Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File:                     iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier:          4KXCGhjh+uqZJyNlEPReeNyGMbB1MpPFplsB2FZMGHc=
Subject key identifier:   E8:04:9B:C3:FD:1B:D5:E7:14:E0:38:2F:DF:B0:61:46:8F:30:A3:C8
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer:       /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial:       01A003CBB230EE63533E0747E5431978C055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number:          01DE
Signing time:             Sat 15 Aug 2026 05:01:16 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:16 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:16 +0000
Files and hashes:         1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
                          2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: +VwTRKOJZP6hpKvIWJHyzdZ6Hb0uf793VqcKjd+tgUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:b2:30:ee:63:53:3e:07:47:e5:43:19:78:c0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
        Validity
            Not Before: Aug 15 05:01:16 2026 GMT
            Not After : Aug 16 05:01:16 2026 GMT
        Subject: CN=e8049bc3fd1bd5e714e0382fdfb061468f30a3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:d2:24:4a:0f:36:6f:45:d9:f8:97:da:c0:
                    52:5d:5c:dc:73:30:01:67:30:e8:f9:c7:77:ad:3e:
                    00:6c:53:3b:c2:b4:0c:d4:8f:2e:81:0b:85:5c:e7:
                    70:90:fb:49:5e:24:1b:30:46:e5:66:14:b8:76:f8:
                    fa:5a:4e:77:c5:10:2c:cd:de:55:01:f5:84:d9:e6:
                    a1:7e:5e:2f:42:83:f3:f4:55:e0:ff:e3:2c:8f:b5:
                    5f:63:56:9a:ab:6a:7c:19:3d:d1:9b:ca:74:ca:b9:
                    a7:d0:72:43:76:df:36:9c:02:2b:5d:a0:9a:e7:f4:
                    0b:67:4c:19:22:9b:48:44:2f:62:b4:8f:79:51:96:
                    ee:d7:a2:47:0c:f5:45:ff:1c:a5:c4:14:cb:48:d5:
                    f2:60:95:7f:bd:5c:7d:dc:7a:1a:ad:d0:a9:27:17:
                    cf:59:fc:a1:3e:af:ff:4a:ab:56:46:90:dd:24:66:
                    f7:e6:81:9a:17:1d:eb:8f:ff:15:8b:0e:ae:e1:77:
                    b3:0f:4c:83:cc:3c:e9:21:c5:da:45:fc:f3:be:6c:
                    27:33:8f:42:c9:17:aa:87:1d:ed:dc:37:d8:8d:cb:
                    71:54:b7:ff:45:f3:7a:5f:de:5c:0c:a5:78:20:fc:
                    67:57:1e:1d:fd:52:a8:59:e9:59:cb:69:aa:42:9e:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:04:9B:C3:FD:1B:D5:E7:14:E0:38:2F:DF:B0:61:46:8F:30:A3:C8
            X509v3 Authority Key Identifier:
                keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:de:7d:49:85:c3:bb:1c:8b:5e:bd:0f:c9:a5:30:2d:86:ca:
         d4:66:f7:03:35:aa:b4:b1:10:fb:8b:7a:50:de:26:0e:b8:0d:
         79:8c:ca:7d:47:e0:d4:ac:1e:fd:05:e4:ad:19:13:ac:b6:53:
         a6:38:19:cf:1f:6c:bd:87:16:7d:2e:06:1a:55:32:8c:1f:fa:
         cf:c9:0a:75:2e:b8:df:78:94:6f:7f:5e:d9:7e:dd:8b:cb:8e:
         de:b5:c4:79:9e:98:dc:aa:09:76:0a:1a:da:eb:7f:87:d4:27:
         c2:2d:ef:33:8e:8f:2c:17:4f:6a:8b:40:4c:10:40:b5:a2:8e:
         d7:f1:4c:24:d7:5c:a8:9e:d4:cb:ce:dc:14:0c:46:a1:59:21:
         93:ce:fc:31:76:60:2e:a2:39:55:44:b7:6d:70:91:92:de:28:
         cb:62:1a:cc:37:36:9d:9e:9e:08:9e:34:11:02:d3:46:15:11:
         a9:ac:83:d2:3b:31:e4:6e:7f:d6:06:86:e2:12:9c:63:c6:18:
         a7:b2:03:6b:14:c3:d7:c4:33:6f:f1:2f:d1:bb:cc:be:bb:2f:
         2a:2e:6b:75:64:e3:ee:29:3a:b8:bf:87:cd:3d:b8:54:dc:43:
         5b:0d:a9:e3:c2:ab:4d:66:de:d9:1f:2b:16:40:ba:68:eb:49:
         76:8b:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:49:01 2026 by rpki-client