Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
File:                     V1TRlSf9hdDURKyt1EoBZV_cdAA.mft (raw, json)
Hash identifier:          CpVlnkTtjHLCJWACH1YDULZX6FmRxPXlxUqjJMqMY3Q=
Subject key identifier:   48:87:F0:AC:EB:37:14:9B:7B:A0:9C:0B:A0:C4:D0:7C:0B:8A:E8:B9
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Certificate issuer:       /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial:       01A0201E5F908D42DC00BD92F09D290C1A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
Manifest number:          0682
Signing time:             Thu 20 Aug 2026 17:00:56 +0000
Manifest this update:     Thu 20 Aug 2026 17:00:56 +0000
Manifest next update:     Fri 21 Aug 2026 17:00:56 +0000
Files and hashes:         1: 1-9E8Fl8I5fGeneTIxqtuvR0iWE4.roa (hash: CakQ6glxH9yNTMkZREcZAbanwdl5imHVMt0dXIwhm9k=)
                          2: PK5BYjUiO_K5kQscdaEroME4y1s.roa (hash: oqMS2rUtV2C0xAhugfWIE2wNtG1PEZC9aXZ4w0VeXaE=)
                          3: V1TRlSf9hdDURKyt1EoBZV_cdAA.crl (hash: dtzgUAa7sMCkWcqRDdqIrC/egXJUiLMfUkn50jBTK0M=)
                          4: tnUfvHuSfgNPmXL_767D6WFBjgM.roa (hash: uzNOTVodxRKJwKVmrKmjew5LKcOtf0ikdclKXzZYG5Y=)
                          5: tprxZOo9re_pAd0H5O0KS7lvtng.roa (hash: b/mBBVk4ZIf+C5qZ91Z02yrJaguZVBlQuFtL4TP4qq8=)
                          6: v0uvRzJRH0DybgzTlr--Rro-ZDs.roa (hash: bD9aDZxZQr/1JBS2o2wPvRCRBtPfg/uFRO7Z+g6VqCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:1e:5f:90:8d:42:dc:00:bd:92:f0:9d:29:0c:1a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
        Validity
            Not Before: Aug 20 17:00:56 2026 GMT
            Not After : Aug 21 17:00:56 2026 GMT
        Subject: CN=4887f0aceb37149b7ba09c0ba0c4d07c0b8ae8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:1f:1c:9a:e9:d6:ac:62:70:a0:c0:b5:4c:
                    a7:a0:1d:b3:bf:97:0f:46:c6:da:8e:e4:c6:e5:2a:
                    d3:48:0a:50:5e:ce:ec:6d:b8:c5:2f:d0:68:a4:03:
                    23:e0:0a:a5:09:70:a5:6b:1d:ff:10:96:37:75:9e:
                    bd:cf:74:5c:57:0f:42:0b:57:7e:cb:ba:74:78:f0:
                    d1:97:fb:27:d7:a4:51:fc:76:a3:46:7d:03:40:ea:
                    46:0c:cb:d0:28:8e:e5:df:57:6f:2c:30:1f:8d:b1:
                    8b:29:78:22:af:ff:fc:78:5a:9c:e9:03:49:c8:4f:
                    a9:6a:05:0a:29:48:c1:62:ca:78:f8:2d:6a:bb:7b:
                    48:ba:ad:b8:84:3b:4f:59:b6:d8:42:cf:df:a7:96:
                    d8:38:5c:39:ea:7c:16:4e:2b:4f:66:47:20:44:95:
                    a3:21:0a:67:42:f8:30:9e:74:c9:e1:06:37:c1:b7:
                    7b:f6:13:c8:95:93:f4:0e:a4:c4:00:4e:6f:28:55:
                    43:42:b9:6d:6c:bf:31:df:fd:4d:92:e7:c8:92:1b:
                    02:a9:a2:eb:0d:f7:35:24:fd:1d:62:e9:78:8c:f0:
                    af:0f:ac:d2:dc:0f:8a:2a:e3:ec:1b:da:bd:f7:5f:
                    12:13:5e:cf:0a:86:8a:a6:b2:c3:43:29:7f:75:18:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:87:F0:AC:EB:37:14:9B:7B:A0:9C:0B:A0:C4:D0:7C:0B:8A:E8:B9
            X509v3 Authority Key Identifier:
                keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:39:0c:41:50:fe:fe:83:95:91:3d:98:55:ae:b3:09:18:
         0d:b8:0d:9c:36:b9:0b:63:7a:da:8f:76:71:51:fb:be:c5:7e:
         9a:52:df:6b:79:f3:26:a3:8c:c6:89:ba:26:ca:72:da:f0:aa:
         5c:77:bd:9f:5f:ab:54:7e:94:01:1d:12:7d:f5:17:90:83:c9:
         8f:59:9b:c9:c3:7f:57:73:fe:ab:6e:ec:a1:df:de:07:29:4b:
         02:0d:ec:30:5d:cc:69:3f:f1:57:71:27:ba:c5:dd:12:0b:c5:
         6f:92:23:53:2e:c9:82:b9:46:50:0f:89:57:ff:7e:e8:32:69:
         2f:86:a7:ce:e2:5b:20:7b:ae:98:43:02:7e:f2:5a:4d:06:a4:
         01:3f:31:00:9f:b7:84:18:91:bf:28:a9:56:aa:58:5a:ba:de:
         5a:c0:67:6b:4c:52:39:2e:bc:82:c8:c6:6e:e3:3d:80:88:f2:
         ac:41:a8:bf:1a:6c:0f:61:38:24:3a:81:ed:a0:b6:f0:49:84:
         f4:fe:f8:71:ac:01:89:61:b7:f3:42:cf:7d:7b:f3:eb:de:12:
         7a:76:cf:de:1b:c7:b4:88:d7:4f:e1:b3:5a:77:35:6f:0a:1f:
         5f:5d:c0:5f:18:2f:e4:0f:28:9b:5a:f0:58:ec:e9:61:fa:33:
         58:fb:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:20 2026 by rpki-client