Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          UiEEj2s/GQR/xnz+rJtUtkn3ssMNYNboNd6uEEcMTvc=
Subject key identifier:   33:42:86:98:1A:99:00:33:E1:DF:AF:39:79:AF:49:3D:FB:E6:59:28
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       01A001A5F7D1FF03B2AAE7325B4D8A72FDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          12EA
Signing time:             Fri 14 Aug 2026 19:00:48 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:48 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:48 +0000
Files and hashes:         1: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: UwNwkGlEn/y7rPF97D9qDOqdnyhDuRVJ0+WsDOnsRfg=)
                          2: Mlg2-dFb_pDIGLBjBDPo1_IYStc.roa (hash: 3gsMMrCsLQ277PtzM/yqX0/jKqAoyQGVpd57kpWn5Y0=)
                          3: Panm1LrJmzFbCeMY6auzDqltMH4.roa (hash: pK/SKAriGKfng+iefu9gjvhHjR0adoVJ2FdRhaw344s=)
                          4: p0Xs1g2gPrpuR1TetywC5LyG04w.roa (hash: Z4fC0K+qHQ0x60Cz0JhKoddXxrrHYGk8WlzQTKAj6OU=)
                          5: t1JuJqtlm5tkcuv11rLCrZPDDhA.roa (hash: W72v12TOiNZdKxjgiVDf5vxJzfgbF5c3IIwEwUVHgBQ=)
                          6: uXzbb7T22o7J6EkVQREXQcswsLw.roa (hash: ydW5n2G12ZkBLCFYY+WI/eQDK/fBHPVgfipaLbRLN/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:f7:d1:ff:03:b2:aa:e7:32:5b:4d:8a:72:fd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: Aug 14 19:00:48 2026 GMT
            Not After : Aug 15 19:00:48 2026 GMT
        Subject: CN=334286981a990033e1dfaf3979af493dfbe65928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:c2:2a:b2:29:c1:54:59:68:b2:5e:bf:47:
                    77:bb:7d:87:0f:f1:a5:7c:0e:cf:20:ac:d6:57:a8:
                    7c:85:90:3b:c5:85:d0:4a:93:07:b0:3f:0b:82:56:
                    7a:3d:a7:74:e8:3c:5f:8e:d7:d8:85:5d:fb:51:2b:
                    9d:f4:93:4f:6f:5a:5b:53:fe:07:ea:dc:9b:74:fb:
                    82:a4:bd:74:12:88:af:bd:47:0c:2d:27:e6:aa:99:
                    ed:81:80:71:39:bb:82:7a:23:ce:4c:2d:20:95:40:
                    1e:9e:b7:70:7e:a0:71:fc:2f:f2:69:84:89:fe:5e:
                    61:4c:fe:f2:cc:ab:75:0a:12:00:50:b0:21:95:fc:
                    11:00:d2:62:3f:30:a3:6f:90:7b:b4:8a:31:98:69:
                    9d:f9:e8:17:91:26:a8:6d:82:73:fe:09:35:95:bf:
                    1c:5d:e8:2e:0c:eb:95:e9:ef:49:38:89:54:f0:b9:
                    88:df:e3:86:e8:24:90:8a:b8:34:2c:b3:3e:c0:34:
                    4e:91:09:61:49:29:69:f1:b1:5f:24:b7:a9:26:09:
                    6e:bf:d3:14:66:6f:c3:f3:e7:f9:30:7b:93:4b:a6:
                    f9:b6:d2:23:3e:a2:73:ff:7e:4e:a7:41:c7:e4:3b:
                    2a:4a:09:51:2e:ae:ff:38:65:34:cf:b1:0d:d5:da:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:86:98:1A:99:00:33:E1:DF:AF:39:79:AF:49:3D:FB:E6:59:28
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:95:5a:73:17:32:1a:3f:95:b6:74:3c:b5:11:b2:bd:95:69:
         45:31:9a:07:82:71:f1:57:fa:02:cc:71:ae:c2:f2:a1:9c:bf:
         3b:52:e0:97:b4:d7:36:1f:3e:f2:7b:ba:f4:d6:90:ca:33:bc:
         60:9c:59:7b:4d:e6:99:ca:3c:1a:ba:d4:58:5b:9b:23:0f:ba:
         84:38:d4:b8:7b:0d:3a:f3:a8:58:d9:14:9d:35:8c:ea:82:86:
         6e:9e:7e:81:1b:fe:cb:09:6e:38:f2:20:49:5b:e8:35:5e:10:
         59:10:b3:a3:3e:67:9e:8d:5f:e4:9a:1c:45:b9:6c:a4:7a:e9:
         b3:4a:83:ae:d2:b5:7c:13:97:27:e0:7d:0c:3e:ea:0a:6f:fd:
         2f:a3:68:37:3d:29:ec:ca:4b:28:4e:97:b7:38:ba:31:ff:cd:
         f2:41:92:f2:6e:98:64:aa:bc:bc:ed:8d:b7:cd:ad:62:3c:6e:
         e2:5d:10:fc:3e:a2:3f:21:c2:42:2b:66:4e:f4:2a:d2:60:3d:
         e0:c7:6e:91:8a:61:c3:83:bd:16:80:8a:60:76:54:5f:c5:d5:
         dd:6a:10:27:5e:02:87:f9:ea:0d:8e:57:ee:9e:f5:a4:37:fa:
         64:1b:bc:e4:cc:31:d6:e9:62:fb:9a:f0:97:12:70:81:2f:7e:
         27:4a:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:30 2026 by rpki-client