Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File:                     pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier:          W2xVqgg4aZwvS7OVAfdSNPxeQuMk1KH7jJP6vttcpvg=
Subject key identifier:   F7:32:5C:88:58:BB:E3:E1:26:B6:91:E0:04:1A:E0:AF:9A:16:A1:FB
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer:       /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial:       01A03ECD78DCCF36EF59DDE54C5BB6D6D278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number:          02B9
Signing time:             Wed 26 Aug 2026 16:00:48 +0000
Manifest this update:     Wed 26 Aug 2026 16:00:48 +0000
Manifest next update:     Thu 27 Aug 2026 16:00:48 +0000
Files and hashes:         1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
                          2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: NoZfQEmwbvNEvhqM64g9r60bMnr3nyW+bM8aCak/WUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:cd:78:dc:cf:36:ef:59:dd:e5:4c:5b:b6:d6:d2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
        Validity
            Not Before: Aug 26 16:00:48 2026 GMT
            Not After : Aug 27 16:00:48 2026 GMT
        Subject: CN=f7325c8858bbe3e126b691e0041ae0af9a16a1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:a0:8f:06:d8:42:6b:dc:15:e3:2a:a5:eb:
                    66:d9:18:80:ff:f6:83:f7:29:cf:be:69:93:d3:50:
                    44:a6:22:5f:63:d8:a0:c3:c3:97:2e:30:19:51:45:
                    e1:ab:3b:6f:53:94:d5:46:72:72:71:ec:ec:91:07:
                    24:e0:eb:05:e7:13:a1:f5:17:d5:53:33:6c:10:e5:
                    4a:45:8b:c6:eb:d9:7d:4d:34:19:27:7f:8a:00:ca:
                    98:54:c9:71:17:31:33:88:3c:32:9a:c9:6f:b5:f8:
                    91:cb:78:57:7f:79:09:60:f1:a2:22:60:85:1a:96:
                    de:45:31:4c:f6:41:11:e8:43:6c:33:d8:0b:da:d1:
                    6f:dc:38:e1:18:c0:ce:86:df:6a:58:7d:a7:c6:ad:
                    75:fc:35:a8:06:18:74:f7:ff:be:e4:f9:c7:95:6c:
                    f9:50:5b:fe:2d:78:79:93:6d:cc:d0:cb:7d:d1:a3:
                    49:df:ba:6f:53:94:ce:40:ea:ca:37:0f:aa:12:c3:
                    99:37:04:4d:ef:74:37:08:00:4e:e4:17:be:ee:b3:
                    bc:0a:c8:f8:3a:f8:c0:b3:cf:10:9b:3c:43:42:f1:
                    d9:e8:ec:65:74:dc:12:61:f7:4e:68:0b:0c:58:3e:
                    d1:85:91:e9:64:af:7c:b5:d6:5b:21:1e:64:97:21:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:5C:88:58:BB:E3:E1:26:B6:91:E0:04:1A:E0:AF:9A:16:A1:FB
            X509v3 Authority Key Identifier:
                keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:62:20:e4:ef:ef:c3:8a:3a:98:c8:b4:4b:18:d8:de:62:2e:
         78:bd:05:b5:60:54:dd:c2:38:22:41:40:8b:9c:16:b0:2a:13:
         dd:ff:ac:ea:8b:ab:2a:1a:ff:b7:24:9a:70:1e:9d:db:84:55:
         60:ba:5f:04:62:7f:24:42:50:0b:21:5e:ed:62:c3:6d:df:e4:
         a9:4c:74:f1:50:f9:85:6a:25:ea:1e:a0:ab:87:c8:80:09:57:
         7e:b6:bd:4d:08:1b:0b:a0:61:e7:80:83:5b:2b:d1:a2:76:18:
         9d:66:fb:5e:e3:4e:f2:23:b8:19:c5:5e:37:ec:21:7d:96:dc:
         49:4b:92:37:bd:e1:cb:35:25:77:4c:f2:24:b4:7c:8c:df:ec:
         01:49:63:4b:10:eb:51:83:14:f8:81:ee:58:f2:e0:ff:5a:6c:
         e6:c4:5b:cb:b6:9d:fe:59:13:6c:40:48:02:a8:b3:1a:e6:0f:
         43:54:ff:74:29:91:3a:7e:08:ab:e8:6d:f1:21:71:7e:59:89:
         3e:2f:88:04:9b:70:66:05:62:38:ee:fe:8f:b8:ed:e3:da:4a:
         6f:75:c3:aa:f4:80:54:ed:70:3a:b7:75:a9:67:57:e5:5a:92:
         09:2a:7f:80:6f:68:c7:3b:99:b7:c5:c3:1c:87:a1:33:71:62:
         16:54:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:26 2026 by rpki-client