Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File:                     TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier:          uYuQLDC7xlBJXbT+Gsr3Z32gcSF3JO2iE2cUgxtdNkM=
Subject key identifier:   E4:38:04:0E:A4:EB:FE:89:98:3A:8E:EE:A3:C9:02:3D:C6:7F:AB:F5
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer:       /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial:       01A002EFB0D880EEB6BBD677FB42D9A25BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number:          18FE
Signing time:             Sat 15 Aug 2026 01:00:57 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:57 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:57 +0000
Files and hashes:         1: 7Azcn7c2MweeaxuWOj7OLj6diFk.roa (hash: 9wrLyTPi+lVBHZ3aYuQBL6m3fTURk0GDh6dTwauLiZs=)
                          2: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: 4hpoE6gMzqKcoFsyoZiYOzdmdjRkC3s1v3LOsCPQ4FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:b0:d8:80:ee:b6:bb:d6:77:fb:42:d9:a2:5b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
        Validity
            Not Before: Aug 15 01:00:57 2026 GMT
            Not After : Aug 16 01:00:57 2026 GMT
        Subject: CN=e438040ea4ebfe89983a8eeea3c9023dc67fabf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f3:e4:ff:65:c3:aa:8f:d2:76:4b:cf:cd:f9:
                    0d:5f:a8:97:07:c1:4a:0f:6c:7d:34:0b:ef:ec:6f:
                    dc:db:72:6f:3a:1b:65:cd:c7:a0:d0:99:4a:c9:43:
                    ae:60:75:47:cd:34:80:f7:5c:20:8d:ce:37:a3:b1:
                    f3:39:d4:bb:3c:67:b8:b3:0c:57:14:90:90:86:5b:
                    4d:20:92:02:ba:0a:40:c4:6f:47:f7:8a:cc:32:4e:
                    00:91:7e:71:dc:32:a7:ff:5a:92:fb:7a:09:fe:ea:
                    50:71:72:e5:48:44:e2:56:fe:14:11:03:29:93:a3:
                    62:22:b1:af:02:bf:30:49:b3:ee:9b:f7:6e:cc:1f:
                    32:a3:87:ca:5f:92:69:5e:cb:69:59:d9:16:44:92:
                    f2:4c:c4:98:d6:a9:70:c5:bc:2e:bf:29:46:5d:a0:
                    90:8c:0c:23:d5:4e:16:cf:d1:14:34:e1:9c:55:b7:
                    a1:3e:e2:0c:0f:37:8d:c7:4b:e5:1e:cb:6a:e8:06:
                    5b:4e:fc:b5:60:32:17:d2:aa:22:29:cb:6f:0e:fa:
                    c7:d3:a6:f3:15:55:30:61:60:ca:1a:b2:b5:f7:ca:
                    7a:43:c3:0e:db:85:55:f2:29:24:0e:72:3e:50:f7:
                    82:b2:5a:21:53:d4:b0:57:a7:e5:72:a1:ae:91:69:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:38:04:0E:A4:EB:FE:89:98:3A:8E:EE:A3:C9:02:3D:C6:7F:AB:F5
            X509v3 Authority Key Identifier:
                keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:c3:3e:0e:4e:4e:11:da:c5:4f:11:89:ba:17:75:03:0a:
         c9:d3:15:6c:20:3e:60:f8:b6:9e:26:08:12:42:3c:94:bd:e8:
         d5:de:22:4b:0c:26:50:bf:9c:2e:f1:49:46:4d:48:ae:97:4e:
         b3:ed:af:02:e6:42:39:5f:fb:17:fa:b6:98:4b:63:9a:b5:0f:
         be:65:ce:89:22:5a:36:42:6c:18:12:3c:53:be:19:36:78:00:
         67:3e:75:6b:e7:d5:b6:79:7f:59:9b:00:2b:2f:cc:27:fa:89:
         37:76:73:89:b4:16:2b:68:54:45:04:53:cd:50:2e:37:fa:fc:
         ef:2a:4b:90:37:f8:e0:33:a1:eb:19:7f:86:c6:92:54:21:e2:
         38:6c:f3:e1:3c:13:6c:b2:38:ac:1a:20:96:e9:8c:0b:da:d2:
         a8:00:7d:51:c8:c2:01:6d:99:1a:6d:90:02:2a:67:98:8d:06:
         d7:59:4d:7d:1a:db:59:d9:2d:83:1c:f8:dc:49:0e:e2:ca:e3:
         b8:13:38:b6:45:9f:ab:c8:50:b9:cc:c4:d6:90:7c:93:50:6a:
         48:f3:96:a4:dd:ea:5d:41:c5:95:46:b9:19:43:f6:9f:21:55:
         e2:54:9f:a7:f9:88:d3:a6:36:41:7b:1b:92:61:e4:17:18:92:
         3f:f9:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:23 2026 by rpki-client