Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
File:                     48uGjyIUmP6iUVXOAH_AGbc3_7A.mft (raw, json)
Hash identifier:          +lBbzZzjN813xRSXe+B6VJ/9vrO1gug3Ge8v8eIctY8=
Subject key identifier:   6C:C4:9C:43:8A:D5:CE:FE:AE:D3:FE:B4:73:21:87:D0:FB:29:D3:4E
Authority key identifier: E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0
Certificate issuer:       /CN=e3cb868f221498fea25155ce007fc019b737ffb0
Certificate serial:       01A03F7240B1C961E7AD7DA532E39D2BDB4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
Manifest number:          0253
Signing time:             Wed 26 Aug 2026 19:00:47 +0000
Manifest this update:     Wed 26 Aug 2026 19:00:47 +0000
Manifest next update:     Thu 27 Aug 2026 19:00:47 +0000
Files and hashes:         1: 48uGjyIUmP6iUVXOAH_AGbc3_7A.crl (hash: /LxXwlz7t+SzN7rs1KcC7c6SGQrBQ5kf2a9hloOMLDU=)
                          2: LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa (hash: nut59sxjSaBAsjL5yczj9vKm25xZIG45untoxMX+iNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:72:40:b1:c9:61:e7:ad:7d:a5:32:e3:9d:2b:db:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cb868f221498fea25155ce007fc019b737ffb0
        Validity
            Not Before: Aug 26 19:00:47 2026 GMT
            Not After : Aug 27 19:00:47 2026 GMT
        Subject: CN=6cc49c438ad5cefeaed3feb4732187d0fb29d34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:58:ff:eb:5c:90:8c:8a:96:f9:1d:e9:20:
                    0e:7c:55:8d:dc:7e:3a:64:1d:26:94:b0:21:66:1d:
                    11:96:e8:63:e0:04:d5:f0:63:49:2f:33:46:07:86:
                    7c:ca:f0:49:2e:e6:98:3b:9e:a5:dd:8c:55:c0:bd:
                    ab:dc:5c:5b:ab:0c:1c:15:6a:9f:a1:83:bc:44:fb:
                    6c:cf:82:aa:4d:ed:dd:b1:c3:c9:a0:70:44:33:e9:
                    81:ed:19:ce:1d:fa:ef:e8:04:54:68:2a:8d:23:9b:
                    81:a0:6b:12:38:26:69:dc:54:27:f1:e7:a1:34:d0:
                    0f:3a:fb:64:8a:da:a8:71:aa:ac:52:8d:ad:75:f6:
                    42:9e:d4:31:96:ab:3b:2b:c6:97:7f:15:56:a2:bf:
                    ec:80:c1:90:91:f8:87:4b:58:f4:16:33:86:90:fe:
                    21:9f:3b:4d:c9:1f:13:2d:cc:0b:57:dc:0e:a5:ee:
                    14:2b:8a:9c:1c:83:2e:d4:c8:d0:14:92:8c:62:e0:
                    77:29:a5:4a:3a:29:64:d7:85:46:59:0f:e3:4f:ff:
                    6a:94:9b:0a:cb:79:66:86:78:a6:b6:10:10:46:b3:
                    6b:65:7a:9c:c0:e8:e1:af:91:07:bc:ce:51:71:f4:
                    2d:b7:46:f1:a2:88:d6:c0:e9:33:37:8e:70:87:ba:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C4:9C:43:8A:D5:CE:FE:AE:D3:FE:B4:73:21:87:D0:FB:29:D3:4E
