Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File:                     A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier:          3L99gpewMsWOFznDgA4Oq8CwY/9msp6YArTnd4K3hts=
Subject key identifier:   6F:D5:58:5D:78:B8:1E:E7:AE:38:0C:A0:A7:D9:47:B6:10:CF:4D:9A
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer:       /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial:       01A0005C5058711915AE62B445DB23988418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 13:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:44 +0000
Files and hashes:         1: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: OYNOXHSGD36nwRK+j1BlcMnHNJ0sJWl4m3MX0syUbZY=)
                          2: eG7fxABMtqyI5yUjBnhzemDqnwY.roa (hash: HFmCfi29zh6VfW2O1TlhihYlPxvODE9zNcg66Ls00yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:50:58:71:19:15:ae:62:b4:45:db:23:98:84:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
        Validity
            Not Before: Aug 14 13:00:44 2026 GMT
            Not After : Aug 15 13:00:44 2026 GMT
        Subject: CN=6fd5585d78b81ee7ae380ca0a7d947b610cf4d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:24:5b:49:2a:c9:4f:dc:64:dd:27:4b:08:
                    61:98:46:77:4f:40:b3:79:0b:ac:8b:bf:0c:ac:e2:
                    b7:d6:9f:99:e5:c6:5d:c3:24:47:1e:db:e1:af:f3:
                    83:3a:99:00:58:d8:c9:ac:7e:c3:6b:b7:c6:04:ec:
                    fd:24:d5:64:d5:18:b6:24:5e:37:99:05:62:f6:74:
                    22:44:76:e3:a3:d4:2a:e3:81:c5:8c:58:5b:a1:93:
                    62:8d:93:4f:41:23:d9:a8:7b:88:67:69:a8:0e:74:
                    c9:6b:f9:9e:5c:9f:6f:0a:de:60:34:1a:ba:2f:ed:
                    86:41:4b:eb:29:99:af:68:b0:31:8c:57:33:74:b5:
                    83:c1:36:12:d3:36:05:88:dd:1e:48:ac:f4:28:4a:
                    76:1f:80:0d:e3:d4:5b:b1:e9:77:7b:2c:b5:a4:3f:
                    29:74:55:28:c1:4b:a8:60:0a:ea:4a:f0:cc:c4:22:
                    aa:37:94:6a:8b:79:85:29:cf:08:aa:2c:28:91:1c:
                    a0:8c:98:38:ec:ca:91:67:0f:ee:4e:68:ae:02:3a:
                    7a:1f:b6:76:91:1f:f5:fc:36:20:bc:d6:b4:5a:90:
                    eb:94:ce:fa:37:1d:3f:11:bc:2c:a2:a8:b3:7b:eb:
                    f5:2a:04:69:00:dd:ab:91:73:f2:22:72:65:6d:eb:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D5:58:5D:78:B8:1E:E7:AE:38:0C:A0:A7:D9:47:B6:10:CF:4D:9A
            X509v3 Authority Key Identifier:
                keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e8:8a:59:f2:5d:d3:a5:bc:e8:3c:ee:c2:f8:84:89:a5:ea:
         62:82:3f:3b:b4:ac:9f:29:68:eb:4a:ef:c2:2f:8a:79:3b:b7:
         21:e5:4a:51:ad:c4:b9:07:f0:0b:c4:58:22:3b:19:82:6e:4e:
         2a:19:50:b7:e3:39:65:5a:03:c3:33:71:2b:4d:69:22:7a:ea:
         0b:b1:2d:b5:19:00:53:c0:3b:94:30:cc:2a:7d:05:a8:b2:13:
         90:43:76:a3:8e:1d:84:c7:07:ff:5c:d4:ce:08:6b:89:1f:56:
         6d:5e:6e:0c:29:8f:85:8e:57:e1:66:4c:2a:ca:09:47:b7:c2:
         e9:f5:be:b3:94:88:7f:b1:01:b4:c6:06:7e:4b:c6:1d:45:83:
         6d:a6:0d:7e:4b:82:c8:7d:7d:61:b5:7b:62:0c:4a:c7:9a:bd:
         03:ee:3b:76:39:75:30:62:c0:53:27:4d:8e:74:87:5b:5e:61:
         97:85:79:d9:f7:0f:76:43:fe:ba:0a:11:f8:18:de:0d:b7:53:
         87:b8:6c:12:28:9f:56:88:66:a3:76:06:57:04:a7:7c:bd:df:
         d3:a9:96:0a:82:69:f2:1a:ce:24:e9:7d:a9:38:d4:0a:0e:71:
         7f:34:be:5f:70:8e:b3:7f:8e:3d:56:c1:ff:65:19:98:7e:d6:
         e7:cc:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:04 2026 by rpki-client