Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          TAVD7FlX18wsHEbovZdNOuu+pTOKEfy/EzJM/djVfzI=
Subject key identifier:   C8:C1:C0:2D:09:46:C6:63:FD:5B:66:2B:87:FF:8D:68:2E:05:26:25
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       01A020558ED4AC7E18E5C2AA311A26166BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          023B
Signing time:             Thu 20 Aug 2026 18:01:12 +0000
Manifest this update:     Thu 20 Aug 2026 18:01:12 +0000
Manifest next update:     Fri 21 Aug 2026 18:01:12 +0000
Files and hashes:         1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (hash: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=)
                          4: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: G+8wPHh2UvCkSsI4okuPHV2W2gxHsEGHbowiq6HM6R0=)
                          5: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          6: cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (hash: vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=)
                          7: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:55:8e:d4:ac:7e:18:e5:c2:aa:31:1a:26:16:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: Aug 20 18:01:12 2026 GMT
            Not After : Aug 21 18:01:12 2026 GMT
        Subject: CN=c8c1c02d0946c663fd5b662b87ff8d682e052625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:7e:98:ce:7d:be:46:36:cc:2b:71:f5:0a:
                    10:8e:f8:40:ff:37:56:bf:25:8f:4c:a4:11:2f:b7:
                    b0:60:05:0d:bb:23:16:5d:54:69:17:1e:34:60:bf:
                    cc:a5:01:f9:07:95:2c:1d:8a:d0:d9:e7:a0:52:f0:
                    cb:2a:92:5a:2b:f2:80:f6:d5:65:f4:c8:9d:49:4a:
                    b6:23:2e:2b:fe:e1:ec:0a:7d:c0:24:3d:4b:53:b1:
                    13:c8:53:db:2d:bc:5c:6b:9f:71:34:01:94:64:7f:
                    a4:8b:7d:9c:d2:41:90:fb:48:a3:b3:79:2b:87:7b:
                    4d:4f:9e:f7:3e:bb:c1:b7:9d:fa:5f:73:59:26:29:
                    b8:81:cd:9e:72:ca:52:1f:13:22:32:32:7d:95:84:
                    a2:14:1c:5b:3b:f9:45:d9:a2:b9:9d:aa:ea:68:98:
                    5b:35:dd:0c:31:68:c6:42:64:59:0f:6b:14:fd:0c:
                    15:2a:d8:27:80:7b:34:f4:73:aa:52:ac:ab:5e:76:
                    15:2f:b5:67:fa:3a:be:3c:b6:c2:22:04:60:a8:71:
                    0a:3c:c9:00:77:49:b9:eb:6d:6e:39:e0:7f:0f:1b:
                    49:9d:01:2b:c7:f4:c7:2f:06:c4:f9:87:11:cf:8b:
                    6e:79:9f:dc:09:5f:3d:3f:8a:ca:cf:0d:a5:76:6f:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:C0:2D:09:46:C6:63:FD:5B:66:2B:87:FF:8D:68:2E:05:26:25
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:d8:58:ef:0a:22:6e:fa:86:5f:59:34:a5:e8:53:a0:03:
         52:27:88:12:ff:fe:2b:3c:41:ff:0a:84:8d:4e:81:1e:a0:43:
         31:34:91:d2:56:07:e5:d7:37:61:d2:26:4d:bf:40:73:19:f0:
         db:71:42:5b:02:1c:2d:dc:bf:de:8b:9a:f1:fc:b9:e4:fa:be:
         6d:14:bc:fd:88:80:ed:94:2a:69:17:b0:e7:b1:db:15:29:60:
         b2:ed:6a:7e:f8:0d:74:4b:96:2e:fb:f1:3c:e6:b9:6e:ad:b9:
         89:f6:d5:e4:6a:39:64:70:2a:38:23:50:af:35:fd:ab:be:c5:
         7f:7a:ff:31:0b:b1:9f:f9:45:37:f5:a3:38:2d:ec:d7:46:35:
         e4:a5:b0:c7:3f:22:38:de:2f:c9:e7:6a:37:54:bb:9e:57:ea:
         0e:98:15:30:ab:94:12:f7:9b:52:93:b9:dd:16:c2:50:b1:63:
         0a:d6:f9:f0:89:34:68:f1:aa:f6:0a:c6:a8:88:64:b1:b8:51:
         4c:46:3c:30:70:7e:51:fb:36:33:5d:76:71:f7:77:c6:2b:8c:
         51:58:62:b3:97:94:36:07:de:15:f5:3f:7f:00:9a:9a:15:82:
         92:a7:ee:3f:9c:79:18:f6:b3:a7:c7:2a:ca:d3:35:76:71:3c:
         49:d9:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:02 2026 by rpki-client