Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File:                     pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier:          agBZEj633mr8AxOS7fePgyn0JpGP+DUrTmSE1pqm24E=
Subject key identifier:   F5:AC:9F:69:2B:1B:E7:F0:7F:BC:20:66:A3:37:B5:54:91:86:D7:8A
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer:       /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial:       01A00213B78F2F5F6FE744C7BDED9F37AB06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 21:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:41 +0000
Files and hashes:         1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
                          2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
                          3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
                          4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: hNYl2glouAu0pfZnjOb/kNstn8G2ECD+6scF7E3ykMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:b7:8f:2f:5f:6f:e7:44:c7:bd:ed:9f:37:ab:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
        Validity
            Not Before: Aug 14 21:00:41 2026 GMT
            Not After : Aug 15 21:00:41 2026 GMT
        Subject: CN=f5ac9f692b1be7f07fbc2066a337b5549186d78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:bd:cf:a9:f2:91:ea:02:d0:ac:21:f2:bb:
                    d7:14:56:a1:48:da:10:1f:cf:29:c2:57:f0:41:7c:
                    1f:47:30:78:d6:29:fe:58:9a:28:09:d4:a1:e3:57:
                    98:f9:25:4f:8b:8a:1e:25:06:ca:9b:2a:53:1e:97:
                    03:a9:92:e7:40:13:d3:0f:da:a7:05:9b:f1:0d:53:
                    b0:58:6c:7d:07:8f:a6:00:7f:b6:14:31:2f:30:e5:
                    3d:95:06:1b:5c:1a:aa:e2:f1:08:35:f4:7a:5f:18:
                    9d:11:47:53:19:29:ec:4a:fa:a1:4e:d3:87:e0:f1:
                    95:f1:d9:8e:e5:0e:00:44:79:17:6b:07:98:4e:c4:
                    d8:68:26:e8:d1:7e:87:c0:b9:ad:55:c2:6c:3f:6e:
                    59:31:0d:9c:26:4a:cf:db:46:33:f0:3f:5f:94:ab:
                    85:69:19:17:2d:f4:9f:8e:77:1a:a8:92:62:b3:32:
                    86:97:22:f6:1b:08:cb:59:f2:ac:d3:f2:2a:24:5a:
                    04:5c:73:99:60:3e:8f:42:65:e3:3d:ce:51:89:61:
                    ff:29:8b:33:0d:a1:01:a3:d0:cd:4d:aa:6c:5c:79:
                    db:00:67:9c:81:0a:f6:26:8e:58:15:25:07:7d:8f:
                    aa:a7:b4:1c:8b:a8:d7:79:b2:1d:15:aa:39:4b:6c:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:9F:69:2B:1B:E7:F0:7F:BC:20:66:A3:37:B5:54:91:86:D7:8A
            X509v3 Authority Key Identifier:
                keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:db:8d:1d:5c:54:3f:93:e0:a8:86:b6:c9:75:29:e4:80:2a:
         64:27:23:cd:de:f6:fb:7b:8e:93:c8:aa:e1:14:71:77:6b:e1:
         69:94:de:3a:0c:51:ef:f2:6f:6f:24:53:d5:95:fb:1f:52:da:
         ce:9a:81:8a:98:05:ba:c4:85:73:d6:11:c9:fa:5b:02:08:78:
         09:89:46:f4:c2:6f:1f:e8:73:84:b2:69:95:47:0f:57:e4:94:
         c4:2b:5f:1a:da:1e:4d:aa:8b:70:fd:93:32:a5:77:6d:b6:9a:
         96:23:97:61:19:12:34:61:94:28:8d:74:9e:60:84:54:60:9a:
         1b:09:05:44:c6:45:fd:98:41:ea:13:c0:ac:29:3f:cb:25:87:
         bf:35:6c:79:d1:5d:4f:a6:14:e3:45:45:99:81:4e:c6:47:26:
         da:2a:0e:32:e0:9a:0e:23:78:48:aa:8a:ee:7b:6b:35:1e:f3:
         5a:d9:65:32:9e:be:0b:69:2f:9e:7f:aa:93:8f:6f:74:32:6f:
         b8:cd:e1:e6:7c:16:04:35:36:33:98:6c:0a:87:c4:2f:e7:96:
         93:71:b0:5f:c6:23:2e:86:38:19:37:ba:a5:81:88:87:7a:6c:
         23:ff:cc:19:cb:6d:ce:43:e5:b0:d5:fe:04:3b:75:8d:ea:d7:
         98:95:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:54 2026 by rpki-client