Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File:                     A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier:          foHWdg8WG8BHSVq5BqD1NFVPfzQenDXjhgXw+FCXjMA=
Subject key identifier:   6D:5C:C8:42:68:76:E2:D4:1D:91:98:1C:C3:9C:8D:46:7D:FA:5B:D5
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer:       /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial:       01A000CAC8A9C35EC1AA457A01BC7E2AE7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number:          1605
Signing time:             Fri 14 Aug 2026 15:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:24 +0000
Files and hashes:         1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: /rIhTJcN/YWikd1Op5TKMrl3qinc6MyqBXhNSjfv3p0=)
                          2: _eHxxT7w7p8zXdXfwOcvwBUWOZg.asa (hash: rPV6p3Oid9sB7zS8sKU/96ebkCjQIbKliHkFe8R+sY0=)
                          3: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:c8:a9:c3:5e:c1:aa:45:7a:01:bc:7e:2a:e7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
        Validity
            Not Before: Aug 14 15:01:24 2026 GMT
            Not After : Aug 15 15:01:24 2026 GMT
        Subject: CN=6d5cc8426876e2d41d91981cc39c8d467dfa5bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b9:f4:2b:25:8b:c7:ae:63:e8:9e:bf:6e:26:
                    62:95:52:d6:b5:ef:b6:fc:66:a1:c8:14:50:57:45:
                    b7:68:1a:05:f2:a4:36:e4:b5:78:0e:29:2d:56:14:
                    3d:f7:4e:8a:a3:7e:21:99:ea:7d:fc:4c:31:17:7d:
                    1e:a7:30:52:cc:8f:5b:bd:3f:4d:e5:25:b0:46:e7:
                    9a:98:87:1f:86:e4:44:c7:87:78:0d:1d:19:58:82:
                    13:be:c9:75:89:9d:60:72:af:65:d6:10:72:e0:ac:
                    da:2f:8b:8a:fa:c8:2e:f1:8b:5f:05:e8:d0:17:c4:
                    fb:9d:fc:57:2c:d7:52:9f:b0:3e:0d:7a:ad:dd:0b:
                    67:db:24:93:ef:12:12:22:eb:f4:c7:1a:01:3f:6e:
                    00:eb:f8:7d:50:ef:46:a1:8f:c8:f4:75:f9:0b:db:
                    e2:50:88:4d:e8:4a:74:a7:ac:a8:3a:b3:19:d8:6f:
                    87:56:48:f9:30:33:9f:3c:4a:e6:dc:7d:5c:b8:8f:
                    aa:f4:8f:16:f8:d0:0c:e9:ed:19:a9:80:53:49:8f:
                    40:ce:c3:10:a9:a4:f8:ee:13:15:b2:08:00:03:95:
                    73:8f:49:e5:13:61:cb:f3:6a:35:48:30:b3:6b:5f:
                    cc:5b:a0:78:7f:d5:9d:96:7c:30:19:a4:9b:c2:c2:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:C8:42:68:76:E2:D4:1D:91:98:1C:C3:9C:8D:46:7D:FA:5B:D5
            X509v3 Authority Key Identifier:
                keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:ed:b1:a1:ca:ad:ec:97:4b:25:3f:bc:f0:b9:d4:9e:2b:
         c1:a1:7b:84:4f:f9:19:8c:8d:d0:a3:f4:e3:71:ef:b0:4d:56:
         9f:e6:d5:8e:79:68:06:84:a9:05:ee:7b:9a:1f:80:d2:b1:70:
         9f:74:bb:d6:1c:65:34:11:c7:b3:ce:68:1a:ef:e2:53:65:52:
         c0:ba:e6:36:f5:e8:02:7f:d5:06:5a:91:ff:68:98:71:ff:3b:
         3f:dc:6d:47:de:17:c3:e6:68:fa:2d:d7:94:76:98:e6:7d:ce:
         e1:29:a3:34:54:93:6e:76:01:3c:85:13:86:d9:ff:ac:69:9f:
         e4:94:cc:c0:ed:94:8d:a2:10:87:80:2b:b7:d2:19:d3:21:c4:
         9f:bf:41:94:2d:09:b0:4c:e7:03:26:fb:8d:11:ef:e4:ff:c4:
         7f:3d:86:a9:c8:14:e2:c7:d4:8c:9a:63:57:ec:8b:b1:e4:de:
         fd:81:9a:72:e7:51:39:40:32:03:28:99:93:c0:7f:3d:fb:b6:
         4c:8c:5e:a0:cd:f1:34:6e:e4:65:5e:7f:4a:32:e4:d3:57:45:
         65:6b:96:86:b7:35:8d:67:0a:6d:a2:e7:d0:66:e2:fd:b3:26:
         56:3d:24:0b:22:5d:4b:c4:55:c9:02:4d:bd:cf:c5:e0:8b:20:
         84:45:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:30 2026 by rpki-client