Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File:                     1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier:          /EUiyMpnLGE2kNMrJCkkK7eAe8CPD+77y1qJceAKQow=
Subject key identifier:   C8:F7:C4:4C:1B:36:6D:59:CB:4B:C7:1E:11:90:D2:0E:6B:8D:B2:63
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer:       /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial:       01A06491E4623437E3556114D88BA3653EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number:          055D
Signing time:             Thu 03 Sep 2026 00:01:17 +0000
Manifest this update:     Thu 03 Sep 2026 00:01:17 +0000
Manifest next update:     Fri 04 Sep 2026 00:01:17 +0000
Files and hashes:         1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: eBZEFjbUCQXulVq/LzqQtZCUE5S3QQlK/Bj2ahJCM9I=)
                          2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
                          3: 8eSRY56ivoj5PMJbAEpCd7XTFLw.roa (hash: Y+Fe7VR6p71IHtGPJcZTT8CUnj4YW5cc/AzcKvuJhU8=)
                          4: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
                          5: AZRK-j9qSANRZgLlbj0gpiOoQ2o.roa (hash: EHDS89gQFO842F7rzI0q4fud5zSK8wKKgqf9WMWO2tM=)
                          6: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
                          7: UC4tZ5hkJUOpAnwxabpTgyQ2EE8.roa (hash: kjmvN7g9NCX/FlWfDB0I3iBUPCm9EjnhIQSPXHhQftQ=)
                          8: mlQ0eZD4XGZn0NvdloCkct1SMYE.roa (hash: a5oufT2xaopI397USuZzHyKO2yD9R84YEpLqxJ0tHqo=)
                          9: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
                          10: pKmHj_UwSowJL7JtZ3ZsbqaOaAw.roa (hash: sJJU0c0HzgrlO4mmoDliyfZm6hgydL4GUuwlpgThsI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:64:91:e4:62:34:37:e3:55:61:14:d8:8b:a3:65:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
        Validity
            Not Before: Sep  3 00:01:17 2026 GMT
            Not After : Sep  4 00:01:17 2026 GMT
        Subject: CN=c8f7c44c1b366d59cb4bc71e1190d20e6b8db263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:2d:67:43:f4:6a:e2:59:4a:55:4e:0c:a6:
                    49:ee:f6:51:a8:8d:81:6f:42:23:71:78:48:23:02:
                    63:60:82:5c:1e:e6:28:35:f1:a0:35:f4:45:02:e3:
                    3e:fa:29:01:da:2e:a5:13:54:ec:3a:14:2d:3c:c7:
                    37:d4:18:e6:f7:e9:76:f2:db:ad:97:49:4a:0a:f6:
                    db:bb:d9:f0:95:70:60:ee:d0:08:3a:d4:0a:01:5d:
                    92:99:3c:4b:f4:d9:bb:ee:20:a8:8c:c8:17:79:3b:
                    41:82:3d:df:8e:32:a8:3f:99:a0:d3:08:89:49:09:
                    85:9b:e7:06:c3:f4:11:44:fd:1e:e8:41:03:67:41:
                    70:16:a9:98:ae:6e:84:bf:15:49:ca:eb:a5:a0:a1:
                    7b:0d:55:e4:d2:ed:03:cb:25:1b:be:aa:35:10:f5:
                    47:59:67:80:19:79:b4:82:00:fd:0e:97:2f:cc:5b:
                    72:53:72:24:5a:8d:eb:4e:a1:3a:21:9a:99:d1:cf:
                    ff:7f:a1:b8:ec:fc:05:ad:c6:37:0b:56:54:5c:a4:
                    30:90:4e:41:e3:80:3f:a7:9e:ec:b0:64:17:1c:d3:
                    9f:d4:b5:18:ee:bf:9b:d1:20:81:ec:2e:95:64:44:
                    59:42:10:f2:59:ee:4e:6f:d1:2a:b1:4d:d0:4b:d3:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:C4:4C:1B:36:6D:59:CB:4B:C7:1E:11:90:D2:0E:6B:8D:B2:63
            X509v3 Authority Key Identifier:
                keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:c4:01:d1:e6:4a:24:c4:42:42:9f:7b:8d:8f:db:0b:99:
         76:c4:d8:b4:7e:41:f4:b2:83:5f:a2:07:c9:73:de:df:6e:53:
         09:80:27:47:1b:b4:89:ef:56:65:d4:2a:f9:96:4d:ea:db:72:
         30:27:34:39:f2:20:fd:5b:ff:cd:74:80:8d:34:ad:40:0c:70:
         df:00:a7:49:4c:da:82:cf:dc:ae:e0:0c:0a:dc:10:b6:0d:56:
         ff:d6:68:cf:33:46:5c:27:20:09:05:7c:73:0b:e9:5f:8a:8b:
         55:b6:0d:c2:94:96:3a:52:0e:ac:34:ea:91:22:c6:80:cb:93:
         59:76:50:ee:ea:b8:e5:51:4f:e1:e8:79:87:22:02:0e:43:b1:
         49:12:64:7f:98:59:d8:71:ea:94:4b:88:51:7c:91:99:7d:3e:
         da:c6:a8:c9:e9:ad:f5:f7:6e:de:90:c7:3f:75:44:65:36:d5:
         1c:aa:a9:30:2d:82:df:bc:90:33:c0:76:f3:51:cd:37:bc:39:
         2a:36:d1:e8:63:ad:5e:58:7c:12:b9:f0:70:45:3b:26:62:67:
         62:53:d9:af:7d:2e:b9:52:5c:c2:09:bf:89:0f:30:9e:56:95:
         72:4f:da:4a:5e:4b:0b:a3:73:2e:74:b1:66:e5:c3:e5:44:4a:
         e2:91:8f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 06:18:37 2026 by rpki-client