Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File:                     pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier:          WQU7fYExTmCMozlMzXobLg3vLYdEF9XQvJ5dPALjySY=
Subject key identifier:   4A:15:44:36:C8:AB:D9:3C:96:DB:0E:77:22:DE:14:E5:F4:A8:C7:B0
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer:       /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial:       019FF6B5458092E86C49FDF04D70A016E43C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number:          0D3D
Signing time:             Wed 12 Aug 2026 16:01:42 +0000
Manifest this update:     Wed 12 Aug 2026 16:01:42 +0000
Manifest next update:     Thu 13 Aug 2026 16:01:42 +0000
Files and hashes:         1: XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa (hash: UmPHiymGAj7+/eK4hBqQMAkOwYiEZ6uebNHLD6+HTOE=)
                          2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: Kq0ppdoartTxw4ddefi73ubA3wb9DTxuoPESuBxy08c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:b5:45:80:92:e8:6c:49:fd:f0:4d:70:a0:16:e4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
        Validity
            Not Before: Aug 12 16:01:42 2026 GMT
            Not After : Aug 13 16:01:42 2026 GMT
        Subject: CN=4a154436c8abd93c96db0e7722de14e5f4a8c7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:2a:c8:8d:2b:27:96:88:f7:8f:0e:c1:2c:
                    b6:95:02:3d:5d:fb:30:10:fc:fe:f0:50:61:43:1d:
                    c6:0f:bb:c8:39:19:7c:c4:fd:65:b3:82:27:19:34:
                    94:06:ff:d0:85:31:16:60:7d:14:bc:20:24:d8:7f:
                    12:d9:64:c0:c8:85:bd:09:d3:56:a6:4a:56:a2:45:
                    84:84:44:cb:a2:f4:91:03:d0:83:b0:22:9c:ff:19:
                    a0:43:e2:55:bf:f0:dc:ff:63:08:be:b4:58:b6:31:
                    66:90:14:51:c0:a0:3f:5d:68:87:89:a4:3c:cf:5a:
                    d9:6b:f9:b7:7f:60:70:8f:ca:3f:2f:a9:56:97:ad:
                    24:d7:be:76:93:c6:d4:98:1a:04:29:0a:95:78:dd:
                    1d:f3:b7:c0:cd:86:24:c2:f2:13:a5:bd:a2:f2:1c:
                    12:0d:ad:e1:48:b8:23:78:71:fd:33:9a:2b:df:14:
                    2c:c7:b9:1b:11:9b:46:ff:7c:d5:50:3c:4e:c0:ab:
                    67:9e:eb:98:6e:1f:9f:69:34:1b:58:21:a9:5e:df:
                    54:8c:44:cc:7e:7e:ec:6a:45:a4:28:84:1d:23:c2:
                    cd:50:f7:57:4d:c3:6e:eb:ca:91:27:e0:6d:51:4d:
                    a8:a9:96:a3:4d:3d:19:9c:29:c4:b8:17:50:15:31:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:15:44:36:C8:AB:D9:3C:96:DB:0E:77:22:DE:14:E5:F4:A8:C7:B0
            X509v3 Authority Key Identifier:
                keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:92:08:94:99:6e:c6:c0:f9:49:bc:32:b0:3c:b4:b3:e2:
         97:25:4b:f2:8f:9b:4a:ef:0e:2e:b7:5e:37:39:36:df:71:73:
         7e:4b:99:7d:ce:c8:7d:9a:fe:1f:0b:32:8b:31:73:70:36:e3:
         b0:14:54:71:8b:4e:2b:56:70:44:b0:4c:45:3b:4b:20:cf:19:
         13:89:69:ad:7e:61:96:13:0a:4c:1c:b1:b4:6c:da:cb:d0:b7:
         ec:0f:81:39:3f:d1:10:98:19:cf:ad:f3:69:7e:37:ba:7b:15:
         cb:81:53:62:cc:12:51:74:eb:2f:d6:18:7c:bf:6a:03:6d:cf:
         ca:fe:b0:9f:dd:8d:db:ac:c8:ad:cd:bd:04:77:d0:ce:76:a5:
         d8:30:e2:27:4a:e4:66:5a:8f:05:d9:28:ca:7d:48:3d:82:ad:
         f4:a8:a1:93:14:b6:44:4c:ce:44:df:a4:73:f5:4e:8b:ff:cb:
         15:1c:a4:bd:3d:1b:0a:e8:18:68:1a:29:20:08:1d:be:e6:14:
         99:be:a9:4c:33:ef:48:9c:16:c7:15:0e:b8:4e:ec:7b:73:6a:
         8e:4d:56:b7:82:df:17:5f:7b:d5:39:77:03:fb:6e:f8:68:d8:
         15:b5:a4:f0:31:0d:47:a8:8a:53:6a:7e:b5:97:4a:34:17:04:
         6a:3b:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:40:15 2026 by rpki-client