Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          xIRh0Tla5S9Jqc1fp2d9H9FUgrM/QHY6XZ73pXNs0lE=
Subject key identifier:   4D:9D:C5:02:17:00:84:08:54:E4:4F:E4:AA:2A:8A:9B:74:2F:D0:B8
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       01A03D163C5D7C44DE9CDBE79CF620D22491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          19BC
Signing time:             Wed 26 Aug 2026 08:01:02 +0000
Manifest this update:     Wed 26 Aug 2026 08:01:02 +0000
Manifest next update:     Thu 27 Aug 2026 08:01:02 +0000
Files and hashes:         1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: 1nGXYNSvCRDrJh7JSQ2kwALemh3csG2eXEdeN8UTMts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:16:3c:5d:7c:44:de:9c:db:e7:9c:f6:20:d2:24:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: Aug 26 08:01:02 2026 GMT
            Not After : Aug 27 08:01:02 2026 GMT
        Subject: CN=4d9dc5021700840854e44fe4aa2a8a9b742fd0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:b5:63:fa:ac:e1:26:1b:79:7a:3c:88:a4:
                    07:81:88:3a:24:5f:df:f5:f8:ae:88:81:7d:70:8d:
                    20:be:13:df:13:5d:3d:a6:c6:94:89:9a:0f:d5:ec:
                    7b:73:08:4d:e3:56:7c:b9:84:7e:0a:35:dc:09:d2:
                    59:94:73:dd:e1:ab:89:09:d5:3a:6b:b0:ec:49:78:
                    f2:2c:c5:e1:e2:cb:fa:67:5e:17:4a:6f:a8:89:bc:
                    9a:4a:dd:ad:d0:85:50:b1:a1:2b:58:28:90:83:bf:
                    e5:ad:be:63:95:f6:2f:5e:47:ee:d6:16:76:6d:0d:
                    f1:5e:b6:fe:13:58:f9:62:cc:41:cc:08:43:da:e6:
                    29:1d:ff:61:12:50:f5:55:ab:47:bf:a4:f4:3d:56:
                    40:20:07:7a:17:11:cb:ad:c5:e6:d1:e6:81:8d:3b:
                    40:4e:1c:e4:1a:62:5c:15:81:88:08:13:bf:e7:b2:
                    8b:80:09:cb:50:51:1f:2c:e7:8f:86:17:f5:51:7c:
                    2b:88:c5:70:d7:1d:d8:b9:2d:d3:00:cb:e5:0f:03:
                    85:25:5d:5c:7c:5e:8f:8d:ff:66:a8:27:ed:7a:60:
                    c4:69:b3:d8:0d:09:77:f7:42:ad:d9:95:30:6f:26:
                    56:de:aa:64:ff:c2:46:31:f9:3f:ed:c8:67:a0:3e:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:C5:02:17:00:84:08:54:E4:4F:E4:AA:2A:8A:9B:74:2F:D0:B8
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:00:b0:9c:ba:e0:8c:1b:25:1c:3e:d5:dd:79:d0:e4:82:cd:
         6f:a9:c3:22:90:72:0b:30:39:df:f3:c9:62:5b:3e:7e:ee:11:
         f2:82:8b:1d:c6:fd:49:e4:ff:2e:2d:cd:d7:25:45:b8:a7:58:
         35:6e:b8:fd:fe:73:7b:19:05:14:6a:00:c5:bc:6a:2d:5a:9e:
         dd:ef:c6:13:dc:e2:df:20:2f:a8:01:4e:67:2c:69:e1:24:ea:
         dc:b0:d1:74:fd:d9:fb:b1:4d:f1:65:2b:10:59:c4:ad:8c:e3:
         d7:01:da:5d:86:a6:81:16:30:16:d6:d5:ac:62:5a:95:2c:16:
         f2:f0:53:74:53:ae:4b:76:55:7c:01:fe:85:37:85:71:66:00:
         53:51:e1:b3:b9:c3:35:c0:81:8e:ea:29:df:1e:f5:96:f1:34:
         bc:e2:c7:12:7a:d4:10:dd:e0:8b:95:a3:2a:ea:32:96:0f:c0:
         af:2b:81:44:18:61:a9:37:0c:7e:20:b9:76:41:71:10:78:70:
         48:7f:a2:64:0d:1a:d5:1a:21:ff:dd:7c:1b:95:f5:28:36:e9:
         83:bd:97:50:f4:28:39:51:3a:9f:d7:75:2b:cc:f0:f0:44:af:
         0d:49:ee:6a:34:a1:be:4e:ff:0a:25:fc:6f:84:14:d3:c4:b4:
         56:79:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:18:29 2026 by rpki-client