Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File:                     mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier:          HVi4okos7dzKEFAzSRHzjwotyirh3/JQDR3LOTNTdqU=
Subject key identifier:   2D:94:B6:DF:74:90:09:61:0E:A2:BD:C2:37:7D:0E:47:14:06:76:08
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer:       /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial:       019FF5A287476F7E9E5500E97903A2A97427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number:          DF
Signing time:             Wed 12 Aug 2026 11:01:37 +0000
Manifest this update:     Wed 12 Aug 2026 11:01:37 +0000
Manifest next update:     Thu 13 Aug 2026 11:01:37 +0000
Files and hashes:         1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
                          2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: mDHKhkcMNJmvnugMXUhDVtSeZXeofETbY+LSgt8JNc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:a2:87:47:6f:7e:9e:55:00:e9:79:03:a2:a9:74:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
        Validity
            Not Before: Aug 12 11:01:37 2026 GMT
            Not After : Aug 13 11:01:37 2026 GMT
        Subject: CN=2d94b6df749009610ea2bdc2377d0e4714067608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:2a:76:42:85:99:84:72:05:cb:a7:bf:d7:
                    e2:54:d5:c0:ae:af:59:89:82:bd:b9:8c:73:52:88:
                    ab:bd:40:63:08:f4:bf:e0:8a:85:db:8b:43:3f:04:
                    2c:4b:b4:b9:a8:60:7e:5f:98:0f:c6:89:91:39:8b:
                    95:91:03:48:d4:27:f2:20:25:b1:c7:10:1c:19:9c:
                    dc:df:77:56:1e:44:f1:de:93:b7:3b:91:4b:15:6a:
                    cf:b7:a1:ff:91:df:8e:25:ff:5f:74:3d:e5:97:f1:
                    79:9d:47:1b:68:58:2e:b6:50:b8:bd:46:6b:cb:d1:
                    36:ae:26:23:81:76:5f:1d:b6:cf:4e:18:e2:8d:74:
                    64:bd:c0:fc:a5:64:67:0d:ee:d2:bb:9a:4a:06:1b:
                    0a:3d:07:7f:79:06:3d:f7:cc:f8:46:14:85:ba:97:
                    cd:28:46:3a:74:33:89:fe:d3:22:66:89:7c:ee:45:
                    57:c5:5c:a5:93:33:7c:eb:3d:ad:43:c1:85:87:96:
                    d1:24:e8:de:e5:45:52:f1:bb:a3:c5:bb:1f:f0:e8:
                    32:3f:fe:53:68:93:d6:4b:fc:3c:51:d4:b2:ef:99:
                    a1:8a:4f:73:44:74:b2:1c:68:5c:53:f3:f6:dc:51:
                    90:0d:51:55:11:00:af:21:4b:fa:b1:ea:bd:04:d4:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:94:B6:DF:74:90:09:61:0E:A2:BD:C2:37:7D:0E:47:14:06:76:08
            X509v3 Authority Key Identifier:
                keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:69:25:e4:50:b4:c3:b6:2e:1b:a2:5d:c0:7c:25:e7:d0:
         29:67:3e:d2:aa:28:c9:29:9d:7e:a2:7c:27:53:8b:d0:89:0f:
         42:c0:54:69:d6:c0:91:b5:9b:b9:40:b6:4c:0c:a6:18:e4:1e:
         05:05:22:f5:d5:29:89:b1:c5:4d:94:bd:a9:77:f9:16:c4:e5:
         77:21:c7:e8:d3:6b:00:2a:48:5c:df:fb:45:6c:af:91:26:b5:
         6b:09:d4:52:92:6b:19:5a:28:65:fc:2f:99:da:3c:3a:31:1c:
         fd:3f:a7:86:a6:4e:37:9f:e1:a4:04:b6:b9:f7:f5:83:d5:81:
         f7:45:81:c4:ae:8e:4d:6b:db:22:99:6c:7d:eb:be:1e:d9:7f:
         7c:31:ef:9e:ad:5d:1c:50:fd:23:81:40:e1:db:6d:a7:ba:2e:
         42:16:ff:39:a9:98:19:b4:87:13:67:ce:27:53:e6:a4:39:6a:
         06:1d:4f:d2:d8:f8:d8:9b:67:be:b1:49:96:b2:ec:8d:25:79:
         87:58:bf:82:89:65:e2:8b:4e:3b:45:bf:10:38:90:7c:c8:97:
         5c:a8:0e:1b:06:cb:74:f8:f2:d2:09:b5:41:4d:d6:dd:c1:ba:
         2d:89:d7:ba:a2:ec:d5:f9:68:44:a7:3c:61:73:9f:7a:d0:4d:
         bc:16:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:39:39 2026 by rpki-client