Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          Wg0N5TBzFhij935SdwaJqYQa+U+dxsG2b+6AxgSAeoE=
Subject key identifier:   8E:77:75:15:62:04:94:C1:B7:7D:3D:E8:38:DA:08:3E:82:09:0C:8A
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       01A040857645174CD17C146248CCFB5E7168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          15F6
Signing time:             Thu 27 Aug 2026 00:01:23 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:23 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:23 +0000
Files and hashes:         1: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: N8LjmGBd41/NDdjwfNePZnUDmmh/mPmaEKjmlR+E7DE=)
                          2: 9HGumSD1_x0A6GFVRII72Mk6IQc.roa (hash: zDHN7zsd4cT6UcilDHH746D5aWLTR5g48sc3Tz1lwGs=)
                          3: DLoi_FVNVtbKfeCiYIr_R31MY6U.roa (hash: 9bwYJoFYkWXExIQ+cBRxfjy/C4rdfubajeMg9M9KLwE=)
                          4: QjniU9JKY3uxyaTTaMZxDIsoq0g.roa (hash: 3apOmupnDVjN1GZ9mnQi2/rmvUPEGD+OAOsFa+YiBwY=)
                          5: Y29egXPiMsW9V8mMeno5f1i_DA0.roa (hash: nkloI1U6cBcEsHKtfEkrQxaSlfy9yDL70Etn0mEQzrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:76:45:17:4c:d1:7c:14:62:48:cc:fb:5e:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Aug 27 00:01:23 2026 GMT
            Not After : Aug 28 00:01:23 2026 GMT
        Subject: CN=8e777515620494c1b77d3de838da083e82090c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:bf:8f:be:2f:e6:22:45:62:ae:a6:88:b2:
                    18:f1:e1:09:bf:07:a3:13:90:fa:42:c5:e6:f8:18:
                    05:ab:c6:84:96:b8:34:de:41:20:f3:77:dd:0b:0c:
                    e4:08:5f:c2:8d:12:66:20:55:5a:5f:f6:96:aa:cc:
                    91:2a:52:85:6a:75:d0:18:c4:aa:4d:89:1c:80:34:
                    ed:14:91:73:8c:5d:50:89:54:fd:22:eb:b5:ee:d7:
                    39:7e:e8:71:49:d7:60:cb:29:a6:9e:17:5d:65:51:
                    74:cc:69:ef:20:de:7b:80:9c:1f:d1:73:4e:a3:a3:
                    5a:cf:a8:90:71:50:e3:6e:3b:c7:94:8e:c2:10:71:
                    10:4e:bf:b9:5a:c4:91:8a:d4:9e:19:fd:6b:5e:0b:
                    dc:31:30:ec:d0:ce:cb:1f:61:1f:d6:0e:7d:9c:21:
                    b9:bd:0b:14:51:74:58:bc:6e:40:99:18:b5:71:3f:
                    ff:ab:a2:23:23:75:23:40:d1:05:92:f0:57:74:62:
                    a1:35:ba:27:2f:7e:e7:62:7b:e3:62:4b:aa:e5:87:
                    3c:b3:45:79:b8:3e:c5:fa:cd:2d:e9:b7:da:10:0c:
                    8e:3d:e9:b0:00:f7:fb:fa:df:eb:34:af:fd:ef:48:
                    ce:eb:ac:c2:fa:f2:a2:ec:1d:0e:16:bb:50:a3:ea:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:75:15:62:04:94:C1:B7:7D:3D:E8:38:DA:08:3E:82:09:0C:8A
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:dc:69:38:e0:7b:4e:f4:10:6f:cd:0b:92:94:6f:85:4a:2d:
         90:c9:9f:6e:65:3d:cc:38:b1:96:58:c7:9d:eb:d3:74:36:b5:
         dd:b6:3b:94:a4:98:b6:5e:f4:96:aa:8c:fb:cb:d7:41:bf:d7:
         b4:9f:e6:d4:2e:36:a8:0e:93:d6:58:bb:ec:fe:1a:06:e1:b0:
         a1:97:8f:51:47:f9:d8:7f:9b:a6:3c:0e:47:33:ee:f5:b3:af:
         96:dd:bc:ee:20:c0:76:4b:f4:b1:12:d8:1f:28:31:67:05:e2:
         74:6c:73:c6:f3:9e:b0:99:d4:32:74:d1:97:a3:2c:e3:ca:07:
         a9:59:5d:31:5b:ce:7d:08:14:a6:2e:ec:4c:c2:fa:15:f4:12:
         d4:25:2e:d5:d9:36:27:f8:b4:a5:52:7d:4d:a4:4c:7b:c4:40:
         31:6e:c0:18:4e:c6:95:a6:ee:e1:71:b8:6b:7f:02:84:df:e4:
         ad:b8:9a:1e:20:ac:77:c7:9e:64:19:c4:92:17:c2:02:06:27:
         b4:dc:2d:05:5f:6d:7b:fa:a1:8e:6a:eb:86:c4:c6:cd:a6:16:
         07:93:d5:ff:29:1e:04:7f:a7:3c:93:a3:00:50:58:3e:28:0f:
         96:2f:92:ad:89:22:51:8d:40:bc:c5:d3:74:1c:e2:b0:93:52:
         76:9a:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:28 2026 by rpki-client