            X509v3 Authority Key Identifier:
                keyid:E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:66:5c:3e:58:47:02:86:08:1d:c9:80:b2:74:4a:57:b7:fe:
         70:38:56:27:f8:19:b7:26:7c:d4:9e:d4:32:2b:92:46:29:58:
         63:3b:b2:ee:29:58:b6:c3:94:3e:3b:30:ef:63:5d:1c:1e:af:
         5e:41:89:cf:7a:3d:4d:5d:25:77:9f:91:2b:d1:29:90:c0:e6:
         dc:8c:99:cc:74:23:0f:d4:f2:36:02:d3:34:f0:5f:bf:55:2a:
         99:37:26:c7:70:9d:60:09:bb:38:d3:b7:d3:3f:d9:5e:92:c2:
         bd:63:9f:77:6c:23:ca:6e:09:9c:70:0c:53:45:de:a5:4a:3d:
         d0:db:1c:a3:47:9f:17:11:45:8d:f6:88:f0:31:10:eb:d3:c7:
         71:87:60:29:d1:c1:fd:11:99:9d:c4:5e:7d:9c:77:cb:f3:7b:
         61:93:1a:0a:5d:bd:fc:cf:ac:ac:53:1d:13:2d:04:87:09:69:
         c0:dd:ef:4f:b2:e2:a9:54:8e:67:5b:fb:3f:0e:68:01:ed:e2:
         e5:63:00:fa:71:07:ad:f7:49:4c:25:52:6c:ac:0e:dd:52:0c:
         9f:6f:11:b4:26:af:4e:60:80:97:80:78:85:42:c5:5a:3b:56:
         94:f6:0e:3b:e1:a9:61:d6:25:3d:8e:22:ea:42:2b:59:a6:6d:
         ae:f4:c6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/ckCxyWHnrX2lMuOdK9tKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2I4NjhmMjIxNDk4ZmVhMjUxNTVjZTAwN2ZjMDE5Yjcz
N2ZmYjAwHhcNMjYwODI2MTkwMDQ3WhcNMjYwODI3MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg2Y2M0OWM0MzhhZDVjZWZlYWVkM2ZlYjQ3MzIxODdkMGZiMjlkMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsRY/+tckIyKlvkd6SAOfFWN3H46
ZB0mlLAhZh0Rluhj4ATV8GNJLzNGB4Z8yvBJLuaYO56l3YxVwL2r3FxbqwwcFWqf
oYO8RPtsz4KqTe3dscPJoHBEM+mB7RnOHfrv6ARUaCqNI5uBoGsSOCZp3FQn8eeh
NNAPOvtkitqocaqsUo2tdfZCntQxlqs7K8aXfxVWor/sgMGQkfiHS1j0FjOGkP4h
nztNyR8TLcwLV9wOpe4UK4qcHIMu1MjQFJKMYuB3KaVKOilk14VGWQ/jT/9qlJsK
y3lmhnimthAQRrNrZXqcwOjhr5EHvM5RcfQtt0bxoojWwOkzN45wh7pEvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzEnEOK1c7+rtP+tHMhh9D7KdNOMB8GA1UdIwQY
MBaAFOPLho8iFJj+olFVzgB/wBm3N/+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYTlhZDAtMmJiMS00MTRmLTg2NmMt
YThmMzFjOGI5ZTAzLzEvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xYTlhZDAtMmJiMS00MTRmLTg2NmMtYThmMzFjOGI5ZTAz
LzEvNDh1R2p5SVVtUDZpVVZYT0FIX0FHYmMzXzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2ZcPlhH
AoYIHcmAsnRKV7f+cDhWJ/gZtyZ81J7UMiuSRilYYzuy7ilYtsOUPjsw72NdHB6v
XkGJz3o9TV0ld5+RK9EpkMDm3IyZzHQjD9TyNgLTNPBfv1UqmTcmx3CdYAm7ONO3
0z/ZXpLCvWOfd2wjym4JnHAMU0XepUo90Nsco0efFxFFjfaI8DEQ69PHcYdgKdHB
/RGZncRefZx3y/N7YZMaCl29/M+srFMdEy0EhwlpwN3vT7LiqVSOZ1v7Pw5oAe3i
5WMA+nEHrfdJTCVSbKwO3VIMn28RtCavTmCAl4B4hULFWjtWlPYOO+GpYdYlPY4i
6kIrWaZtrvTGsQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:19 2026 by rpki-client