Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File:                     E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier:          uYirtdeE+W3pcYsz2I4X+BybG/2P72EVfKr/PAdNTl4=
Subject key identifier:   B0:4A:9C:20:4B:A5:5F:BF:7A:B4:12:24:AC:E2:BA:1F:18:23:D9:AB
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer:       /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial:       01A00138830B02CB527B33D13D5C5DAD03B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number:          092A
Signing time:             Fri 14 Aug 2026 17:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:15 +0000
Files and hashes:         1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: kZNFPi5F84oEYhEV+kXKScJGl8eu8UrMr+4PX6gw6qg=)
                          2: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:83:0b:02:cb:52:7b:33:d1:3d:5c:5d:ad:03:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
        Validity
            Not Before: Aug 14 17:01:15 2026 GMT
            Not After : Aug 15 17:01:15 2026 GMT
        Subject: CN=b04a9c204ba55fbf7ab41224ace2ba1f1823d9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:5e:3c:a9:c4:00:77:80:78:76:06:59:46:
                    8a:74:c6:c4:d8:6f:84:87:2d:2f:4f:c6:dd:a3:8b:
                    eb:dd:df:89:32:53:92:a2:13:6d:50:8b:38:33:a6:
                    63:4c:64:42:29:23:7e:1e:5d:f8:ca:59:98:19:e8:
                    fd:2b:19:1a:28:14:3e:e1:4a:f1:6d:d5:9d:f4:b4:
                    a9:55:d6:04:74:a5:cd:46:c2:69:d4:21:25:b2:fa:
                    83:16:b4:d0:30:b6:be:b3:c9:7b:df:c8:9e:32:bc:
                    b6:15:42:4f:67:46:8f:e7:9f:50:0c:f2:1f:c7:12:
                    af:c7:fc:f2:1c:b4:ec:eb:fc:ac:83:0d:fd:73:4d:
                    e5:63:f7:ea:2b:56:c9:5b:6c:9b:44:b8:50:cd:d0:
                    57:fd:0d:61:06:7f:a8:77:ff:bf:7e:f5:03:d2:12:
                    e8:5d:f1:9a:84:c9:d3:2e:8c:7a:b7:99:d3:ef:f4:
                    f7:d1:c8:f5:9e:ec:5a:c1:0b:d4:67:82:55:ef:75:
                    1d:0a:34:b3:2f:7a:ad:d5:6c:14:f3:0c:f6:e6:ee:
                    6b:5c:26:bb:aa:8c:37:61:bc:4f:5e:92:37:89:65:
                    bf:d3:4b:9d:13:e1:b2:8c:6e:e3:34:5d:e3:69:c0:
                    51:e4:55:39:6d:b2:09:91:be:9c:64:2d:ad:08:7b:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:9C:20:4B:A5:5F:BF:7A:B4:12:24:AC:E2:BA:1F:18:23:D9:AB
            X509v3 Authority Key Identifier:
                keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:4a:ff:df:74:0a:f4:7b:17:99:c5:10:b5:52:cc:a2:4c:
         c6:91:fa:dd:eb:13:05:34:5c:07:29:1d:22:d0:df:e6:7a:92:
         56:d8:4b:41:9a:ff:29:d3:4a:ad:b1:19:23:55:3e:4a:b1:5f:
         26:cb:a5:d0:f0:49:70:17:d2:0d:b3:d7:62:8c:56:04:3b:cd:
         e9:bd:09:36:87:17:8c:a4:28:20:9a:45:19:a8:81:83:34:6f:
         37:7d:e4:31:4f:36:ae:45:30:3d:84:07:e9:f3:72:68:0a:e9:
         5c:c8:65:7b:b9:a6:eb:b4:22:2f:f6:59:21:46:9d:f9:e1:13:
         ff:67:e0:18:5e:00:4b:c3:d8:27:55:bc:83:93:ac:da:2e:b8:
         ab:ef:ba:26:97:ff:7a:8c:c7:9d:d9:be:5d:9d:74:f2:24:b2:
         25:a9:4a:ee:72:ce:7b:e5:18:36:63:cc:4d:5d:c3:59:07:5f:
         2a:2d:28:d0:d4:ad:41:54:91:60:d2:76:54:a9:53:1e:2f:31:
         09:e9:3b:a7:be:47:65:a5:b3:ef:ff:71:26:88:bc:58:69:cd:
         6f:f3:9e:d6:a0:a7:77:4e:d0:0a:40:07:35:0c:cc:86:df:52:
         23:ac:f9:54:e3:82:cd:6c:21:34:88:0c:3e:20:ae:b2:8d:73:
         55:97:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:26 2026 by rpki-client