Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File:                     4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier:          XZo7uClDBUCkAqhVRcmZPyMRQrgifoeiV1thkRnOnNA=
Subject key identifier:   F2:E6:0C:43:E9:A0:D6:82:35:C5:7A:60:7A:67:A8:C1:25:A8:89:30
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer:       /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial:       01A00213EA1319D4796B067558E6888877E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number:          0AC7
Signing time:             Fri 14 Aug 2026 21:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:54 +0000
Files and hashes:         1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
                          2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: EQgwa+32k/Qe1kbuyEYCdLQNkglD5CMpvkJHrMqv87c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:ea:13:19:d4:79:6b:06:75:58:e6:88:88:77:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
        Validity
            Not Before: Aug 14 21:00:54 2026 GMT
            Not After : Aug 15 21:00:54 2026 GMT
        Subject: CN=f2e60c43e9a0d68235c57a607a67a8c125a88930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:f4:64:4e:7b:57:7d:ca:29:e5:81:5a:e2:
                    a5:e4:33:27:f0:7f:ac:9f:06:19:26:76:8d:da:1f:
                    f5:de:c1:cd:67:37:aa:aa:09:fb:b4:c3:a8:38:fd:
                    39:46:76:a6:35:5d:bf:e6:ff:dd:96:60:e0:67:76:
                    e6:54:99:e3:6b:e5:e6:8f:07:53:4a:3c:86:87:3a:
                    9e:3c:41:c1:87:3b:8a:1a:49:da:35:d7:df:a9:81:
                    4a:8c:b1:74:b4:98:35:e0:7f:ab:5d:45:0e:5a:9d:
                    48:87:45:3a:1f:69:e4:66:38:e5:7d:3c:8a:2b:2e:
                    5c:07:5f:6c:60:47:57:b4:5c:35:d7:57:70:f4:fd:
                    3a:d1:68:9c:fd:03:40:7f:24:37:72:d7:18:43:ad:
                    30:8c:35:96:07:e1:14:4b:b2:cc:97:f7:38:af:6e:
                    0a:1f:45:96:d2:cf:e1:08:f5:e4:93:da:62:ab:7c:
                    d9:a8:fc:39:a6:02:e6:de:8f:09:95:e7:75:f3:49:
                    54:e7:7f:b1:a7:16:22:cf:a5:f4:eb:1b:25:ea:66:
                    ae:4a:e0:cf:25:d3:4d:2a:4a:84:7c:4b:3d:a7:0a:
                    a8:e7:03:35:ca:90:fe:2c:93:c4:2b:39:e9:27:dc:
                    ee:75:a0:05:c9:b8:fb:07:e3:32:f5:65:31:aa:27:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E6:0C:43:E9:A0:D6:82:35:C5:7A:60:7A:67:A8:C1:25:A8:89:30
            X509v3 Authority Key Identifier:
                keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4c:b7:d7:87:5a:fa:6e:8b:b4:7b:95:06:88:be:ae:5c:c0:
         05:ba:34:d0:2e:cf:41:0b:50:15:cb:ab:76:77:ad:d1:a0:0b:
         6e:85:2d:90:ba:56:51:53:21:6d:0c:d5:57:33:8e:61:59:89:
         5b:23:e7:97:c1:d2:a2:2b:f7:a6:95:1c:ce:96:34:b4:46:98:
         44:20:e6:8c:57:ab:40:95:aa:66:69:df:e3:72:3f:52:3e:7b:
         b9:d7:63:44:dd:32:90:40:a9:52:50:42:4a:b1:f1:37:15:51:
         20:f1:97:e7:5b:11:75:32:25:dc:27:e8:2e:a0:61:1f:52:a1:
         d2:c3:4c:83:0e:18:ac:47:43:e3:98:4d:4f:3b:8b:70:2b:69:
         c2:33:1d:3c:d7:53:3d:dd:76:1d:4a:a7:75:29:bb:47:dc:b2:
         60:d0:04:91:6d:db:20:64:45:6b:05:48:b7:16:86:76:23:54:
         29:a1:c6:9f:68:14:73:b2:e9:57:28:f1:37:8b:98:6a:ac:0f:
         61:63:74:a9:fe:a8:47:d6:8b:ec:c5:71:28:5f:01:0b:68:d3:
         27:bf:ae:2e:99:fe:94:c1:fc:89:e4:7c:85:e5:c2:c9:b5:f7:
         60:e9:c9:dd:1a:30:89:ad:b8:ad:46:56:04:60:11:08:59:20:
         3a:73:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:35 2026 by rpki-client