Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          cP0FoQNfSGQ7kCk1VyoZ3csOIzTwBnbIEVAdCi4bz84=
Subject key identifier:   E1:C3:28:66:A1:88:4B:4E:2D:F6:05:8F:19:B2:A8:62:DB:D2:03:29
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       01A023FB2C645AB1A439B6C748A91BA1BC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1A17
Signing time:             Fri 21 Aug 2026 11:00:58 +0000
Manifest this update:     Fri 21 Aug 2026 11:00:58 +0000
Manifest next update:     Sat 22 Aug 2026 11:00:58 +0000
Files and hashes:         1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: PTnna+XglihM8f4sO/rOZfAkdrVeM4ufDpS3nw5jIS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:23:fb:2c:64:5a:b1:a4:39:b6:c7:48:a9:1b:a1:bc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug 21 11:00:58 2026 GMT
            Not After : Aug 22 11:00:58 2026 GMT
        Subject: CN=e1c32866a1884b4e2df6058f19b2a862dbd20329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:0a:fe:9d:03:ed:f2:59:db:89:4d:8e:9e:
                    a3:e2:c8:c3:a7:9b:7c:7f:be:ef:92:d3:04:b5:6b:
                    89:97:fa:ea:ae:32:96:f9:70:65:85:65:b6:d6:7c:
                    49:c1:14:46:cd:2c:d8:12:dd:f2:0f:05:4f:a9:64:
                    b6:81:f2:f0:2f:0e:b9:7d:a5:01:37:e9:f6:ce:ab:
                    1d:ed:c8:6c:b5:a7:63:e5:53:dc:ec:d5:22:c4:8a:
                    76:4e:14:4e:fb:1d:95:64:34:d4:9c:63:15:48:4c:
                    9e:ce:49:e6:58:7d:05:ec:eb:b5:f3:7f:7e:be:60:
                    1b:65:8b:e5:f5:33:51:b3:74:74:55:6e:03:6f:ea:
                    bd:b9:8a:77:e1:2d:a3:6c:cd:5a:11:43:73:7e:68:
                    17:6c:2b:2a:97:b1:c9:ca:86:f8:d0:71:0d:91:a7:
                    01:82:ed:c4:ea:6d:73:5d:ee:65:67:b6:59:fd:52:
                    56:fd:a6:78:c2:b8:61:7c:10:8c:c4:12:d5:63:28:
                    93:b7:90:d9:70:65:0f:df:a1:79:4d:d3:9c:01:01:
                    78:1a:66:5d:3e:a8:f3:bc:af:6e:2a:23:8d:28:f3:
                    a6:16:96:3e:fb:4b:50:ec:f9:07:92:96:e2:06:71:
                    49:07:8d:f5:0e:6b:8c:d0:e5:41:72:7f:b1:25:bc:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:28:66:A1:88:4B:4E:2D:F6:05:8F:19:B2:A8:62:DB:D2:03:29
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:0f:d1:85:de:28:d5:36:d3:51:e8:33:72:02:be:18:b2:
         f7:f8:05:e7:62:83:35:59:0d:ae:ef:59:fc:98:5e:b2:c8:3c:
         01:b0:e4:bb:38:7a:f9:73:bc:34:29:8f:79:ae:5a:0f:12:58:
         39:3b:e4:71:72:fb:7a:06:22:d7:45:d5:64:89:5a:85:5e:34:
         a5:94:8a:3b:9e:1b:98:54:42:fb:50:b5:a4:77:00:fe:4e:0c:
         65:ac:d9:fe:41:76:6e:4c:ed:8b:bc:0a:6f:83:88:c5:8e:e6:
         d9:3e:f4:10:b4:67:a9:b5:3d:77:00:55:ce:74:da:06:5b:6f:
         ab:69:24:72:12:ee:55:03:d2:09:c3:9a:ef:56:32:69:2c:2f:
         be:b6:e0:fc:7a:cf:d2:22:1d:55:57:6e:24:97:1d:16:51:26:
         3c:4f:5b:1c:2f:6e:c8:65:94:5f:2a:ab:b8:9b:ab:d6:44:8d:
         2b:e9:92:7f:5e:f0:e9:fa:99:46:a2:3d:7f:7f:74:74:15:05:
         70:62:3e:8f:a0:0c:8c:69:88:98:ba:22:d8:f5:a7:89:34:13:
         48:22:62:f8:d1:f7:83:a4:26:78:e1:1d:41:7b:ce:28:e7:33:
         a6:96:20:cb:ef:81:80:37:cd:4e:3c:1b:50:c8:87:b9:7f:7c:
         d3:fd:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 14:33:13 2026 by rpki-client