Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File:                     xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier:          hfEzW+8bueHE1XQtFPWts55dJP4ylZZwzU/Tzaxd1fU=
Subject key identifier:   6A:12:85:1D:57:AC:34:6E:31:7B:76:F9:57:79:F6:EF:E7:57:46:31
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer:       /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial:       01A03B27F79673F1D91D33B7EDE30B9E6AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number:          07A8
Signing time:             Tue 25 Aug 2026 23:01:10 +0000
Manifest this update:     Tue 25 Aug 2026 23:01:10 +0000
Manifest next update:     Wed 26 Aug 2026 23:01:10 +0000
Files and hashes:         1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: 1YSyXtCcE84W//8sa3cSBfgQaJL83j6JpydkMEDgIXQ=)
                          2: zzi8zjGe28pTyTWtNNeVC8-_dWE.asa (hash: QeR+Juy6P7hMJ8A5+I8ru+6te5JuUSLSPP0C9C3wehI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:27:f7:96:73:f1:d9:1d:33:b7:ed:e3:0b:9e:6a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
        Validity
            Not Before: Aug 25 23:01:10 2026 GMT
            Not After : Aug 26 23:01:10 2026 GMT
        Subject: CN=6a12851d57ac346e317b76f95779f6efe7574631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:a6:5d:6f:86:87:48:34:8f:70:62:cc:05:
                    bf:38:2a:95:ca:2b:82:27:1f:02:92:cf:ea:8f:bc:
                    2a:e3:f4:87:48:62:ca:4e:d0:8d:90:05:e7:57:f9:
                    4a:25:c5:ca:e1:18:c8:e0:57:70:48:15:6d:9f:8d:
                    fe:dc:84:b8:ca:c7:2c:91:35:12:a3:c7:a2:17:db:
                    a1:17:35:bc:9b:77:76:52:60:44:51:f4:8c:23:79:
                    3e:3e:12:d6:1d:8e:b1:f4:70:5d:de:b2:a6:53:97:
                    21:68:1c:18:75:32:44:ed:ce:3e:df:28:e5:14:db:
                    00:51:e2:a4:a3:15:c9:cb:bc:d2:42:b2:8a:e7:95:
                    3d:56:45:55:2e:4f:7b:43:4e:df:0d:fd:2d:a9:e9:
                    ef:e7:5d:6c:f1:4f:9b:26:df:dd:81:6e:7c:d9:4c:
                    10:b4:2c:2a:3b:94:db:c7:aa:62:56:1a:c8:ea:24:
                    11:5a:0a:3c:46:52:24:71:d8:d1:02:96:47:ff:96:
                    f4:68:9e:15:65:98:b1:bf:22:65:be:64:48:ea:22:
                    9a:0f:b1:75:3b:a9:61:64:9a:a9:68:51:a4:e4:b8:
                    08:d0:6c:ff:62:9d:fc:a3:c4:d4:e5:19:87:f9:25:
                    61:62:43:a3:2f:ce:a5:99:d0:ce:be:c2:a7:05:25:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:12:85:1D:57:AC:34:6E:31:7B:76:F9:57:79:F6:EF:E7:57:46:31
            X509v3 Authority Key Identifier:
                keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:13:e5:c6:bd:02:e0:5b:39:42:ed:c0:00:6a:a7:4d:b6:
         cb:b4:8c:55:1c:46:62:39:ed:a0:f4:82:d2:54:d0:c4:ce:21:
         6f:e5:a7:5b:d5:d1:22:6a:07:9a:8c:1d:ef:33:f8:95:15:f1:
         27:9b:c7:a9:d8:5a:6d:8c:97:8b:40:32:ce:97:2a:33:d9:72:
         a7:25:a3:dc:20:63:16:27:f5:93:7b:7f:65:34:51:86:62:ec:
         2e:ee:95:43:cf:b9:65:15:47:1c:c6:84:00:8c:6f:4c:4c:cc:
         9d:3c:60:6d:6e:b8:52:b4:7a:76:b0:a5:9a:15:31:e0:a3:17:
         16:be:31:4b:6a:32:6c:fc:d5:22:f5:8c:05:66:e0:10:7d:c9:
         e8:c5:ef:bc:eb:d2:c0:47:a1:88:bb:93:55:86:fa:eb:b5:69:
         0b:a4:de:6c:08:56:e6:d2:32:2e:db:57:33:6b:ef:52:f2:23:
         94:22:b9:4d:2e:b7:31:ef:51:38:f9:b1:98:ea:39:e4:1b:ab:
         ad:92:1b:74:85:46:cc:b9:dc:17:07:24:a3:3c:18:d4:43:bb:
         6f:d6:0b:1f:01:c3:f7:17:32:7f:25:16:31:e6:00:1b:80:25:
         2e:a7:8f:b9:06:ad:96:c1:d9:cd:db:1b:23:3b:d3:90:2f:3c:
         ea:6e:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:06:49 2026 by rpki-client