Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File:                     rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier:          EA2KRM1NsDVf5WzxoQf+rNfuCfwmsRb/cN6x/qiOREg=
Subject key identifier:   49:A5:91:5A:26:70:29:69:D4:A3:62:D5:BF:32:97:15:9B:EC:CB:1B
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer:       /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial:       01A06EA7D0E09E624508BCF1F954636DA025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number:          1A3B
Signing time:             Fri 04 Sep 2026 23:01:26 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:26 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:26 +0000
Files and hashes:         1: 1-5zn0bSlddLMmUlOq_ZglROu18k.asa (hash: Yy6jCWoReDrwxlHPUoAZSBEIXQW1OUdFReXCBYRR6d0=)
                          2: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
                          3: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: 3rSn0q06UdGf0ObSWv2jUX+lGc62+czOGijsXHlYDME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:d0:e0:9e:62:45:08:bc:f1:f9:54:63:6d:a0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
        Validity
            Not Before: Sep  4 23:01:26 2026 GMT
            Not After : Sep  5 23:01:26 2026 GMT
        Subject: CN=49a5915a26702969d4a362d5bf3297159beccb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dd:32:f8:d4:be:d5:e9:96:39:2f:c2:dc:8e:
                    b8:2f:e5:3e:dc:c9:7a:0b:3d:12:90:e6:48:48:f9:
                    bc:39:1a:69:5d:09:38:dc:6e:8b:09:82:e6:d2:35:
                    75:78:1d:13:10:6a:08:6f:4e:a5:5e:d6:67:e5:dc:
                    7f:64:ff:d1:66:ed:4c:cf:41:74:6c:64:c5:cc:3e:
                    be:81:0f:7b:51:11:62:9f:29:e1:71:d7:61:04:52:
                    fe:a3:6b:38:1d:4e:5d:f3:ea:b7:f7:e2:24:b4:3a:
                    d2:fd:a4:cb:eb:53:09:3b:6d:58:c4:e9:74:45:fa:
                    59:f8:04:81:14:f3:4e:8a:28:97:cd:bb:ba:fa:82:
                    c1:33:20:7d:3a:3d:13:a5:17:fd:f8:39:c4:97:f0:
                    ff:64:1c:eb:78:ad:e5:76:ee:42:54:a1:70:fa:ed:
                    e3:ab:10:cc:71:14:ff:2e:ef:66:51:b9:f1:24:fb:
                    2a:a8:a0:22:f1:fa:f8:fe:5c:7d:27:a8:20:3b:93:
                    24:d7:8f:0f:70:3e:26:6f:4f:f6:b3:5d:12:97:89:
                    a7:a5:56:39:f8:eb:f0:28:b2:67:36:ed:9b:0a:88:
                    21:ab:be:e7:78:8e:c9:97:f5:6c:ba:a4:69:6c:07:
                    af:4e:63:56:d8:16:47:98:49:89:ec:36:f6:dc:01:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A5:91:5A:26:70:29:69:D4:A3:62:D5:BF:32:97:15:9B:EC:CB:1B
            X509v3 Authority Key Identifier:
                keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:69:ef:e6:5f:09:b6:ff:48:6e:cd:8f:8d:18:ea:66:52:
         63:26:8f:e7:e8:8f:5c:a2:d8:9a:dc:9e:07:fc:0c:fa:65:07:
         ac:75:a3:08:8c:5b:7d:9f:59:33:d5:af:15:a9:58:7b:4f:57:
         ce:24:80:c9:a2:03:c1:79:88:ed:cb:a7:42:69:2d:16:2b:93:
         7b:1b:24:0c:f5:41:bd:ac:0c:bc:90:1a:5c:33:7d:28:1d:6f:
         d6:9e:9e:55:09:1c:7d:02:6d:e5:08:6b:e7:de:fe:8a:08:19:
         86:43:db:f8:06:82:f5:d7:25:61:f6:f8:77:28:11:ec:91:d3:
         e7:e1:32:5f:2b:15:62:49:f2:e2:61:6f:26:e8:fd:72:10:b8:
         a8:6a:ee:c1:0d:55:5e:94:c2:d6:b4:75:23:a3:9e:6e:00:50:
         fd:b2:db:94:7c:20:9f:1c:c3:28:9a:8f:06:16:c5:b0:f7:ef:
         b7:fd:a9:fa:c0:6c:77:7f:e6:af:35:03:1d:2c:68:3e:82:c7:
         5f:b5:5a:df:10:ec:04:4f:00:8c:56:ef:69:34:55:fa:8b:b1:
         1f:b5:d9:60:5d:0d:1d:e4:dd:6e:c1:ef:a1:dd:9c:17:7f:82:
         2b:df:62:9f:1b:dd:a6:a7:7a:3d:90:6e:7f:6d:5e:69:4a:c1:
         a2:8c:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:20:23 2026 by rpki-client