Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          W52snOj9GS21kmfy/45sQw8W7G9i4wIWiC52voWFYKw=
Subject key identifier:   F6:2C:21:CD:27:83:18:CB:00:BF:87:38:8F:D5:F9:B5:12:00:FF:BC
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019FFDC9A03091C06A24BC07EC6A43E218E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 01:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 01:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 01:01:17 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 75PaHo00LPbiLWZ3+0XOF7M347REFYlMQPq/QovHs1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:c9:a0:30:91:c0:6a:24:bc:07:ec:6a:43:e2:18:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug 14 01:01:17 2026 GMT
            Not After : Aug 15 01:01:17 2026 GMT
        Subject: CN=f62c21cd278318cb00bf87388fd5f9b51200ffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:c6:0d:55:26:6d:c1:83:a5:ad:9b:3f:9f:
                    a6:5c:95:eb:1d:2e:9f:55:cd:9f:3e:77:4d:01:b2:
                    52:ee:7a:57:d7:c3:b4:c7:f4:65:51:ab:26:8e:a4:
                    95:24:33:8d:cd:ae:28:e2:5e:df:76:4a:60:d8:30:
                    0f:66:67:8b:48:0c:8a:23:4a:ec:62:ef:b0:b8:73:
                    65:bf:e0:b9:07:c6:10:ab:7c:95:9d:68:ac:47:28:
                    bf:f2:ea:85:00:12:c9:f2:d0:66:29:b4:21:c0:21:
                    b7:e9:38:60:d1:c1:de:06:cf:ea:c7:ce:5e:91:90:
                    72:d8:60:ea:1f:5e:7b:66:0f:af:d4:e7:97:7d:63:
                    b8:da:10:fe:d2:48:91:7c:22:f0:47:7b:46:d2:ab:
                    be:10:40:ae:08:52:71:8c:66:f7:58:90:54:63:5c:
                    87:4a:97:aa:15:4b:ea:1f:41:9b:63:a2:cf:40:c9:
                    d2:a2:cb:eb:4a:32:01:d7:86:0f:5b:8a:86:3f:57:
                    8a:f6:bf:e9:91:c2:bf:14:4b:07:7a:b4:c9:59:91:
                    97:7e:de:90:61:1b:3f:62:46:4c:39:85:12:11:ea:
                    53:1e:0d:c2:76:58:03:99:3a:55:04:b7:c1:62:3c:
                    54:9b:40:cd:4f:f1:d6:e2:e2:b7:32:84:1d:23:c0:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:21:CD:27:83:18:CB:00:BF:87:38:8F:D5:F9:B5:12:00:FF:BC
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:fc:d1:86:35:81:d8:69:fb:39:bb:ac:19:0e:e3:b6:9e:
         60:95:85:5b:40:db:85:94:e3:c6:29:55:7d:da:df:fb:d5:8e:
         f7:5b:02:04:c7:dc:4f:ab:cd:61:2c:75:36:37:3d:ed:6a:29:
         e5:06:dc:88:70:f9:d6:80:4d:39:29:c9:30:0c:37:47:a0:63:
         e9:85:25:c8:1b:a1:f2:3d:97:1b:e0:6f:24:49:ef:96:8f:37:
         0d:99:2a:bd:40:26:eb:7d:04:55:db:4f:61:ac:fb:70:cf:5f:
         12:fb:ee:0f:56:05:f1:8a:14:b7:95:84:2b:b3:c2:d0:1d:a3:
         b0:56:e6:cf:b8:e8:50:70:ad:07:f6:75:de:0a:e1:fc:ab:ff:
         0d:37:33:8c:a8:e5:2a:d2:99:d6:84:5d:2d:53:ca:52:28:fb:
         a1:dd:3f:44:c9:48:6b:81:bf:95:af:8e:96:31:6e:a0:9f:31:
         04:3c:50:86:4b:c7:e2:6f:52:e7:ea:fb:82:46:d1:b0:18:dc:
         17:7d:a8:12:52:37:80:49:bc:5b:65:6c:bb:80:05:db:76:0d:
         6f:99:82:f5:ca:da:e1:15:d1:f8:05:48:c4:89:08:2f:0d:46:
         13:6c:55:6f:12:11:4e:c8:d9:bb:d3:30:59:89:a8:78:92:15:
         d6:1e:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:33:01 2026 by rpki-client