Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          HKyLD8ifL88oLvGFEY2rtpavpFwiStA7je9vQHGqo2k=
Subject key identifier:   47:48:A7:E0:49:3B:98:36:AB:35:94:A2:A8:26:FA:D4:74:69:72:4A
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       01A02AD981F67427065CCE5D66CC00F1E7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          155C
Signing time:             Sat 22 Aug 2026 19:01:32 +0000
Manifest this update:     Sat 22 Aug 2026 19:01:32 +0000
Manifest next update:     Sun 23 Aug 2026 19:01:32 +0000
Files and hashes:         1: Kt3WssTVExomZWHJCqXl8pbqTeI.roa (hash: sMdfEY5PN8jhtfsylFmunzan1olQaOOSvuDOe68g4ws=)
                          2: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
                          3: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
                          4: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
                          5: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: h83lHOlZO59T/8Hz+5aVHSoGyTI8mk2hwjLJwWrxnlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:d9:81:f6:74:27:06:5c:ce:5d:66:cc:00:f1:e7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: Aug 22 19:01:32 2026 GMT
            Not After : Aug 23 19:01:32 2026 GMT
        Subject: CN=4748a7e0493b9836ab3594a2a826fad47469724a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:83:14:8f:f6:e3:28:9f:58:78:d6:c4:20:
                    a1:1e:60:c3:33:fc:dc:ff:fe:ca:6a:fc:c3:b4:a4:
                    ee:b8:38:4b:a8:22:55:9a:d0:7e:2d:9e:d6:3e:e4:
                    59:b4:a7:87:bf:1d:35:21:de:e8:a5:9f:09:5e:c8:
                    b6:33:54:d9:74:27:46:93:7e:c3:41:ec:ed:e6:07:
                    80:cc:50:22:95:10:7d:d2:07:93:d3:2c:00:43:ca:
                    94:98:72:ca:fe:3d:a6:c9:7d:61:26:c6:5a:2e:a7:
                    a5:53:a3:bf:35:24:16:df:e8:a2:22:a0:3e:cf:af:
                    eb:f0:a5:d5:58:a7:97:d5:0b:0f:e7:f1:43:ed:14:
                    20:27:10:b4:e6:f2:27:c2:f7:7a:59:7d:11:15:84:
                    31:b4:90:ac:f1:ef:cb:45:98:5d:e4:c0:90:1a:74:
                    1d:06:ea:c5:47:34:7b:01:a9:84:37:42:9f:57:9a:
                    6b:5a:95:ba:ac:3c:8a:1a:92:29:4e:83:58:cc:a9:
                    3c:2b:fa:51:39:15:04:06:63:9c:1a:36:44:d8:0f:
                    30:b4:00:a6:f4:12:75:a2:4d:35:4f:c9:d5:dc:4c:
                    18:8a:b9:e9:51:29:09:05:7d:51:be:5b:e8:5c:aa:
                    c5:9d:8c:8d:0e:77:91:a6:4a:cf:13:1d:ef:94:bd:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:A7:E0:49:3B:98:36:AB:35:94:A2:A8:26:FA:D4:74:69:72:4A
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:28:47:a0:9e:c9:6e:1b:5a:87:3c:33:12:87:6c:26:42:04:
         c2:0d:1d:eb:2a:8f:d6:92:d2:60:3a:fd:cb:f9:54:6f:61:b5:
         e0:34:0d:93:26:de:35:03:6c:1e:a4:96:a2:62:bd:9e:6b:68:
         e4:77:ca:a5:0b:1b:26:8c:34:36:c2:92:fa:4f:55:36:65:79:
         02:b7:d5:e6:2e:f5:5c:29:b8:9f:e2:6c:86:4e:cb:44:4c:7d:
         f5:ff:16:8d:6b:3a:6f:e0:29:50:26:c0:f4:4a:e2:f9:8e:b1:
         ed:14:a7:62:93:a9:04:da:37:fa:5c:b6:a9:5b:a8:e7:71:2c:
         3d:24:2e:79:c1:16:11:db:07:e3:03:9c:b1:52:45:31:a8:22:
         da:92:fc:12:5e:c5:30:c6:6e:3e:b5:cc:23:d6:18:ac:72:42:
         9d:b5:8b:a0:4a:d4:4c:ff:b3:9d:3b:38:9e:65:5e:2f:46:82:
         51:5f:8c:1d:71:1a:0c:87:4d:d5:08:93:99:4d:90:b1:44:75:
         50:84:8b:3c:16:aa:b9:9f:88:1d:88:fe:cd:ce:b7:10:a8:7a:
         b0:23:ae:60:fb:26:19:d1:1c:92:c1:d2:db:a5:65:4c:83:d4:
         a4:6e:bc:06:17:32:ad:2c:81:d5:08:6b:10:e9:d1:01:56:4f:
         39:06:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:18:27 2026 by rpki-client