Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File:                     01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier:          Bj9jahOacx2ivmRlSoMqa1wVYWGMVjTqxKyGWy8e62Y=
Subject key identifier:   02:77:DE:14:40:A9:1E:17:DB:5D:F5:3D:C7:68:89:E8:36:C0:D2:B0
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer:       /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial:       01A000CA3222F5AE0B607608A3621F5BE78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 15:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:46 +0000
Files and hashes:         1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: dCwmgIZWw5gWRUv6E0jIc1LoYY9i8JfIuZUpkjn96x8=)
                          2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
                          3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:32:22:f5:ae:0b:60:76:08:a3:62:1f:5b:e7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
        Validity
            Not Before: Aug 14 15:00:46 2026 GMT
            Not After : Aug 15 15:00:46 2026 GMT
        Subject: CN=0277de1440a91e17db5df53dc76889e836c0d2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:08:de:ed:cc:19:09:fa:fc:57:f8:25:7c:
                    f0:7d:c4:f3:a2:ea:34:ae:43:dd:e1:e2:fc:63:df:
                    ca:7c:97:48:73:a9:48:f9:71:74:5f:54:c2:ab:fa:
                    ec:93:b4:62:a0:a2:f5:1c:49:b9:0d:5b:b9:5e:67:
                    86:18:bd:99:e3:9c:c0:06:d2:1e:10:2f:32:df:7c:
                    32:a0:6a:d0:b6:c3:84:7e:9a:d6:bd:48:3c:2b:49:
                    7d:2b:f3:ff:99:c8:c2:d3:5d:5c:77:71:e7:93:a3:
                    e0:fd:72:b8:6a:bb:48:04:3f:f0:1d:ef:48:f6:2f:
                    68:3f:0c:19:d3:78:50:2b:54:a4:19:28:c2:e7:80:
                    d4:d7:c4:70:8d:6b:00:c2:74:15:04:e7:72:69:4f:
                    47:8b:8c:c3:f0:97:86:89:19:c9:48:21:5d:c9:cd:
                    0b:2e:8b:77:53:0f:9e:f0:8b:79:e7:b6:02:95:3e:
                    e8:63:c4:4a:18:1c:0a:f0:8f:9c:82:e0:1d:a6:b4:
                    cb:22:90:09:87:5e:29:c4:cd:91:6c:c0:ab:0b:f8:
                    4a:f1:e4:9a:a7:2b:ff:3f:53:b4:16:03:b0:b6:28:
                    3b:81:70:3f:0a:e5:86:09:d9:24:a7:ab:09:0b:5c:
                    e5:c3:dc:62:23:9a:b2:bb:a4:a7:91:d0:69:b0:ba:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:77:DE:14:40:A9:1E:17:DB:5D:F5:3D:C7:68:89:E8:36:C0:D2:B0
            X509v3 Authority Key Identifier:
                keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:c5:a3:3e:d4:3d:84:b9:62:4d:60:61:12:1d:09:18:5d:
         24:94:f2:55:31:28:47:e2:0f:47:7e:79:d7:cb:ef:4a:ea:a9:
         f0:49:0a:3d:3a:9e:fd:6a:7f:bf:de:92:f2:09:15:bd:84:6d:
         5a:08:37:e5:ba:68:2e:f6:d3:5d:4a:32:b5:70:b5:b7:2d:45:
         fd:47:48:1e:7e:59:6b:d5:d8:c1:72:51:86:86:72:ab:0b:a2:
         c4:eb:8e:aa:c0:c6:48:f3:53:74:6e:bd:7f:71:ed:13:67:04:
         d9:1b:33:2b:56:4a:38:12:6a:d2:ce:a1:ff:38:3d:ad:d0:22:
         5f:de:cb:8d:1f:0e:a2:e8:9f:60:30:78:63:2a:66:3b:e4:5f:
         a2:10:ce:ec:51:08:de:b2:bc:df:a5:70:be:ef:8a:0e:4f:81:
         21:10:db:57:2b:2a:b4:2d:e6:d4:70:46:9e:98:f1:29:2e:99:
         ec:93:38:27:37:89:b9:71:be:47:11:2e:5c:e2:63:ed:f8:a0:
         13:fc:b4:ce:50:80:95:59:7a:7f:d8:c7:d0:46:af:96:ab:7a:
         6b:38:5b:b1:4a:4a:15:82:be:93:86:90:54:8a:5b:c4:a0:08:
         dc:46:4d:3a:4e:f0:a5:e6:b1:56:9a:e9:a1:de:db:33:31:9d:
         a7:21:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:46 2026 by rpki-client