Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File:                     AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier:          jTZ5axtYVOUTy/9AtH7q/BOm+HQLroGn3nFBV3f/Ww4=
Subject key identifier:   2B:46:ED:72:E3:F3:E1:BA:91:00:78:54:13:B9:D0:28:7A:A7:B4:35
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer:       /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial:       01A000930DE3E86B96ED22DE6CC530767D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number:          152C
Signing time:             Fri 14 Aug 2026 14:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:32 +0000
Files and hashes:         1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
                          2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: N9kLX2Ft4VZlIVb0jxoBb66xEOK4shYFOqUEyfcQ7Ck=)
                          3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:0d:e3:e8:6b:96:ed:22:de:6c:c5:30:76:7d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03196c89e554dbe4774522759906e2581a174694
        Validity
            Not Before: Aug 14 14:00:32 2026 GMT
            Not After : Aug 15 14:00:32 2026 GMT
        Subject: CN=2b46ed72e3f3e1ba9100785413b9d0287aa7b435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:71:1e:c5:54:2f:6e:5f:ef:2a:7a:d5:be:
                    4a:d8:5b:bf:8f:7d:ec:52:67:97:35:71:ff:cc:25:
                    95:97:3c:ad:7d:6b:b9:a7:b8:a6:86:23:cf:74:93:
                    d4:5f:dc:8e:8c:74:47:9f:0c:bb:72:6c:9a:46:3a:
                    6e:64:ad:f1:6d:59:4b:cc:04:28:fd:31:07:08:dc:
                    6b:21:9e:db:8e:77:05:99:00:9a:e0:3c:8b:11:dc:
                    48:c0:36:f1:ca:73:42:03:b4:2d:a4:cd:36:54:80:
                    e9:de:6a:1c:bc:dd:df:32:3f:a9:86:4b:d0:32:e5:
                    8b:96:8e:38:47:a9:6b:cd:07:6b:2b:7b:7b:44:67:
                    ae:f4:9a:81:92:b3:6b:72:2d:5b:ba:b5:e3:67:6a:
                    e3:65:12:bf:68:48:a8:99:a6:35:4c:64:0a:67:86:
                    25:04:c7:b3:7b:28:d2:1a:e4:eb:5d:12:aa:62:87:
                    12:b9:c5:4c:90:37:7a:71:34:57:9c:d8:b9:69:b6:
                    b1:33:22:75:ce:7b:d5:f4:07:64:cd:39:6c:a7:1a:
                    2e:2b:be:55:7d:01:f7:44:09:e0:83:8e:ce:8e:f4:
                    9c:19:6e:2c:4f:e9:4b:9a:53:9b:1e:65:b1:6b:21:
                    8b:43:66:0f:a5:46:ba:5e:43:84:c9:a5:74:ea:3c:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:46:ED:72:E3:F3:E1:BA:91:00:78:54:13:B9:D0:28:7A:A7:B4:35
            X509v3 Authority Key Identifier:
                keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:72:8c:69:86:56:19:7a:25:fc:5c:d1:60:b2:13:26:52:
         43:3e:5c:87:40:f1:a4:2b:67:be:4a:9f:e6:e3:76:28:ed:6b:
         23:07:7e:04:8d:87:dd:11:03:e0:79:62:9e:7b:20:48:14:9f:
         62:5f:ca:ac:ad:4d:b2:fc:90:4a:a0:33:0a:b2:dc:d7:9d:38:
         28:8a:e9:6f:1c:95:ff:df:c2:bf:9c:90:83:c7:0f:ee:4a:e0:
         fd:b5:dd:c2:74:99:c4:80:b1:ce:f3:27:26:1b:66:5f:41:33:
         b1:24:f1:5e:13:eb:cb:e1:a1:f2:47:95:19:8b:8d:13:f2:90:
         11:60:8b:e0:61:dd:0f:72:ba:6d:9a:2f:c4:99:41:05:21:30:
         33:2b:d1:b1:a5:69:67:9b:a0:65:74:08:dd:13:c2:50:2c:ea:
         6a:d3:9e:54:16:19:fd:80:c5:2d:5c:ab:68:55:64:08:46:6d:
         8e:3f:23:8a:44:70:d8:ec:d7:82:a0:93:71:e8:63:0c:62:a9:
         ac:86:a4:c0:2b:42:34:f5:e5:17:e4:67:2d:8c:9e:92:18:3b:
         c3:59:be:48:bf:e3:2c:47:e9:44:5c:98:7e:04:ae:34:a0:26:
         44:58:34:46:0c:b9:7c:64:bf:15:50:3a:05:d1:0f:cd:c0:b1:
         45:d2:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:10:19 2026 by rpki-client