Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
File:                     F9vVrPH5x10YofdQMRFMSPCyM2M.mft (raw, json)
Hash identifier:          oUES6rPXyYUq9+ZhzfX2uN89t29qE9TKySQg8FTyUas=
Subject key identifier:   DB:E4:A9:35:64:4F:C3:2F:1A:53:85:EA:A3:54:73:17:5E:83:F2:70
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Certificate issuer:       /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial:       01A03E6033A51ED6FC1264D7499B9BFD71A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
Manifest number:          1A20
Signing time:             Wed 26 Aug 2026 14:01:27 +0000
Manifest this update:     Wed 26 Aug 2026 14:01:27 +0000
Manifest next update:     Thu 27 Aug 2026 14:01:27 +0000
Files and hashes:         1: 0BO7Qdwz27n2_KQ3UWwFaifbI4U.roa (hash: ySd/2T8uWDeqpMyFGIs7aCT8IwZbW87LbSfPPcVdUwI=)
                          2: 1-s11mGcjC8aGEnsMAxCG4TDK4qI.asa (hash: re4iOsTgujK3n0SeH/pZVryx2miaF5Vx+USZ42XqMIM=)
                          3: 4bPjmPLYF-VsgIxEmwqrvspuat0.roa (hash: Mym6Vp+Xrsnjhxv/WkGy04wi/swDTPse9lPsRyVRLJ0=)
                          4: F9vVrPH5x10YofdQMRFMSPCyM2M.crl (hash: 0bQMimlLDhH7ybr902uFvtjw+LDwdmiQFi/8iWvbWyY=)
                          5: I0VG7HCBd1Osh567bGFIZjy7Y8k.roa (hash: dzX+qdW4OYoKn79MivAqWA+FWh3cN8TTDqbC+ueR/Po=)
                          6: Y-7M_UqcBNv4FZvSRza0hnEYbt0.roa (hash: l9lXOX5RLGIBYwkxjYc81W2wAYVBKWMt4amqOpB+mik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:60:33:a5:1e:d6:fc:12:64:d7:49:9b:9b:fd:71:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
        Validity
            Not Before: Aug 26 14:01:27 2026 GMT
            Not After : Aug 27 14:01:27 2026 GMT
        Subject: CN=dbe4a935644fc32f1a5385eaa35473175e83f270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:78:53:cf:75:6b:bf:f7:b6:de:ae:d3:98:
                    91:d3:b4:c6:5d:c4:a3:01:e2:65:66:e2:e5:89:d1:
                    b3:ba:a8:4d:39:92:7c:2b:35:23:c5:34:f3:17:3f:
                    41:1b:1c:c0:27:88:6d:40:0c:95:a5:cf:7f:50:9a:
                    c8:72:86:a7:05:c8:be:a7:53:6a:2c:5f:1f:be:18:
                    10:4d:90:66:11:ae:df:c4:80:ee:8c:f9:99:9d:5a:
                    88:50:6c:aa:a4:42:4e:a5:b8:2f:08:2f:9c:52:d2:
                    ce:db:6b:79:ba:68:6c:2b:8e:60:9c:7c:29:52:4b:
                    8b:8a:bb:5a:21:25:95:8f:c3:d2:ae:f3:3d:4e:2a:
                    2b:26:5e:e6:76:1c:03:a3:02:df:96:65:0c:3a:1d:
                    0c:4e:a1:8b:6f:62:f3:3b:42:67:f3:7e:c0:0c:83:
                    64:86:8a:dc:0a:34:74:ab:30:18:db:eb:4e:21:bf:
                    2a:eb:f9:44:d9:3e:22:4a:a0:30:68:d7:92:3c:bd:
                    f6:16:c3:33:ea:83:51:f2:ae:b9:46:95:41:89:6d:
                    59:07:b1:10:b5:83:1a:a4:7c:bf:89:0e:ce:a8:74:
                    23:03:71:96:b6:95:bf:16:0c:c2:8f:ec:05:3f:4b:
                    7a:fa:f3:ee:37:92:0a:bb:64:6e:82:63:94:29:ae:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:A9:35:64:4F:C3:2F:1A:53:85:EA:A3:54:73:17:5E:83:F2:70
            X509v3 Authority Key Identifier:
                keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:c3:65:d7:67:bd:bb:77:a5:aa:2f:e6:d4:c4:2d:16:7f:
         88:f8:75:e6:0d:e4:0a:77:c4:11:ff:81:3e:d5:8b:02:b6:5d:
         9c:63:93:bc:b2:1e:b9:41:76:41:f5:5c:62:74:6e:f7:2b:52:
         c7:09:4a:d7:da:e4:3d:ce:a6:a3:9b:e5:1f:86:9f:1d:c2:59:
         e9:6b:b2:ee:ff:c6:35:91:c3:ba:ae:d4:5c:ab:7c:32:07:34:
         60:2d:9c:71:70:1d:d7:9e:2c:9f:d7:b3:04:bd:b1:a6:3c:bd:
         c8:2a:6a:1e:0f:e6:f4:0d:d0:ae:46:4e:8e:50:56:5f:f7:02:
         7f:e5:52:0c:3e:62:c8:63:50:ae:35:98:cd:93:07:a3:ba:d0:
         be:eb:26:d1:f4:a0:0d:a2:61:6f:30:40:77:ae:d8:8f:dc:e4:
         cc:36:c8:4a:98:cc:1a:11:b7:6d:53:71:56:b5:01:39:3e:c0:
         be:c2:f9:27:bf:73:17:47:8d:49:a9:07:25:f7:b4:10:1d:40:
         42:45:9a:62:e1:1f:84:51:b7:ed:0b:d9:c1:36:90:78:5b:eb:
         9e:7f:0c:4b:8e:80:3a:63:14:3b:7d:04:94:e9:1f:2f:f9:4c:
         da:65:18:55:0b:84:f6:fc:6c:d8:5d:96:cd:1b:62:9c:44:87:
         cb:e4:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:17:35 2026 by rpki-client