Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File:                     0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier:          nrkOaGHPaLZlFCq5kaIrURYz9n9X/20J7taL/7wCYJI=
Subject key identifier:   10:6F:10:0A:4B:53:82:3B:75:15:8E:47:95:B4:9F:8C:71:70:68:AC
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer:       /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial:       01A0005CA3A8975371D17CAB89CF73CE52E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 13:01:06 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:06 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:06 +0000
Files and hashes:         1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: OgUia4honxPVVyXAP7HaIGzKq5FusLdgaeIYuKXCx9w=)
                          2: VIaUBNL6WlewF92VFkKdJgnVoGY.roa (hash: BUyipvdgIG16YQ2huh7/x7j/eCf65uRrmNCB96nUmSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:a3:a8:97:53:71:d1:7c:ab:89:cf:73:ce:52:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
        Validity
            Not Before: Aug 14 13:01:06 2026 GMT
            Not After : Aug 15 13:01:06 2026 GMT
        Subject: CN=106f100a4b53823b75158e4795b49f8c717068ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:5b:5e:95:3a:6b:66:f1:52:90:43:ce:77:
                    46:c5:19:86:fb:c0:52:ea:ed:9b:a1:ef:47:74:6a:
                    45:c7:ff:26:84:0c:32:a5:e6:9c:9e:ed:75:57:fd:
                    82:4f:ab:b5:d7:6f:5e:f6:ac:a3:38:5b:cd:40:f0:
                    9f:fe:a8:6a:f9:37:f4:89:c1:64:02:0a:f3:3b:91:
                    6d:c6:7b:31:df:c8:2d:08:71:d2:36:14:91:ef:4d:
                    4b:22:f7:7d:68:7c:b6:ad:c7:03:74:c2:e1:ab:00:
                    3d:8c:5b:68:0d:af:f0:a5:0b:bc:e2:64:d0:2e:05:
                    59:6a:25:57:59:20:22:e5:81:3b:6b:b1:09:35:16:
                    f2:b9:5b:93:23:d2:8b:b0:af:e5:f1:90:f7:e6:06:
                    3f:9e:b3:08:c7:24:f3:2f:60:f6:ea:4a:79:02:50:
                    56:f8:41:fc:3c:3d:21:df:b4:79:95:d6:57:95:64:
                    8a:25:2b:08:1f:d6:57:ee:6a:bf:5c:83:82:2b:1b:
                    5a:96:f2:fb:70:4d:8f:a2:4b:47:39:cc:b9:da:8c:
                    bf:29:c0:29:b5:b4:00:de:aa:34:56:99:35:2d:bb:
                    53:4e:98:6d:7b:0a:61:33:3a:c4:9b:fc:88:be:49:
                    c8:c3:e7:f7:c6:29:4b:68:97:ba:fc:a9:a4:fb:c5:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:10:0A:4B:53:82:3B:75:15:8E:47:95:B4:9F:8C:71:70:68:AC
            X509v3 Authority Key Identifier:
                keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:87:af:c2:3a:e9:72:62:5a:71:6d:df:84:07:f0:52:d0:
         fb:d8:8d:c2:ab:94:26:c0:13:f4:c2:2a:bb:f3:54:da:32:5a:
         b9:00:90:75:48:1e:26:58:83:ca:11:7a:c6:02:4e:73:b7:83:
         8a:76:f5:28:4f:53:78:35:44:13:37:92:9b:28:65:a5:5a:8a:
         28:f7:7e:c2:97:cf:ab:6e:d8:1f:97:8f:61:ad:eb:2d:a7:5f:
         39:92:f8:a0:de:ee:20:ac:69:73:b1:45:4b:71:a4:33:d9:d0:
         c1:08:32:de:6d:26:25:f0:f7:dc:78:f4:42:bd:a2:32:84:e0:
         c5:eb:ba:67:59:61:02:8a:3d:f3:4c:42:80:a8:c7:82:e5:d7:
         fe:68:d7:27:e1:58:cd:67:43:aa:c7:2c:13:0a:d7:51:82:a1:
         6e:f5:bd:e6:33:b9:49:45:f2:50:49:1f:db:44:c9:6d:cb:3d:
         d0:0b:12:5b:e8:cf:ef:7a:69:ef:43:9e:76:70:1c:8d:cd:17:
         81:ca:6a:88:06:1e:3d:7c:65:7b:10:24:57:0b:f4:b6:ea:ed:
         dd:12:8b:8e:16:cb:35:ce:1c:2c:51:37:3b:24:c8:ea:8c:07:
         36:40:3f:1a:4b:b0:62:1d:11:1b:eb:ec:5b:74:f6:4d:da:b9:
         e3:1b:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:52 2026 by rpki-client