Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File:                     tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier:          CmmtQMabo/ySyVptq+dU9eAMuEBQwZs+jjUj3DJJx2M=
Subject key identifier:   95:CB:D6:8D:AC:F7:3E:66:3A:27:6F:CE:9C:8E:BD:E5:58:0F:3F:94
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer:       /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial:       01A0404E2DBA9F175E075FD8F80CC02DE640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number:          119B
Signing time:             Wed 26 Aug 2026 23:01:00 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:00 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:00 +0000
Files and hashes:         1: 2u17C709S7Y5w-m6-YYv-vhXmUI.roa (hash: 9wcYIAnvHzNv3l4Jwl0uMnowYji6Dg57ushf/zN2oFc=)
                          2: 3sNHI6PonG3yTWC7luEipoNUwyM.roa (hash: 25qkkZcN3FmiRMNBN3fedg1xY9PzbM2FV5V46F5kvco=)
                          3: po3SURUZMxOQK3acl1QtAxmkiz4.roa (hash: 6XgzHw0cydjLYlh4cIkksdaBkceUR9T5A8UPEsSdTYg=)
                          4: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: 3/HExfhQtr36wjs9dfwQpZgP+AK5jR3YSv0ajJEv3II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:2d:ba:9f:17:5e:07:5f:d8:f8:0c:c0:2d:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
        Validity
            Not Before: Aug 26 23:01:00 2026 GMT
            Not After : Aug 27 23:01:00 2026 GMT
        Subject: CN=95cbd68dacf73e663a276fce9c8ebde5580f3f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:50:3f:72:fe:4b:f7:f7:29:8c:33:33:b5:
                    3b:0f:4c:cb:28:22:a6:2e:39:2d:e2:46:b5:d6:19:
                    64:14:f3:79:29:d5:9f:53:ec:59:20:27:28:6c:9c:
                    5a:7a:00:ea:11:0f:8b:d6:f0:4b:8d:03:19:95:38:
                    eb:ad:17:fe:eb:35:15:e3:aa:29:e4:4d:d0:3f:43:
                    38:9a:35:dd:6c:0c:ee:09:df:8a:c0:7d:75:ec:79:
                    56:25:e0:a8:8c:43:9c:e7:94:03:dc:f0:16:29:8a:
                    c5:85:e8:48:1e:9f:33:0a:48:0e:d0:cd:a2:b4:12:
                    5e:7a:d1:02:16:29:31:07:f9:4c:05:65:86:dc:de:
                    0c:8d:1b:d8:ab:95:e9:e2:a6:b7:09:a1:b8:c8:e3:
                    f7:de:00:a0:4c:ae:6e:a0:a1:1b:be:12:da:62:1b:
                    3c:90:88:d1:ba:3c:45:6a:17:06:44:5d:ef:38:c7:
                    41:19:16:66:1f:7c:85:96:5f:33:c6:c8:af:79:d6:
                    a7:66:a0:1b:e1:62:35:f0:12:89:6a:bd:6b:76:bc:
                    81:1f:f3:01:74:2c:eb:d9:da:16:46:ca:ed:cd:45:
                    2f:65:3b:b4:5c:42:b8:5c:2a:19:1c:79:8d:2c:d4:
                    67:36:b8:2b:af:60:6f:3b:50:53:e3:2b:25:e2:1a:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:D6:8D:AC:F7:3E:66:3A:27:6F:CE:9C:8E:BD:E5:58:0F:3F:94
            X509v3 Authority Key Identifier:
                keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:ff:83:f1:04:9c:54:63:0f:0a:17:2f:c8:cb:ba:e1:16:
         14:83:09:40:70:f8:16:55:ea:c4:4f:0d:9e:71:40:21:21:20:
         05:fc:49:4a:db:82:83:c3:11:b3:50:7c:a0:fc:95:c8:2a:b7:
         6d:8b:e4:4d:2e:f8:55:f6:db:3b:d6:f4:b5:b1:d1:ee:d1:e4:
         e1:32:2a:14:9f:88:e7:0e:67:57:50:47:28:58:ec:e0:49:cb:
         28:b6:3d:87:e6:4f:94:de:35:a4:57:55:a0:d4:0f:a6:a1:67:
         a6:55:71:c4:04:6b:2a:61:c8:8b:97:d0:c8:6e:c6:9b:a1:4d:
         d3:c3:37:92:9e:f6:7b:3d:cb:d9:57:17:31:78:4f:f3:f0:c5:
         63:54:2d:ef:95:0d:f1:4a:5d:07:d9:52:30:11:03:7f:a4:1f:
         13:1d:f1:08:0b:d1:90:06:57:87:02:d3:f5:00:1a:c8:cd:5f:
         7b:98:24:32:50:57:a0:b4:ba:a1:da:18:c7:34:8a:34:82:be:
         6f:9e:54:c5:7d:dc:bb:cc:03:83:4d:86:0a:00:67:14:70:1c:
         4d:80:45:c8:d9:f8:3c:42:28:22:0f:f4:48:59:d1:31:13:16:
         3c:ad:af:0a:d0:fb:ab:df:e0:be:a7:10:fa:4a:0d:e7:6a:ce:
         0f:3f:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:37:38 2026 by rpki-client