Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File:                     0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier:          2U0kbsCpCDT67vwYx/4dPYijV5gF90C1WRKHPb4Yqr4=
Subject key identifier:   8E:DA:C2:C9:F4:0D:29:B2:28:F1:A9:68:EA:50:7C:C9:C2:3E:87:92
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer:       /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial:       01A000CA0E986FC3F9224DF3CE7CE2B21327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number:          1742
Signing time:             Fri 14 Aug 2026 15:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:36 +0000
Files and hashes:         1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: 5bQUOQjZsN9Wk37EH1E/wvNDfRVeYsFWw9QjTVlXjVg=)
                          2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:0e:98:6f:c3:f9:22:4d:f3:ce:7c:e2:b2:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
        Validity
            Not Before: Aug 14 15:00:36 2026 GMT
            Not After : Aug 15 15:00:36 2026 GMT
        Subject: CN=8edac2c9f40d29b228f1a968ea507cc9c23e8792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:4f:49:d6:26:dd:5a:d6:ee:62:b1:e0:44:
                    d3:01:b4:63:6d:45:29:89:ec:33:b6:26:4b:36:61:
                    f6:1d:21:2d:d1:76:29:b9:b3:15:12:ff:7e:82:d5:
                    14:14:a0:c2:fd:3c:32:1e:c0:a1:a2:c8:eb:30:12:
                    82:b5:0e:b6:50:ef:68:df:32:3d:52:91:8f:ed:be:
                    9a:cf:e8:b6:0c:d4:b3:a5:13:a8:12:81:21:e7:ac:
                    ec:71:84:ed:7a:fd:13:da:b1:db:70:b3:67:08:c2:
                    c8:c5:fb:80:be:2b:fa:94:ad:0e:5f:c9:a4:90:4a:
                    19:e7:b4:e3:f1:bb:b8:b1:c7:d4:72:bc:e4:ec:20:
                    e6:00:e1:1f:5e:ce:8d:14:ae:46:21:1a:89:09:51:
                    e4:f7:54:8f:62:83:b1:8d:ea:ef:16:43:d6:b2:c8:
                    cb:a8:11:dc:dc:f4:82:c7:78:27:43:47:59:17:3f:
                    04:34:1b:97:f7:b2:ad:68:6d:87:89:1c:57:c3:99:
                    f7:de:98:47:6b:04:82:ee:e4:bd:a7:99:b7:71:f2:
                    87:83:f0:4f:10:60:c5:44:21:fb:10:47:69:8c:f6:
                    46:a0:70:c6:3b:97:49:a4:ab:34:56:fd:fd:b6:c3:
                    77:41:21:b0:2a:fe:af:8c:54:f0:15:73:12:fb:59:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:C2:C9:F4:0D:29:B2:28:F1:A9:68:EA:50:7C:C9:C2:3E:87:92
            X509v3 Authority Key Identifier:
                keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:8a:4e:c9:36:6c:7f:b9:89:d8:78:1e:02:d2:58:7b:c9:
         33:15:23:bd:36:27:8a:2a:79:32:16:63:94:b9:39:22:aa:09:
         d2:1d:f7:12:56:64:ec:e5:4b:de:56:e0:ad:88:72:64:03:ae:
         ed:36:2d:6c:c1:5e:1c:18:39:dc:40:48:fb:8a:d4:59:a0:44:
         f8:ec:88:77:52:43:d4:ba:e1:df:c8:10:17:5e:6d:c0:80:ec:
         80:03:f0:df:4e:90:5e:74:44:67:e5:41:1b:6c:fe:d9:db:b0:
         fc:b7:ee:94:13:05:63:70:d0:42:63:5a:b0:df:5b:be:7c:ec:
         c2:9f:8b:cc:78:c5:d2:0e:49:4b:3d:fc:e5:fc:cb:cb:88:27:
         47:90:5e:87:1f:d9:19:f4:4b:dc:0e:98:8f:a8:4e:a6:bd:4b:
         32:f6:22:42:d6:8c:31:ba:b0:bd:9a:4d:df:8e:b1:f1:f7:0d:
         b4:d4:0d:c0:f5:9b:d0:e4:73:a1:50:b8:9c:36:32:47:a0:8d:
         ec:77:ca:35:81:ce:6c:2d:f2:ff:0b:fa:9b:60:0b:d8:5c:ef:
         8c:44:45:b5:ad:b4:a7:69:f2:5b:76:b6:1f:b1:03:56:b2:f8:
         47:e8:33:90:f3:59:6f:ab:d7:a9:a3:83:2f:d1:66:0d:87:00:
         a7:da:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:58 2026 by rpki-client