Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          beLYGbXCKFclv2NIMzjPEyDylPjrglVsE37jkzVycJk=
Subject key identifier:   EC:BC:25:96:26:E9:0A:DA:F1:07:28:6B:3B:00:98:E0:BC:61:0D:41
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       01A003CBE087C6E21164976DADD5C8DC822B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          1995
Signing time:             Sat 15 Aug 2026 05:01:27 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:27 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:27 +0000
Files and hashes:         1: AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa (hash: frjC5Gbfb/b6ellH82d+qc/ADaLtRdBgOt68RftUF/k=)
                          2: e352oEgVriZnYK_AKJa-CWKEICc.roa (hash: U/aIt3PG8wiAKdOrpvdQvx37nl+6JO2D4S8tDrL+hpc=)
                          3: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: lz+zjJhCXl8j8eBAN0UwBdiUHscKWTm55agqA3ZeMiQ=)
                          4: oRy8UxR8Vc3XM-6AZCofxXbESbU.roa (hash: OxE0g4307Lmb3G4tCr6jdPxniZZCP8iXtLRIdgc9vMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:e0:87:c6:e2:11:64:97:6d:ad:d5:c8:dc:82:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Aug 15 05:01:27 2026 GMT
            Not After : Aug 16 05:01:27 2026 GMT
        Subject: CN=ecbc259626e90adaf107286b3b0098e0bc610d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:24:d7:8c:4c:18:8b:00:00:c9:01:6e:e3:
                    7b:5f:e9:3a:07:db:6e:f2:c0:83:81:fc:d2:d1:29:
                    77:4c:43:2b:3f:36:5d:0c:35:bf:41:90:7b:72:59:
                    db:9b:f0:ba:d9:02:ce:69:a0:f4:a4:fa:48:1f:ff:
                    f2:f0:b0:63:59:92:3e:73:67:a6:12:3c:f4:26:62:
                    f2:10:c1:aa:ca:8c:3e:8e:33:92:27:ea:b9:d4:e0:
                    30:68:5b:5b:1a:cd:b7:1f:1d:04:be:3b:04:13:35:
                    61:0c:d7:03:60:bd:12:63:c7:06:68:67:0c:d1:68:
                    ac:8c:0d:e6:f3:f3:8b:8a:d7:ae:e6:9a:98:a4:19:
                    f4:77:69:a6:c1:fb:4f:6c:22:0d:8f:1a:0c:f9:97:
                    fb:52:6c:eb:23:e6:94:1d:82:48:1e:1e:a3:ed:79:
                    b9:cd:14:5e:a2:be:5d:51:5f:26:51:22:04:29:f0:
                    4d:48:d9:08:3b:54:5f:43:f0:6c:9b:bb:83:17:bb:
                    fb:cf:9d:6f:92:b3:d8:0c:76:5b:45:7f:df:8f:82:
                    18:39:72:04:a2:80:34:93:ca:fd:28:12:5e:0b:61:
                    3e:95:93:04:0e:b8:62:95:a5:4b:14:2c:01:21:b3:
                    5b:25:cd:ec:8d:a0:c5:0a:d8:38:cc:6f:1f:e4:13:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BC:25:96:26:E9:0A:DA:F1:07:28:6B:3B:00:98:E0:BC:61:0D:41
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:48:3e:36:e7:bf:94:e9:ec:e1:a9:cd:bd:9c:94:c8:f5:
         6b:9d:77:c4:17:df:0d:2b:d1:b3:9f:7e:8d:6d:e4:50:bc:bd:
         ca:d3:7b:6d:46:5b:fe:08:9a:0d:ad:5b:2b:46:a9:64:0d:f6:
         40:2d:c2:58:69:0f:84:da:e9:7c:5d:29:3f:2c:4a:ff:59:f0:
         5f:44:ce:ea:99:d6:fb:af:17:8f:cd:2d:fb:a7:6c:6f:26:59:
         df:b8:75:e6:e9:3e:3d:f1:bf:95:c4:4e:cd:16:84:e2:98:2b:
         1f:a9:55:03:52:a5:1b:71:f4:46:71:8c:f3:41:81:7b:63:61:
         af:60:0b:d3:8b:be:71:58:23:e9:06:96:bd:32:27:de:5d:fd:
         71:51:fe:c6:4d:47:e4:e4:c9:e5:82:a7:2f:0f:1b:48:cf:31:
         12:85:6f:58:31:79:7c:73:78:24:ee:1e:80:1b:fb:91:28:14:
         d3:e3:83:9f:c7:09:d4:17:51:92:91:1d:ee:12:31:c5:db:23:
         7f:3f:d3:43:17:00:d0:81:1e:6c:c4:cf:c1:37:a1:1d:2d:26:
         2b:b6:20:da:3f:f6:26:35:00:bc:a5:05:44:a4:42:f4:6c:7b:
         6d:fa:21:56:68:43:8d:3b:e8:ef:33:ef:5e:6f:bd:ec:84:fa:
         3b:71:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:56 2026 by rpki-client