Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          jj12xfTr6M8fx2yUN1ZrRxwshL0+4pMM6YdyWrc+BE4=
Subject key identifier:   62:DF:89:3F:4A:52:7E:E9:C2:80:ED:DC:A9:42:66:BA:C4:63:D2:07
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       01A0039412174542C8D624A7936F2A3226F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          19EA
Signing time:             Sat 15 Aug 2026 04:00:30 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:30 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:30 +0000
Files and hashes:         1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: gWHMYGwLPLXE/Ff01wVXues4ocCLwLRyqt9B6Wm72k8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:12:17:45:42:c8:d6:24:a7:93:6f:2a:32:26:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: Aug 15 04:00:30 2026 GMT
            Not After : Aug 16 04:00:30 2026 GMT
        Subject: CN=62df893f4a527ee9c280eddca94266bac463d207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:cc:3f:c0:34:69:ec:31:73:d7:a1:6b:71:
                    57:0c:d5:d0:c4:48:42:44:ec:88:bf:74:19:bf:43:
                    2d:30:fb:17:e5:6c:06:8c:f0:06:56:38:08:7f:2a:
                    6c:81:1e:86:34:a8:0c:55:66:64:5b:9d:10:79:2d:
                    3d:d6:d2:3c:7a:c9:e2:b1:8a:52:dd:0e:2f:93:ed:
                    28:38:9e:76:e1:b5:09:f1:cd:0d:4a:c9:0c:7f:19:
                    e4:95:43:68:02:7a:a6:0f:fc:01:a8:27:a4:fd:10:
                    e3:39:e6:9d:24:9e:66:10:68:9f:89:af:70:bf:3f:
                    bd:0d:93:7d:68:7a:58:32:b2:c1:18:29:d6:91:82:
                    f8:d8:a0:23:e8:d2:5a:7f:c9:2f:73:11:32:a9:57:
                    d4:07:e6:7a:42:10:69:c1:c5:7b:1e:77:a9:da:c8:
                    98:e1:39:d7:3e:da:7c:04:25:8f:11:56:65:1b:0e:
                    0d:20:c5:98:b6:f8:2a:54:71:f7:78:89:6f:f9:ba:
                    3d:3e:4e:86:d4:c3:4c:f3:e4:71:c9:ba:c0:e0:66:
                    e5:15:f0:fc:d7:62:e0:20:06:6e:e3:9b:c5:10:31:
                    7f:40:ff:45:f1:dc:81:a5:6a:18:85:22:20:fd:ab:
                    94:8b:c7:44:f5:d7:1c:52:97:33:28:84:8c:12:9d:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DF:89:3F:4A:52:7E:E9:C2:80:ED:DC:A9:42:66:BA:C4:63:D2:07
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:06:28:fc:70:d6:8c:bb:cd:37:87:25:20:c6:90:cc:cf:6f:
         7d:e0:21:cb:bc:55:f4:8a:22:18:33:96:c3:fb:02:9f:62:45:
         93:f3:23:b6:5a:24:9c:4d:67:b1:d8:b0:8b:2c:6b:67:8a:dc:
         02:fb:93:a6:07:aa:3d:c0:36:3f:d5:4e:65:54:c9:da:51:d1:
         53:a3:26:73:14:7b:4e:79:d2:54:8c:14:59:bc:09:cb:5f:c2:
         ea:d1:55:78:1f:82:12:63:1e:e1:cc:f8:74:fb:17:aa:a0:d5:
         c2:80:ef:e0:74:2c:5d:2a:84:b1:4e:0b:c6:54:e0:ff:0a:29:
         dc:22:0a:d6:30:4f:48:de:9d:1f:81:15:6c:00:98:89:80:8d:
         28:aa:ff:93:4d:63:7a:e0:44:e3:c9:f1:c7:2e:c9:f7:59:9e:
         93:9c:31:d1:5b:e4:7e:8e:35:26:b7:9c:bd:a6:89:05:ee:15:
         c5:09:7b:54:dd:18:d6:ef:fe:aa:ee:21:93:ed:45:6e:2e:96:
         45:da:21:aa:14:dc:dd:f3:22:a4:01:b5:e7:b9:d2:1a:8a:ba:
         cd:3a:73:9f:f0:94:05:a2:87:b4:2c:89:3e:d2:21:f1:e3:d8:
         d1:8f:dc:17:28:14:54:27:a9:6f:9b:21:61:c9:a8:cf:dc:06:
         1c:cf:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:38 2026 by rpki-client