Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File:                     0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier:          oJli0HDuopByxXHd1qcqaisaOBtD6s99l4Tn2KVsjdE=
Subject key identifier:   C5:4E:73:DF:46:A7:69:9A:AA:68:EE:98:3F:92:98:4A:26:77:E1:05
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer:       /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial:       01A03C70FD831E2ED730474898C1C4D59A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number:          019D
Signing time:             Wed 26 Aug 2026 05:00:32 +0000
Manifest this update:     Wed 26 Aug 2026 05:00:32 +0000
Manifest next update:     Thu 27 Aug 2026 05:00:32 +0000
Files and hashes:         1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: tJG52icuMRstQD6RAfjFxxj22CMGxK2Ytdf+5pe5woY=)
                          2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:70:fd:83:1e:2e:d7:30:47:48:98:c1:c4:d5:9a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
        Validity
            Not Before: Aug 26 05:00:32 2026 GMT
            Not After : Aug 27 05:00:32 2026 GMT
        Subject: CN=c54e73df46a7699aaa68ee983f92984a2677e105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:11:ba:4a:27:3d:33:82:40:ce:39:59:23:00:
                    b1:72:4c:29:64:2a:e0:56:ab:7b:7b:eb:94:7b:5f:
                    38:87:3b:12:55:14:b3:f4:fe:a4:15:92:bc:c2:79:
                    3d:42:db:03:ef:32:db:f9:3b:fa:53:0f:f0:b8:15:
                    6d:44:f4:49:73:10:ea:69:17:cb:2d:62:e9:bb:18:
                    cb:c4:0a:24:e2:61:8e:b6:ec:98:04:25:1b:00:81:
                    a4:2c:14:eb:e5:2e:e7:b4:38:e7:56:56:b9:82:9b:
                    00:b3:87:41:43:ec:7e:15:42:cc:ab:e5:e7:b9:01:
                    4b:3b:ad:74:4d:2e:8a:0b:19:f3:15:dc:86:9c:3d:
                    8e:b3:2a:b6:39:58:20:9d:22:69:87:7e:85:f3:cb:
                    d9:f1:2d:e2:5c:d9:49:b8:9d:bc:c2:dc:c0:4c:7b:
                    0a:e6:7a:0a:cb:28:29:0e:73:bf:3f:ec:31:6c:e7:
                    56:92:48:7f:85:a1:b8:f3:29:9b:16:95:1f:76:a1:
                    5d:e3:18:bc:30:8e:c2:b2:ae:c2:ca:d6:23:f8:be:
                    fc:e5:f1:54:09:b7:4b:3c:70:82:cb:ff:50:64:ee:
                    28:0e:a4:69:bd:8c:f9:71:5c:7d:01:fb:3f:0c:7c:
                    fc:ed:a7:ed:2c:66:bf:8c:58:be:7d:84:0b:b2:6f:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4E:73:DF:46:A7:69:9A:AA:68:EE:98:3F:92:98:4A:26:77:E1:05
            X509v3 Authority Key Identifier:
                keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:f9:f5:1d:15:38:ce:98:1e:d7:0d:5c:39:37:3a:7d:15:
         d0:c0:c8:f4:15:96:81:17:a9:5f:af:ee:14:d8:db:5b:ce:ca:
         9b:8a:7c:2e:b9:82:af:dc:48:ed:6b:c7:db:f4:52:cc:14:f9:
         17:4b:eb:c7:3b:81:c3:05:6b:73:f1:7c:b1:e8:c8:b7:40:3c:
         4a:c4:bc:57:58:35:47:6f:9a:2f:ec:92:9e:58:15:46:47:f0:
         af:83:5a:ea:35:65:38:95:06:14:c3:4c:6f:c1:51:2b:dc:d7:
         0e:35:5c:99:24:9f:95:ba:d7:b6:a6:32:f6:e0:5a:31:3f:6d:
         81:d7:ae:e0:b8:ff:86:86:e6:58:f3:ae:9b:5f:b7:e1:c2:9a:
         cd:e5:b1:7c:30:9e:22:6b:7c:a3:7f:68:7b:57:18:b9:35:b4:
         e2:9a:54:b2:71:bd:90:85:9b:f3:1a:89:8f:3d:33:5e:98:9f:
         58:79:f2:98:41:66:fb:a9:af:f2:1a:eb:f5:a6:86:ba:6d:d9:
         8a:be:59:69:d2:20:61:51:07:29:4a:c5:a4:40:17:1f:02:59:
         9a:34:bb:db:49:5a:96:e3:61:6f:9b:6c:dd:f5:b4:ac:9c:eb:
         72:ed:fa:ef:46:66:13:98:eb:3e:8d:80:a7:c9:e8:56:87:a4:
         eb:0c:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:09:01 2026 by rpki-client