Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File:                     Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier:          lmK8i48tROaX/YX6lmjltBwT646hWkdmurOtG7F8twk=
Subject key identifier:   13:6A:F8:9C:F5:25:43:7B:BC:A1:E9:24:0A:36:D4:5D:CD:4F:D0:FC
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer:       /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial:       01A04084A2521FD554CC0532B5B8C4F7CECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number:          03F0
Signing time:             Thu 27 Aug 2026 00:00:29 +0000
Manifest this update:     Thu 27 Aug 2026 00:00:29 +0000
Manifest next update:     Fri 28 Aug 2026 00:00:29 +0000
Files and hashes:         1: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (hash: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo=)
                          2: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: vRK3zy/Yr5mCYRsPm0VlpU4+QYY9IKWvZh3FANq8Bcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:84:a2:52:1f:d5:54:cc:05:32:b5:b8:c4:f7:ce:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
        Validity
            Not Before: Aug 27 00:00:29 2026 GMT
            Not After : Aug 28 00:00:29 2026 GMT
        Subject: CN=136af89cf525437bbca1e9240a36d45dcd4fd0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:1b:c7:a9:f6:e1:27:2d:be:5f:4b:a8:b9:
                    15:f3:69:5b:7e:5e:2d:8a:f0:9c:3a:66:77:41:ec:
                    c5:81:57:d6:d8:e2:25:08:08:76:8c:9b:57:6b:f1:
                    0b:cc:a9:04:3c:63:f1:9a:ca:e0:19:33:9b:e6:56:
                    21:d8:80:ce:25:7c:cb:aa:77:95:1a:19:58:9c:3b:
                    15:73:14:dd:74:73:08:e9:34:6a:99:e0:7f:f0:31:
                    27:ba:e2:0f:48:f6:48:fc:bb:cd:91:52:72:0c:4b:
                    dc:81:17:18:ec:17:7e:a2:fb:54:d3:71:ee:cb:57:
                    89:79:94:68:e8:eb:48:d0:bb:20:7e:02:af:e3:d3:
                    00:bc:a6:b5:a5:72:31:28:50:ea:c0:ea:b5:0c:88:
                    18:b0:f6:20:d5:74:46:cd:0b:f3:ef:28:3b:a9:39:
                    38:04:f9:b3:bd:63:09:94:08:53:75:ac:21:3a:ae:
                    72:3c:26:51:b5:f9:66:da:1d:51:96:e0:43:10:08:
                    3f:bc:72:0e:76:e3:f9:f5:03:87:9e:04:1a:54:83:
                    4b:ea:fc:65:81:3c:21:d0:58:3d:0e:b4:4a:60:f6:
                    99:d1:ad:b5:8e:b1:c7:1b:5f:1f:d2:76:97:33:9f:
                    eb:42:e1:01:15:11:63:d1:40:83:ec:a2:96:c4:c9:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:F8:9C:F5:25:43:7B:BC:A1:E9:24:0A:36:D4:5D:CD:4F:D0:FC
            X509v3 Authority Key Identifier:
                keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:97:5d:97:62:49:96:07:e7:06:32:63:b3:55:e1:52:0e:
         dc:d7:2d:03:5c:1e:e5:b1:16:03:ba:36:af:6d:a8:b3:7f:7f:
         12:06:66:4c:7f:1d:1c:0e:79:f6:8f:3d:f7:70:ac:d2:e9:99:
         26:1a:48:a5:c1:ef:33:65:9d:10:29:89:99:58:87:91:2c:3e:
         ad:5f:31:10:7b:bc:3c:90:c0:65:cb:50:59:fd:90:d5:66:8e:
         4f:a2:3d:87:ff:06:cf:71:d8:3e:92:91:86:55:8c:07:4f:3c:
         84:7a:38:b6:bc:04:45:7d:1a:08:6f:47:05:b0:c8:7f:ac:59:
         2a:f4:41:18:a0:08:e5:45:eb:5a:9b:79:9d:31:9a:78:3d:ea:
         07:71:f8:fc:63:e9:9c:a1:50:79:24:44:d2:fc:50:82:2d:a4:
         d0:10:07:f7:da:e1:87:8b:f3:32:f0:63:6a:81:51:6f:10:46:
         b4:b0:06:7b:53:d4:6c:75:44:73:3b:e0:ef:3e:f7:8a:6c:06:
         78:47:ad:b2:6d:cc:89:69:68:8e:d9:68:af:86:47:aa:3b:89:
         19:fb:cc:50:ce:75:94:02:90:33:4e:13:88:db:c2:40:a8:cc:
         44:33:25:95:6a:b6:8b:a5:3f:12:0e:62:5f:7c:b0:e3:0b:3b:
         ba:3b:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:35 2026 by rpki-client