Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File:                     svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier:          lWoxA4YxlykDuAbViB5BVzlGlAk2EZtBDRhsUoD0XeI=
Subject key identifier:   DA:A5:52:55:C0:DD:9A:DF:6A:71:E6:AC:D7:4C:64:E1:CF:D1:40:69
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer:       /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial:       019FF790E71AAAA4B55E7AB9C527D69FE863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number:          138C
Signing time:             Wed 12 Aug 2026 20:01:36 +0000
Manifest this update:     Wed 12 Aug 2026 20:01:36 +0000
Manifest next update:     Thu 13 Aug 2026 20:01:36 +0000
Files and hashes:         1: ObNZb8WcPYnp4vym-GNDnVBbhRc.roa (hash: cB7fQ1+Il9kNcY3mzLGz4gNtT9PoEWbZCafUMp1Ym5Y=)
                          2: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: IXR9qVnmDzrXZXsuIOndV9E3YeZ+iB1+ufEJeeADc0M=)
                          3: uTt1-O7JdcMd5DNwFU1zr-UOPQE.roa (hash: Zjr4fujCXBRskWeIesCak3mrz6dTWdtu0/f99U78B+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 20:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:90:e7:1a:aa:a4:b5:5e:7a:b9:c5:27:d6:9f:e8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
        Validity
            Not Before: Aug 12 20:01:36 2026 GMT
            Not After : Aug 13 20:01:36 2026 GMT
        Subject: CN=daa55255c0dd9adf6a71e6acd74c64e1cfd14069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:0a:88:ae:d1:aa:94:41:6c:74:89:1f:03:
                    14:34:3b:50:9b:6f:68:df:84:26:24:a2:50:c9:57:
                    3d:9d:62:e6:c1:e2:1e:e2:3f:a2:23:a4:c9:1c:44:
                    9f:4d:c0:3b:10:39:e4:82:fb:97:a2:09:8c:e9:40:
                    73:89:d3:33:fd:02:ae:79:fa:60:e9:52:f4:86:f5:
                    b6:e8:91:86:30:e1:a0:40:45:84:bc:93:a6:dd:68:
                    ab:dd:5d:92:35:41:e6:38:48:6a:f0:d5:a0:1d:76:
                    ee:45:8a:c2:f6:cd:75:0e:6f:61:f0:36:5a:27:e3:
                    d3:ca:f3:ef:66:97:eb:ee:9e:8c:4f:8a:e8:ea:e9:
                    9b:35:84:02:0e:bd:74:9a:d2:f0:6e:1b:06:d8:a1:
                    aa:0e:d1:e6:db:fb:4f:9d:10:c5:5e:4c:0b:54:2b:
                    a0:4a:f4:0d:38:f0:2b:c6:3a:ac:94:9c:e9:7c:ed:
                    1d:17:c5:f5:04:e8:fd:ac:cd:ae:29:19:0b:3d:46:
                    7f:35:87:3c:d7:24:b7:f1:20:b1:91:53:37:fd:8e:
                    7c:33:3a:be:ef:01:48:12:b9:10:75:ad:0f:6e:89:
                    0d:15:35:50:b9:bc:bb:ec:ed:de:ac:d6:da:4f:94:
                    04:fa:60:ee:84:ee:b9:3f:84:84:a0:bf:48:eb:4b:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:52:55:C0:DD:9A:DF:6A:71:E6:AC:D7:4C:64:E1:CF:D1:40:69
            X509v3 Authority Key Identifier:
                keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:2b:29:cc:66:fb:a1:39:84:ba:c3:28:5d:64:f7:d7:35:
         08:a0:ef:29:b9:60:aa:17:f9:3c:97:e4:dd:69:b9:15:f0:5a:
         f7:42:b0:21:a6:4c:2d:93:8a:7e:44:6e:7b:ab:3e:ee:75:d9:
         ca:0f:4d:09:c4:14:21:9f:ba:89:d6:28:d7:21:d0:36:31:c9:
         e9:43:db:6d:34:91:25:ef:fc:cf:60:0d:71:76:7b:4a:81:d2:
         16:19:0e:da:83:13:f0:c1:4e:7d:e7:ac:41:40:51:83:a1:31:
         12:c2:ba:e9:06:b8:65:fd:aa:62:62:91:3d:1c:04:71:56:06:
         33:5f:b1:4f:c8:e0:e6:fb:75:c2:cc:4f:79:6d:51:b6:f8:41:
         b8:29:18:38:34:9c:e7:5b:e8:e5:1e:43:85:05:5e:1a:ea:bd:
         7b:b8:ad:cb:b6:b4:9b:e5:57:c0:d8:16:f8:80:da:2b:98:2d:
         98:a4:9e:f6:a0:57:4a:47:a8:98:6a:e8:b2:d3:f9:d8:52:55:
         7b:6b:b7:9f:27:5a:17:0e:af:71:4f:5e:20:b7:e2:42:c2:8e:
         3e:b3:9c:b6:cf:13:48:1c:04:06:8a:8a:49:70:e4:b8:2c:e5:
         f5:87:3c:61:5a:a2:8d:9d:db:74:f0:71:2d:d4:3f:dc:48:77:
         d9:4b:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:28:14 2026 by rpki-client