Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File:                     A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier:          RvkR1WLvro7uXbntGRqGbVY+aX0vhagdfidJiQqffEA=
Subject key identifier:   57:09:52:AA:BA:DE:7F:F1:A4:9E:C4:E1:79:3C:A5:AF:C9:8B:CE:67
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer:       /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial:       01A08B9EE61C4A5AE70B546CA2442D96955E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number:          02EF
Signing time:             Thu 10 Sep 2026 14:00:41 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:41 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:41 +0000
Files and hashes:         1: 3DAIvLclUpDsLr-rwJ1h_LtmLuQ.asa (hash: qKA8mpcJbK4XKwFSzKZglKVnqklkYcagnHz5U7zbwbA=)
                          2: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (hash: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0=)
                          3: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: pCY89zrIcJFLifo+4nxhfk2UnEN51/O5YLqLBMjyVjs=)
                          4: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (hash: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc=)
                          5: e9xI9xxAFennKLtQShHvt8Vdf3U.roa (hash: nJ6Dkjs+4T2Bh6E1zT3mOI9063o+MgviDZiRTob06t8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:e6:1c:4a:5a:e7:0b:54:6c:a2:44:2d:96:95:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
        Validity
            Not Before: Sep 10 14:00:41 2026 GMT
            Not After : Sep 11 14:00:41 2026 GMT
        Subject: CN=570952aabade7ff1a49ec4e1793ca5afc98bce67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:aa:ff:c5:24:2c:07:c8:54:ed:e1:51:29:
                    60:5f:12:45:2f:d8:15:7e:71:4d:a7:dd:76:db:69:
                    2c:8f:a4:d1:a1:cb:2c:21:fc:92:1f:c8:af:ca:d8:
                    b3:4a:d7:45:69:e4:f0:26:27:75:00:46:ed:11:fc:
                    91:5c:a0:9b:0d:37:51:fb:ff:a8:f8:97:dc:d9:d7:
                    3f:72:30:71:68:d9:aa:99:57:6c:86:0c:af:ea:22:
                    f9:9f:91:b9:31:1b:92:07:cd:78:9d:19:69:4a:f0:
                    0d:41:00:85:7f:44:db:da:f8:cb:6a:4a:34:9b:45:
                    77:1e:a4:6c:70:92:b1:4c:4b:15:02:b9:28:0c:e5:
                    58:85:11:7a:06:8f:c9:7b:08:a1:7d:38:4f:de:ef:
                    ce:58:b4:cd:cb:5c:9a:71:67:5a:8a:7a:3a:71:c5:
                    63:bc:09:4a:ac:31:e6:13:4a:9c:d8:c0:84:1b:ee:
                    fe:8e:b9:44:96:cf:62:a4:0b:60:66:8c:a6:40:da:
                    5c:5a:71:fc:91:8f:c8:07:53:08:62:20:4f:d5:5d:
                    6f:dc:a8:39:7e:3b:0e:09:13:52:78:42:0d:6e:ef:
                    e1:15:dc:50:35:cc:ce:59:c1:5d:95:32:b4:eb:6e:
                    31:67:f1:f5:fe:51:c8:5c:d4:7d:ba:21:a3:d7:8c:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:52:AA:BA:DE:7F:F1:A4:9E:C4:E1:79:3C:A5:AF:C9:8B:CE:67
            X509v3 Authority Key Identifier:
                keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:56:cc:03:4d:ae:0a:79:cc:90:df:ae:75:77:a2:e8:4b:
         64:56:a4:68:cc:0a:b3:77:d2:6e:44:e8:c1:f1:17:cd:c3:bc:
         54:fc:79:f2:e9:b4:00:48:b1:82:01:88:81:67:bd:1f:c4:1a:
         fb:cf:e6:f3:69:e0:40:d4:54:e8:1d:37:99:15:5c:ff:1f:60:
         54:ea:33:24:8b:7f:c5:86:cd:7d:fb:2f:fd:97:a4:81:4a:96:
         e2:90:1d:c4:9f:ed:74:41:29:2f:09:d5:75:ac:93:5a:f6:c3:
         09:1d:75:29:e8:9d:6a:62:48:b4:ea:31:a1:a1:99:a3:44:d2:
         13:9a:1e:6e:e8:4f:7f:8a:bb:eb:cb:4d:13:b9:fe:9e:a3:92:
         16:dc:e2:f4:c7:2e:00:41:37:17:b1:c4:fd:aa:42:36:49:1e:
         b9:b4:fc:53:ad:58:1b:1d:a8:5a:f6:a3:f0:cb:0d:38:a8:81:
         75:4b:59:11:6d:78:11:bb:b1:f8:bb:bb:5c:cf:3a:65:44:27:
         2b:e2:8a:13:7b:3e:bc:18:2a:84:64:5c:fb:c6:0d:ec:1d:61:
         17:a6:b7:05:ec:1f:75:ca:22:df:2c:b8:81:bf:cc:19:47:e7:
         29:10:0f:fa:92:4c:35:7e:fb:73:e0:d7:1b:3d:b9:dd:94:4b:
         c3:f2:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:20:31 2026 by rpki-client