Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier:          GXlL7fTPoLJZMhClJewPN08qAIWPnkzs1J+tTf6tCTI=
Subject key identifier:   9B:61:3A:B7:6A:B4:8B:AE:8C:A0:60:74:3A:BD:48:B4:F3:A4:68:E3
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer:       /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial:       019FFD92A26A5773E68E546B074D5C96D2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 00:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 00:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 00:01:13 +0000
Files and hashes:         1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
                          2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: QzMv/SuUGSuSNzhC8QPwW83673HJDjLuC2o4BeHJDAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:92:a2:6a:57:73:e6:8e:54:6b:07:4d:5c:96:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Validity
            Not Before: Aug 14 00:01:13 2026 GMT
            Not After : Aug 15 00:01:13 2026 GMT
        Subject: CN=9b613ab76ab48bae8ca060743abd48b4f3a468e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:d9:78:70:b1:a2:a1:ec:33:75:69:94:13:
                    8c:8b:35:61:32:92:64:1d:06:39:7e:4f:a7:0d:bd:
                    c1:2e:e8:ae:7d:40:fe:3b:7f:2c:91:90:4e:81:61:
                    8c:52:fc:cb:5c:c9:6d:b4:35:7a:7d:4e:6c:db:ee:
                    8d:57:00:bd:09:b6:3e:17:c7:00:75:3d:b6:5c:11:
                    b8:e5:f9:b1:7b:7b:dd:de:9b:10:f9:68:bd:0e:05:
                    9a:08:d8:ff:0f:a7:7b:54:77:db:75:99:5a:8e:0c:
                    bb:f7:88:08:a7:cc:3f:4e:b2:6f:51:9d:14:79:21:
                    f1:a9:4c:da:2f:f0:05:84:ba:76:fa:65:93:81:6f:
                    fc:e6:89:05:f5:a3:a7:08:b7:19:dc:04:b0:d9:19:
                    0a:14:4c:42:e4:78:e5:a1:d4:0d:1f:59:5d:59:71:
                    0e:b9:ac:f5:0c:56:56:f1:55:71:c7:73:0c:a1:45:
                    1b:17:47:48:54:e2:ff:1e:04:7a:a6:dc:d3:42:0f:
                    e2:e4:a0:a7:e5:d7:ed:b9:2c:d0:1c:d7:21:0c:30:
                    18:57:66:02:33:f1:de:ab:ac:12:2c:3e:18:0c:c2:
                    51:43:48:5d:f5:78:90:7f:a0:5c:51:1a:ed:75:ca:
                    0e:ff:36:62:60:87:3c:45:65:e9:36:aa:3f:b5:6e:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:61:3A:B7:6A:B4:8B:AE:8C:A0:60:74:3A:BD:48:B4:F3:A4:68:E3
            X509v3 Authority Key Identifier:
                keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:96:eb:c9:dc:cc:f4:0d:94:2f:b8:91:9a:17:28:51:02:67:
         69:47:3f:99:7c:5d:e8:14:3d:06:b6:7d:ce:a4:39:c9:cb:4e:
         5f:6c:d3:96:37:aa:c8:45:2a:b9:ae:97:45:71:71:37:8a:21:
         ff:3f:1d:85:19:14:5d:a4:cb:04:ee:fa:ca:33:97:8b:7f:30:
         89:ea:cc:14:e3:66:4a:3b:84:55:8a:fb:3b:18:0c:ab:e1:a7:
         e1:c3:cf:6d:9f:ea:01:6f:6e:fd:0f:0d:e3:87:64:3e:03:71:
         a2:6a:2b:db:58:c1:88:cd:93:68:9d:e9:af:2e:16:51:54:eb:
         0b:e3:c3:e1:81:44:e0:5f:0a:19:ac:8b:e3:87:14:e4:f2:69:
         ea:00:60:8f:33:49:07:be:f9:80:16:6d:09:12:6f:ee:36:55:
         56:54:a9:30:1e:0f:b8:f0:ef:db:99:6d:bc:d3:bb:85:c6:d3:
         72:bd:05:d3:eb:92:50:0e:8d:aa:3a:00:54:6d:02:f8:e3:0f:
         19:bb:ed:cf:0b:c3:bb:98:46:bf:2b:ee:ab:c6:42:cb:a2:93:
         4f:3b:80:5c:c8:45:3d:85:c4:85:1e:6b:67:f0:5f:a2:e1:84:
         33:b4:de:9e:e3:63:49:5a:f4:8f:78:3c:1f:dd:34:d5:03:07:
         79:bc:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:18:12 2026 by rpki-client