Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          eR35evj9avHYh0MYhRcPJB9cKEhpfRsyfSvhXmfT5cQ=
Subject key identifier:   E3:FD:EB:FD:4F:11:5C:07:75:3B:3A:25:6F:BD:CD:77:0F:F6:C6:E6
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       01A001A640DB82031BE5C3FC2BA825EE08B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          1A24
Signing time:             Fri 14 Aug 2026 19:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:07 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: aYUoA1oUx+HHpwbecfmYx9wiWvolFyQBCL/z33K62Jg=)
                          2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
                          3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
                          4: My2S5v6l75VknZ7EL2SiBdNBLt4.roa (hash: wEWt/qGUMsqIgdXHGGUBkhiVR/ctPqLfFTDFv5pXXM0=)
                          5: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:40:db:82:03:1b:e5:c3:fc:2b:a8:25:ee:08:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Aug 14 19:01:07 2026 GMT
            Not After : Aug 15 19:01:07 2026 GMT
        Subject: CN=e3fdebfd4f115c07753b3a256fbdcd770ff6c6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:ca:d9:bd:2f:fa:93:31:55:d7:90:4f:ab:
                    cc:9e:74:cd:fd:8b:23:b1:e6:89:a3:68:21:bc:b5:
                    f0:7b:5e:83:89:a0:3f:d7:55:e8:0e:3b:37:85:6d:
                    f8:71:0a:29:8d:58:18:6e:71:5e:51:ac:06:f3:68:
                    27:7a:c3:0b:ce:db:e8:e9:fe:3f:26:9c:fe:00:31:
                    3e:3f:d5:82:0b:5e:26:2c:c3:12:2b:b0:d2:7e:bc:
                    a1:f2:62:6a:13:47:4a:b6:24:62:b4:c4:b2:78:ce:
                    5f:4d:c6:f9:06:98:0c:69:f4:7f:2b:c0:31:c5:38:
                    1f:1d:ca:97:4a:21:45:29:a3:79:9d:b3:09:35:fa:
                    30:c6:aa:42:7c:a9:e1:9d:2f:14:62:f2:6a:8e:a2:
                    71:09:5a:12:5c:68:c9:68:80:0a:e9:4a:45:a5:b7:
                    e8:47:44:db:9e:f0:3c:95:ee:6b:e1:c3:02:2f:af:
                    d2:cd:98:cf:1f:f0:90:f9:7c:39:ae:d4:66:c3:03:
                    d2:87:07:0b:15:99:86:78:a6:30:b0:31:f1:9c:ab:
                    36:7e:cc:2b:1f:08:e3:ba:bb:52:ab:70:70:16:74:
                    16:ae:6a:33:6d:ef:eb:e0:4d:fd:0d:ca:22:de:cb:
                    f0:61:bb:6d:a0:3d:f2:5f:a9:0f:99:41:bb:ae:cd:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FD:EB:FD:4F:11:5C:07:75:3B:3A:25:6F:BD:CD:77:0F:F6:C6:E6
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:97:5b:84:64:1e:e0:6f:85:89:63:1b:2e:05:56:62:9a:6f:
         f4:43:07:c8:bb:5b:85:a6:ba:ac:c3:40:17:97:a3:21:9b:54:
         11:b1:3d:40:cb:be:40:0d:91:c3:38:c5:39:e4:b1:cc:3b:75:
         ea:97:0a:c9:8f:f2:76:a8:bf:66:af:f8:da:31:6b:fa:34:14:
         b3:af:2c:94:c7:92:5d:06:9e:8a:21:8c:4f:7f:9f:ba:c4:4d:
         dd:17:18:7d:6c:62:ce:77:ac:4d:e3:24:f8:e0:6f:5b:df:e4:
         de:0d:d8:e2:2a:2c:5d:cf:c7:44:02:da:3e:ce:35:28:cf:fc:
         65:3f:1f:bd:ca:7d:a9:47:6c:9c:9a:93:84:d9:11:58:32:99:
         ec:f6:37:0b:3b:de:7b:6c:9a:16:b2:ee:24:a3:b7:21:40:0f:
         5c:8d:7d:81:a3:70:97:9f:90:53:5c:a4:59:78:98:ae:bf:b1:
         3f:ab:a3:5a:71:da:0a:1b:e8:5b:d0:4e:0f:0e:83:ac:fd:62:
         37:17:99:66:35:a9:16:2b:38:b4:32:a9:75:85:cc:63:70:c1:
         45:0c:30:e0:59:38:31:2f:b4:42:56:8c:5b:58:64:4f:d9:35:
         fb:a6:96:6c:30:70:00:d6:82:cd:82:da:73:60:ef:c7:07:0b:
         bb:86:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:58 2026 by rpki-client