Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
File:                     a1WP5oiolIXilt8dMYgHe1peVSU.mft (raw, json)
Hash identifier:          5ahkBlhgjRlY+PYwZbWQlUGqhjzrFMLhpW5gS3AtQvg=
Subject key identifier:   46:60:92:A6:A4:C8:BC:02:B8:B2:78:B4:B1:A0:14:2B:E2:DB:4F:B5
Authority key identifier: 6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25
Certificate issuer:       /CN=6b558fe688a89485e296df1d3188077b5a5e5525
Certificate serial:       01A0268DF68F036743275CA11ECAAD0FA615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
Manifest number:          C2
Signing time:             Fri 21 Aug 2026 23:00:32 +0000
Manifest this update:     Fri 21 Aug 2026 23:00:32 +0000
Manifest next update:     Sat 22 Aug 2026 23:00:32 +0000
Files and hashes:         1: 4l7AdsvuDNCFzMTKccCzXtq5Hgg.asa (hash: uJpW6PmO1PIQPXDywb3ezuYgylXtcxqJBTeAIq8ncAU=)
                          2: a1WP5oiolIXilt8dMYgHe1peVSU.crl (hash: R2oQOTlS6rejtJJtemiEQTokdoMwvjiYjAyyAtR08Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:8d:f6:8f:03:67:43:27:5c:a1:1e:ca:ad:0f:a6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b558fe688a89485e296df1d3188077b5a5e5525
        Validity
            Not Before: Aug 21 23:00:32 2026 GMT
            Not After : Aug 22 23:00:32 2026 GMT
        Subject: CN=466092a6a4c8bc02b8b278b4b1a0142be2db4fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:7a:25:7e:40:0e:1d:78:4c:b8:e3:76:0f:
                    83:8a:2f:2f:21:6b:cc:54:39:fb:49:1e:92:34:b7:
                    e7:b6:1f:cf:f2:0b:94:2d:67:ff:86:1c:39:bb:72:
                    ea:49:73:62:0d:f8:5d:a3:03:16:82:5d:ce:71:c8:
                    b5:8b:05:c8:35:c4:0b:6c:29:2d:75:db:29:7e:ed:
                    46:51:da:42:69:ad:ea:83:ec:fe:bd:d6:80:49:bd:
                    36:95:57:fa:a1:73:47:10:8b:0b:ad:97:47:01:09:
                    c7:d4:5d:d6:53:cf:69:20:62:0f:1b:cf:0b:0a:8e:
                    8f:40:1b:97:c8:ee:1a:1f:68:cc:8d:ab:5c:b2:14:
                    ff:7f:91:04:9a:29:6e:80:86:9f:fe:6c:38:50:a3:
                    ad:da:e0:b5:8e:25:42:54:53:4f:68:46:b3:4e:9d:
                    db:c8:01:11:3d:da:89:5b:91:e7:01:ec:ee:94:c3:
                    98:a0:f1:2f:cf:a0:19:91:9a:2b:91:ad:c1:7f:da:
                    c7:c2:b7:1a:77:76:03:4b:9f:74:2a:84:69:7d:65:
                    52:fc:96:06:32:2f:b6:78:20:45:59:18:ba:1b:a4:
                    c4:6b:f2:bc:8c:c1:3a:fd:34:a7:83:54:bc:6b:b3:
                    7d:2d:70:36:2e:90:e4:25:02:b6:36:01:46:c1:de:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:92:A6:A4:C8:BC:02:B8:B2:78:B4:B1:A0:14:2B:E2:DB:4F:B5
            X509v3 Authority Key Identifier:
                keyid:6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1f:7a:0f:24:8a:1a:e7:2a:d6:98:69:e7:3d:5e:17:80:80:
         4e:d3:ed:b3:25:a8:65:a6:63:1a:ca:e0:69:f7:be:69:8a:5b:
         88:b6:d9:a7:35:9f:16:d6:a0:cb:f9:d6:d2:90:ba:ed:ef:e0:
         fd:da:fd:a6:c4:b3:81:bd:e1:15:c6:e5:75:fa:37:4c:fc:e2:
         45:7c:28:e9:b5:f5:bf:ff:b4:e4:ca:81:15:48:45:3a:19:ef:
         6d:44:3c:90:d9:a9:a7:0d:1d:3a:16:3d:e5:aa:f1:f2:37:9d:
         df:e6:2e:63:03:7c:71:96:5a:d5:25:8e:6f:90:1e:89:fa:00:
         67:88:14:57:1d:d6:1f:a0:83:b3:e6:b1:a4:b0:32:5a:d3:33:
         6d:8d:84:35:81:d1:47:fb:96:1d:51:c1:0b:2d:60:69:ba:2c:
         89:b9:af:ef:de:79:6c:1e:3e:ac:98:d0:77:89:95:23:80:dc:
         65:d4:89:c0:76:f9:78:0e:57:2b:62:2b:34:56:e2:2b:ba:d2:
         05:8a:8e:75:a3:43:8c:82:5e:ed:a7:75:17:19:15:48:b1:c4:
         5d:ad:ce:ed:4d:2b:07:ec:c9:51:90:38:f8:b6:61:f1:39:4f:
         fe:e3:ca:4c:77:a7:c6:72:c6:d8:f5:ff:4a:c1:e7:eb:43:65:
         2f:95:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:40:48 2026 by rpki-client