Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File:                     A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier:          DFWG7IrCZamVjF2R/KejxSQbWgKQGbRfv/XqXU1Tu+A=
Subject key identifier:   C0:60:F5:B9:AC:A6:D9:CE:2F:17:D7:D9:8A:C7:C7:7E:D6:D9:66:39
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer:       /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial:       01A001DD52B610198824ED6DD3AC185F1DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number:          060F
Signing time:             Fri 14 Aug 2026 20:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:16 +0000
Files and hashes:         1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
                          2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: kQm+Bl/6FrZQXuZx41+dXEpIGcp+jffv81L+WAgskxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:52:b6:10:19:88:24:ed:6d:d3:ac:18:5f:1d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
        Validity
            Not Before: Aug 14 20:01:16 2026 GMT
            Not After : Aug 15 20:01:16 2026 GMT
        Subject: CN=c060f5b9aca6d9ce2f17d7d98ac7c77ed6d96639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:e7:a7:b9:45:9f:77:84:e5:ea:7c:fe:be:
                    b2:47:63:6c:df:4e:32:1a:ff:ef:e6:6a:c5:bc:a7:
                    32:d9:72:cf:80:2f:1d:7f:02:1a:c8:3a:a6:c9:b3:
                    a3:58:59:9d:5c:c2:eb:92:b2:10:3e:07:a3:72:82:
                    4f:bb:58:15:05:f4:98:5b:3d:7c:5b:99:9e:ed:28:
                    0e:1b:90:d7:e9:fe:93:28:71:a6:fd:d5:a4:60:98:
                    e2:8e:d5:56:c1:8d:72:fd:e7:92:39:d3:7d:fb:18:
                    f4:19:53:c7:1b:dc:39:4d:d7:16:e3:29:3a:37:97:
                    db:4d:57:c5:04:53:25:1b:6b:b3:21:b0:a4:bc:00:
                    21:03:5c:75:bc:ec:ba:21:1f:f8:f0:ce:0c:eb:24:
                    85:77:ca:54:32:ac:10:0a:80:27:57:6a:34:d4:ee:
                    16:20:58:4b:a3:94:37:2c:5a:8e:41:4f:a2:14:c8:
                    d8:8b:c6:79:97:fe:46:69:70:f7:f5:e3:9f:d3:41:
                    87:e1:19:40:b6:77:d9:00:c3:eb:e8:5d:2c:57:ca:
                    35:7f:e5:fa:45:d7:fb:c2:56:ab:33:26:83:d1:27:
                    df:01:b9:34:9a:c8:08:1f:d7:a2:a0:c8:f5:16:41:
                    64:b9:7a:d5:f1:42:cc:50:bf:64:c1:ad:02:5b:df:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:60:F5:B9:AC:A6:D9:CE:2F:17:D7:D9:8A:C7:C7:7E:D6:D9:66:39
            X509v3 Authority Key Identifier:
                keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:65:2b:a6:db:08:50:c1:29:f7:5d:ba:91:2b:12:e8:5e:b8:
         82:d0:02:e7:e8:c2:aa:db:35:4d:f4:3a:9a:18:73:84:bc:86:
         ca:55:7b:18:9e:d4:ec:64:d5:09:53:2a:a2:99:de:8e:fd:be:
         cd:fc:20:ae:28:c8:76:4c:3c:e5:71:b8:0d:f2:65:4a:44:ad:
         c6:57:11:f1:b3:b9:06:20:e0:2f:f1:d4:91:00:92:cf:a1:ac:
         07:f2:db:85:14:d0:c3:39:15:5b:1b:0e:af:63:c6:a1:d2:50:
         86:fd:f6:5c:a7:d2:db:3e:11:87:ba:75:52:51:d5:6e:d6:85:
         74:b9:3a:6e:ea:b8:a2:51:b9:a6:29:c4:09:8f:c2:89:61:f9:
         5a:46:8e:e7:5c:e9:b5:b4:78:b5:40:1f:0a:f4:a3:91:cd:68:
         d4:cd:37:96:7c:b0:a1:59:cc:5c:9a:7e:9d:36:b7:03:c7:27:
         13:28:95:6d:00:84:08:fa:a0:ce:09:9b:07:a0:ee:6c:d6:c3:
         e5:dd:29:34:4a:32:32:78:16:51:e7:16:66:90:8b:17:9a:e2:
         57:3d:35:9e:6c:ea:0f:e1:c5:04:15:52:83:26:38:ae:5b:61:
         34:60:ee:d6:08:04:ef:0c:a0:8e:d5:5d:70:99:a1:89:37:8f:
         63:06:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:03 2026 by rpki-client