Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          iI0xEFLCiq0I+afcWqCa4u+f2SUTv84rsTVsD/HDWNg=
Subject key identifier:   73:58:E1:39:0A:11:D1:75:E2:32:94:4F:FF:35:4F:72:3F:14:76:CD
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       01A002B890847282EFCEA81AF184319AC2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          1490
Signing time:             Sat 15 Aug 2026 00:00:45 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:45 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:45 +0000
Files and hashes:         1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
                          2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
                          3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
                          4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: 0uAbQqToAr4epAmRs+bWDemComGseq05hNpx0GD75Ak=)
                          5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
                          6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
                          7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:90:84:72:82:ef:ce:a8:1a:f1:84:31:9a:c2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Aug 15 00:00:45 2026 GMT
            Not After : Aug 16 00:00:45 2026 GMT
        Subject: CN=7358e1390a11d175e232944fff354f723f1476cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:44:70:4d:1d:79:44:21:ea:14:6d:12:5a:
                    30:79:00:dd:32:1e:ad:83:0d:3e:c3:87:4b:97:e2:
                    1a:60:a0:4d:e1:9b:6f:f7:62:b8:40:59:7d:6f:d5:
                    92:b8:88:be:31:43:df:11:98:97:b6:28:7c:fb:a9:
                    a5:f1:83:f4:74:e5:98:49:e6:d9:d1:5b:5b:99:d8:
                    3a:16:ab:1f:3c:33:de:14:59:f8:9e:43:f4:81:09:
                    e1:48:93:cd:99:71:6d:ce:c7:c9:23:33:19:72:ba:
                    3a:c6:88:7f:58:56:44:12:78:67:8e:72:cd:ed:bf:
                    47:ec:70:7b:fb:df:7b:86:87:3a:e0:d0:3b:b9:a7:
                    48:95:94:c0:47:e2:c4:95:1b:da:f7:da:38:80:d1:
                    2a:c8:98:f2:a0:af:06:7d:02:5b:80:e1:bc:89:6a:
                    e2:bb:5e:00:10:e2:cd:89:9b:ff:d6:d5:c0:cf:9f:
                    83:3e:fd:ba:26:b7:28:56:7f:a6:16:95:c5:99:2e:
                    63:52:66:e1:9a:26:fd:0b:f4:7e:43:36:40:b7:f3:
                    54:eb:f3:e1:d8:4a:ec:d2:06:6b:f0:f6:2a:b6:02:
                    ac:3e:02:1e:8c:18:4e:c1:05:00:34:19:e7:a9:da:
                    91:f8:9a:06:66:96:c9:d9:ca:ca:24:90:6b:03:ba:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:58:E1:39:0A:11:D1:75:E2:32:94:4F:FF:35:4F:72:3F:14:76:CD
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:0b:47:46:79:79:7e:2f:61:9d:eb:1f:fb:1d:13:9d:fe:
         8c:af:9a:d2:28:ff:3c:06:c0:43:4c:07:19:2e:18:f0:e2:c8:
         9a:f7:af:d9:cc:00:41:6c:c6:8d:3e:24:e2:55:44:39:12:fb:
         06:9b:dc:2d:78:9a:cf:96:7d:fd:48:82:fd:5b:10:9f:20:da:
         fd:68:e3:1f:77:e6:b1:e6:a6:85:b6:cd:f7:ed:2d:14:a8:40:
         0a:4d:80:34:b5:0b:bb:8a:ea:56:f9:44:9d:5e:5a:d8:83:f8:
         0b:46:5d:86:c3:80:c7:a7:06:da:96:a8:b7:88:5c:be:a5:7c:
         16:74:9f:54:98:f6:b3:c0:64:0d:88:fd:71:e5:66:10:70:07:
         09:c0:a3:a5:2d:9e:e0:81:cf:84:50:5b:e3:62:8f:7d:fb:0f:
         96:e3:5b:41:30:c9:ef:d7:35:13:a5:50:c6:26:f4:9b:f5:28:
         7b:52:ba:ad:bc:be:3d:fc:99:b7:6a:59:a0:c4:e2:92:fa:98:
         8c:46:a9:6c:e6:07:b6:ea:93:ac:00:cb:19:a1:48:c9:fe:64:
         ae:66:7c:46:9a:a7:5e:85:e0:48:fd:2d:3b:45:6d:12:7e:44:
         60:50:f0:6f:df:b2:4b:85:d4:75:57:93:64:39:cc:f7:a4:3f:
         a3:d0:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:15:54 2026 by rpki-client