Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
File:                     MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json)
Hash identifier:          CC9ttD5SQkIvPF6I8G/kl+awaO4GExYuYgQ5VFeMnwo=
Subject key identifier:   FE:43:66:C3:E6:E5:58:8F:43:4F:57:D1:BE:01:37:87:2B:4C:6E:8A
Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
Certificate issuer:       /CN=31252ce307781d0319fcd7494fa64f26045016ac
Certificate serial:       01A002EFD27D4061B02C59BA782B22D72AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
Manifest number:          02B8
Signing time:             Sat 15 Aug 2026 01:01:06 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:06 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:06 +0000
Files and hashes:         1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: IIg6i7s8y310ixE8jMj2uQedJlaZU33QB1GMbt1kACM=)
                          2: aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa (hash: 4yLd5mUThQNWdy1JWFgNhTCT5EuvmfZ9l6+q6YACcrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:d2:7d:40:61:b0:2c:59:ba:78:2b:22:d7:2a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac
        Validity
            Not Before: Aug 15 01:01:06 2026 GMT
            Not After : Aug 16 01:01:06 2026 GMT
        Subject: CN=fe4366c3e6e5588f434f57d1be0137872b4c6e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:16:c6:79:ea:2e:58:4f:05:e8:ca:3a:b5:
                    d3:ff:2a:17:3b:eb:72:b5:01:5f:c8:54:18:b7:72:
                    09:b4:49:26:b7:19:2d:d4:4d:fd:25:f0:6d:4b:dd:
                    7b:d7:e9:93:4b:66:7c:eb:29:9d:db:11:2d:8d:f4:
                    71:de:7c:75:44:30:b1:fa:c7:fd:77:cf:8d:e8:e4:
                    4d:39:1e:30:c3:7d:6b:03:38:e1:ed:a6:fc:ae:41:
                    a0:46:5e:78:2a:02:f7:ef:99:3d:76:a1:38:fa:3a:
                    8b:31:46:31:b7:80:a2:13:ec:c0:eb:9b:45:dc:78:
                    d5:04:63:93:eb:31:64:a8:34:fc:c9:e8:f7:e9:3c:
                    4a:03:c2:18:7f:74:f1:36:8e:14:08:1e:7c:eb:43:
                    bc:4b:9a:24:8e:9d:ba:1d:8e:db:b6:6d:76:be:43:
                    50:50:89:4c:10:a6:ba:bc:55:32:3b:49:fd:29:3a:
                    da:a0:ff:46:4d:47:12:9b:59:6a:44:d5:c9:b3:9e:
                    77:ed:2a:bc:7d:f2:c8:84:b2:0b:36:86:ee:e5:27:
                    c8:81:a8:ae:07:61:3f:92:20:8b:18:79:f7:b5:e0:
                    81:e0:e3:d0:30:fc:70:c3:ab:68:8e:07:a6:13:1f:
                    40:9a:d1:fa:a8:f5:9c:14:f5:f0:69:56:de:dc:6c:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:66:C3:E6:E5:58:8F:43:4F:57:D1:BE:01:37:87:2B:4C:6E:8A
            X509v3 Authority Key Identifier:
                keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:45:28:82:06:89:d8:8e:f8:33:cf:4d:78:fe:47:71:a4:
         f7:92:9c:b3:ae:73:39:57:f8:5a:1b:6d:39:35:43:fd:67:24:
         d5:20:9e:28:c2:2b:52:ad:b2:78:6d:74:ab:86:d9:fe:87:20:
         36:e4:88:9b:77:26:27:e2:83:a7:db:fe:a6:30:81:e8:43:16:
         87:da:16:24:d9:f1:83:2e:1c:81:52:e3:49:6a:bd:90:f8:6c:
         18:de:78:81:2a:95:fd:17:96:d4:6a:09:66:3c:e5:dc:95:80:
         a9:09:bb:ef:00:1f:ca:08:12:87:28:13:4f:c0:ba:ed:99:09:
         f5:9a:84:a1:06:31:50:dd:8d:96:34:08:69:43:e6:b9:cf:86:
         85:86:bb:50:c3:14:a0:0e:1f:ee:45:20:bc:b6:ac:cb:c7:71:
         e1:7a:98:89:68:2b:c4:93:cf:0a:16:df:63:e0:8f:8a:4a:de:
         76:79:75:74:aa:6e:5c:ae:c8:ed:9a:6e:45:28:45:d5:35:80:
         09:3c:b7:4e:77:e1:05:99:37:72:1d:d3:c6:f7:2a:73:78:ba:
         db:a4:28:17:25:14:d4:c2:44:68:60:ba:1f:ea:80:4d:5a:75:
         00:89:14:c4:38:e6:4a:d1:84:4e:b9:08:e7:7b:8c:35:28:df:
         83:be:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:04:13 2026 by rpki-client