Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File:                     maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier:          fjRHRmqZUwt6HM7yp0tN6EwcMkpb0UtcFnKtm5iWSZA=
Subject key identifier:   D9:D0:7E:90:7C:44:52:AE:09:84:D4:D6:DC:39:45:15:58:45:32:27
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer:       /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial:       019FFCEE075955A7B5B020034BBA34998C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number:          0813
Signing time:             Thu 13 Aug 2026 21:01:25 +0000
Manifest this update:     Thu 13 Aug 2026 21:01:25 +0000
Manifest next update:     Fri 14 Aug 2026 21:01:25 +0000
Files and hashes:         1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
                          2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: ywuWb3jg5ccSQAWukPIqqcvS+YBVTFrymhAGrHPZ7dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fc:ee:07:59:55:a7:b5:b0:20:03:4b:ba:34:99:8c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
        Validity
            Not Before: Aug 13 21:01:25 2026 GMT
            Not After : Aug 14 21:01:25 2026 GMT
        Subject: CN=d9d07e907c4452ae0984d4d6dc39451558453227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:46:1e:3a:20:28:59:b9:28:71:67:be:69:
                    09:f8:9b:48:57:02:1a:02:8b:9e:eb:ce:5d:05:57:
                    fc:7e:0a:ea:46:c2:81:dc:8b:e2:72:53:fb:78:9a:
                    32:d4:ea:f2:26:fa:ea:ef:60:e1:41:bf:1d:cd:d7:
                    37:10:aa:a1:da:ac:57:0c:49:da:74:53:15:67:a6:
                    4b:87:fb:37:4d:bd:30:4a:0c:28:3a:ea:be:6d:32:
                    2f:b5:ad:26:90:4d:09:fd:c9:32:ee:9b:55:d1:53:
                    73:cb:e5:c9:97:46:5a:08:7f:3c:6b:c2:ee:50:9a:
                    fa:69:62:bd:d1:d0:87:67:c3:0f:b0:fd:a4:5e:2e:
                    16:7d:a3:7b:f2:bd:f8:86:d1:e2:a1:7f:c4:63:28:
                    74:73:d1:46:21:c6:68:44:10:7e:60:21:7a:d4:37:
                    b1:80:95:77:c9:2c:a5:0e:1c:1b:f5:d8:be:78:ed:
                    4e:c8:76:3d:24:de:cf:02:22:3d:4d:61:9c:35:7f:
                    19:20:61:34:61:3e:98:30:bb:c2:35:0c:0f:9b:38:
                    dc:0b:0f:5e:e4:7f:18:61:62:54:41:2b:fa:7e:de:
                    ae:79:36:57:c8:99:55:34:32:f4:33:0e:6d:8f:84:
                    c8:c0:ee:a2:fe:5e:b8:31:79:fa:d2:6f:52:68:b4:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:7E:90:7C:44:52:AE:09:84:D4:D6:DC:39:45:15:58:45:32:27
            X509v3 Authority Key Identifier:
                keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:8f:49:a1:2c:bc:50:f1:39:14:f8:f6:ad:d7:0c:2c:09:
         c2:3c:24:ef:fd:8c:96:f2:e2:74:93:72:35:e8:69:4c:2d:a7:
         e9:b5:62:f6:be:20:a0:73:b5:0e:83:13:fa:31:7f:f5:fe:f2:
         12:dc:e3:ec:e9:96:9e:db:3c:59:b4:b8:7d:05:e7:13:6c:41:
         cd:5a:92:d0:1e:59:92:da:32:77:77:6b:9a:b4:4f:a0:d7:d9:
         f5:98:8a:0f:99:52:e0:da:47:2a:5f:b0:f1:cd:4c:25:d2:8a:
         c6:5b:81:bf:65:b6:7a:fc:25:97:6d:a6:61:db:61:c2:9e:81:
         92:54:23:29:41:39:2b:72:71:04:5a:88:0d:de:c3:8b:0e:ce:
         9b:a2:c9:8b:1d:74:86:15:90:bb:2f:1c:fd:d7:b3:a0:5b:de:
         c5:11:45:5b:1d:a8:36:03:aa:29:b8:d3:65:45:5e:e5:4d:ac:
         8b:8a:cd:ec:a7:0f:6c:96:0a:2b:57:e6:f2:9d:75:62:1f:51:
         9c:72:35:c9:2d:bd:b8:0c:88:5c:b0:74:38:ba:24:01:27:24:
         c8:69:37:42:b8:ff:15:e8:b9:7a:25:9b:7c:68:4d:ea:ff:b3:
         60:2e:61:8e:33:6d:aa:35:96:44:17:e7:41:b2:b7:16:c2:23:
         11:47:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:10:42 2026 by rpki-client