Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File:                     fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier:          E5MXznGPDEdQWxHYIYW3FOIj0OesU934rA8mXaJgBbI=
Subject key identifier:   8C:87:12:B1:5F:85:97:BA:69:DD:2C:DF:F9:D8:0F:D9:DC:16:A1:7B
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer:       /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial:       01A003CBCF7691A8E9C7C6B1E47ED6F6A63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number:          1857
Signing time:             Sat 15 Aug 2026 05:01:23 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:23 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:23 +0000
Files and hashes:         1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
                          2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
                          3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: En2CoFIQ8zifvqtbXneUL/zSo+DYhQJ0agTogD0vnnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:cf:76:91:a8:e9:c7:c6:b1:e4:7e:d6:f6:a6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
        Validity
            Not Before: Aug 15 05:01:23 2026 GMT
            Not After : Aug 16 05:01:23 2026 GMT
        Subject: CN=8c8712b15f8597ba69dd2cdff9d80fd9dc16a17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:52:b5:f6:c9:01:76:62:55:1a:d0:d5:01:
                    72:35:dd:70:af:1f:a5:35:2e:46:7e:bf:b5:2f:5c:
                    d3:e0:ba:76:a6:57:d3:a0:10:e0:1c:7a:af:9a:1c:
                    99:3c:82:0a:17:e8:2e:40:5c:b2:7b:2a:cb:79:aa:
                    70:27:60:86:88:e0:d0:2e:51:ad:2d:71:9b:96:9d:
                    e2:13:36:8a:db:60:c9:59:2f:b1:f3:9c:75:10:c1:
                    84:bf:dd:af:83:15:a9:14:3c:6f:b3:31:b4:17:ba:
                    65:9e:4e:d2:5d:8a:8c:21:f7:cc:37:26:04:17:02:
                    dd:97:b1:43:90:1a:b5:dc:c5:41:ed:9a:8b:82:f9:
                    f8:ff:45:96:3a:62:27:be:72:dc:d5:f2:af:ec:53:
                    bb:98:78:a9:33:dd:d4:5f:78:e9:eb:13:48:32:76:
                    9e:16:1a:6d:e4:b9:a3:5a:0e:71:53:48:f7:f2:82:
                    19:f3:40:e7:15:79:9f:69:b6:54:2e:85:b9:08:0a:
                    dc:54:85:9a:0c:bc:05:7d:d4:06:22:39:85:25:e6:
                    53:dd:60:c3:93:87:b3:4a:8d:aa:53:f1:41:0d:74:
                    ae:f5:95:1a:25:06:1e:b6:23:0d:77:0d:21:74:20:
                    6b:a4:20:9b:9b:e7:6a:4a:64:50:7a:15:50:61:a8:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:87:12:B1:5F:85:97:BA:69:DD:2C:DF:F9:D8:0F:D9:DC:16:A1:7B
            X509v3 Authority Key Identifier:
                keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:89:cd:86:27:86:a8:3a:29:47:9b:9a:ce:46:e3:a2:04:90:
         af:b9:7b:b6:8f:71:46:96:d2:3e:a4:ef:a5:cc:c5:0f:51:b7:
         cd:26:d7:9e:9e:ce:38:e5:e2:ea:5d:ad:86:d0:06:b0:e2:f9:
         b0:8d:92:51:1e:88:38:9a:0b:a2:4a:05:1e:19:42:27:0e:d8:
         06:3d:32:c3:ec:4f:11:16:9c:17:32:fd:21:84:4c:b9:be:3e:
         79:a4:9e:63:33:fb:9e:96:45:85:c3:13:b7:f3:26:1f:20:fa:
         f3:06:d4:ac:14:5d:11:be:14:66:46:ff:86:59:c0:ac:b5:26:
         a8:f5:75:68:b4:67:b1:ba:2f:86:ee:0a:35:7c:5d:1f:ba:7b:
         ae:7b:76:17:7b:16:10:00:a5:e1:81:a1:a5:86:5e:dc:99:12:
         db:27:72:f9:2f:01:60:c0:77:a2:e1:6c:a4:63:13:a0:01:c2:
         4a:a2:00:83:00:5b:9f:12:bf:ca:21:94:26:cb:01:9d:27:90:
         42:a8:ec:ca:46:c7:f2:7f:ff:b4:5e:a1:72:c9:d7:6c:e7:66:
         0c:0f:f0:28:b0:66:0b:cf:3a:37:fe:27:ab:39:ba:7c:df:00:
         33:98:c8:5c:52:80:55:d9:95:5d:48:35:b5:3b:e5:e4:6d:4a:
         1a:25:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:29:03 2026 by rpki-client