Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File:                     M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier:          kjPLYCUFgsnJa/Y7yDElGZyMvoELegkUIOfPzVJ/YKo=
Subject key identifier:   4F:20:C6:44:96:CB:F4:DF:21:09:9D:D4:0E:74:69:A0:2B:BA:D0:26
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer:       /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial:       01A06D27A21A8D1A67F3603B149B1EBAE597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number:          0E5E
Signing time:             Fri 04 Sep 2026 16:01:48 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:48 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:48 +0000
Files and hashes:         1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: 7s+02Wm6D80P5bN57V41A0KZdgQAHy9CJueYzi1a2qQ=)
                          2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
                          3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:a2:1a:8d:1a:67:f3:60:3b:14:9b:1e:ba:e5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
        Validity
            Not Before: Sep  4 16:01:48 2026 GMT
            Not After : Sep  5 16:01:48 2026 GMT
        Subject: CN=4f20c64496cbf4df21099dd40e7469a02bbad026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:77:38:73:9e:78:3a:fb:41:d2:8c:3d:b2:
                    53:46:94:82:47:f2:ca:b5:e7:cb:9d:31:b4:29:b3:
                    3e:92:6a:77:28:e1:09:64:74:c5:a4:1c:58:0b:18:
                    d8:e7:95:81:9c:fb:c1:f8:85:9d:08:46:04:78:34:
                    07:6f:1c:6e:1a:b6:05:6f:41:c4:76:fc:82:fb:94:
                    1b:9f:4f:32:6c:7a:fa:85:1a:bc:3c:d7:12:56:86:
                    8a:15:af:b6:46:a0:d1:f1:26:d1:46:6f:53:ec:c4:
                    2b:eb:57:0e:1c:2b:53:c4:9b:b0:c7:2c:5f:69:84:
                    de:7d:65:ae:72:e7:4f:3d:8c:40:aa:40:20:af:21:
                    51:07:c8:92:8f:38:61:d7:84:ae:75:76:ac:88:93:
                    be:bc:1d:6a:cf:06:9b:1e:a0:44:1e:15:4a:2e:0d:
                    c0:40:58:3b:45:e6:66:1f:ab:ba:cb:e8:de:f3:d9:
                    41:51:2d:59:d3:65:70:c6:0e:7d:3e:4b:67:4b:96:
                    76:f8:4d:84:89:3c:a3:2b:85:2f:d2:9e:36:ae:9e:
                    90:15:8e:14:84:f9:77:f7:12:78:7b:e4:50:13:7f:
                    87:ea:f4:0a:10:de:4a:f8:3c:a4:38:c3:99:31:18:
                    1d:b0:c5:cd:69:e0:ba:d7:4e:d5:32:de:e5:74:f1:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:C6:44:96:CB:F4:DF:21:09:9D:D4:0E:74:69:A0:2B:BA:D0:26
            X509v3 Authority Key Identifier:
                keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:60:d7:0e:d9:e7:48:4b:74:2e:45:f2:2a:c2:f1:5b:0b:d8:
         21:73:5b:75:fc:30:98:81:77:8e:70:b4:e7:2e:aa:11:f1:be:
         03:ae:a9:cb:64:16:e9:c6:13:81:f5:9b:cd:8d:85:1b:a3:0e:
         84:21:15:c4:78:b0:8d:8c:20:9e:2f:fd:95:e4:94:d5:7f:ec:
         06:f0:c7:de:b7:bf:0f:57:34:a0:74:97:cd:29:93:c2:19:89:
         20:9b:38:07:48:8a:02:7a:ce:32:a7:d0:f3:d5:f0:b0:5f:52:
         19:08:b9:0d:3c:e0:49:5b:1e:cd:71:a3:ae:b1:82:6b:96:16:
         fe:11:82:51:e9:23:79:5c:d6:0f:76:5f:62:7e:99:d4:cb:c6:
         07:a2:6a:cb:b6:90:c3:38:1c:0f:d0:23:b9:3d:be:3a:34:f6:
         15:7f:33:01:5b:2b:a9:8b:7b:09:fd:2f:9f:ab:61:43:27:1b:
         dc:f8:7d:03:b3:db:98:7c:71:56:0c:48:62:82:8b:92:f1:22:
         40:66:24:5d:fa:90:fe:f5:99:bb:5a:ad:62:0f:4f:8b:17:d3:
         0f:7b:d5:a3:f2:c4:9e:49:ee:2b:bd:e9:cf:44:77:58:80:24:
         f3:f0:de:67:ef:78:fb:b8:a8:56:ce:9c:b7:f7:fb:47:9b:7d:
         b0:b8:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:57:04 2026 by rpki-client