a0:2e:c1:c5:b8:3a:aa:09:79:e4:
                    d2:35:c3:e1:bb:26:33:4b:1d:cc:9e:dd:58:42:86:
                    d9:1c:ae:e4:e2:ec:3e:13:95:e7:3b:2b:cc:31:49:
                    ac:43:59:3d:c4:9f:72:56:88:43:b4:4c:14:42:a4:
                    e1:74:f0:01:78:09:76:0a:d9:5c:72:00:2f:28:4d:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:13:10:AF:F2:2F:56:8E:3D:66:5E:C9:42:84:29:84:34:33:F1:1A
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:21:9b:53:af:4a:94:41:71:06:4a:b2:07:0f:68:10:9d:1a:
         8a:94:47:63:7b:6e:bc:c5:41:21:7f:c0:6d:d0:88:a6:8e:a1:
         ac:5c:6c:5d:c0:28:bd:2d:6f:03:9d:ce:e9:03:46:9e:c1:3d:
         17:31:c5:29:bc:e8:c4:34:c6:d8:7f:f4:e0:a7:1f:e6:c6:41:
         4e:5c:ed:34:5b:99:58:94:0e:35:96:0e:1d:fd:db:d1:62:96:
         15:52:1c:72:3a:f3:d7:24:c4:6c:40:10:13:b0:30:c0:04:0b:
         b8:b0:e4:96:b6:f0:44:0b:53:0a:43:47:b5:d0:b8:fd:1b:98:
         21:4f:14:cd:f8:58:66:97:24:04:b8:2c:09:85:fe:f2:e9:92:
         20:f6:98:e2:f0:88:df:0e:5a:8e:b5:1f:2d:81:be:b7:75:ae:
         36:7a:51:26:31:a0:af:09:bb:d4:99:2b:6f:54:8d:5e:1d:2d:
         ee:9e:66:b1:3d:ee:38:97:fb:5a:9a:04:3a:31:3f:3f:6e:e3:
         aa:bb:f6:2f:6a:ea:c4:37:61:68:7e:fc:f2:8d:09:56:7f:1b:
         07:d8:9f:a4:a5:0e:d1:c4:be:0c:6b:0b:b0:c8:11:b7:3d:2e:
         6d:2a:c6:1d:00:0e:67:33:3f:94:ce:2c:35:b1:fe:b0:39:09:
         7c:a1:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:23 2026 by rpki-client