Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          TDYZYwDlpZfqmqdbUO0k05S6TKR9YYEgmKSwsAfzCqg=
Subject key identifier:   21:20:58:9F:58:D9:3D:48:4C:4E:18:03:2A:0D:75:F4:17:18:33:7A
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       019FF6474EC33DDF8688A64B078CA38525C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0F88
Signing time:             Wed 12 Aug 2026 14:01:35 +0000
Manifest this update:     Wed 12 Aug 2026 14:01:35 +0000
Manifest next update:     Thu 13 Aug 2026 14:01:35 +0000
Files and hashes:         1: RTCwtH7ZWIYWogG8SzF47UbA26A.roa (hash: cp0ZS5qVAjMrv/xO5fzJ4jhrguG1YkL8kQ9RzgIwSl4=)
                          2: T2785FZtezCL_6MGZVNWjJWLkV4.roa (hash: vLx5BTbQ5gwqNSQW0r0QpCkolwPmMCxbInfB7uOoJt8=)
                          3: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: 4OVrA6H9QUTLZWj/RkCsK81CSjDzMaRndjcUvEDDrpk=)
                          4: tIO_Frmyb630hOFMV5X9t-LFjlM.roa (hash: A+6xfI16vy2Eu1vSrt6AeJ63kgJErM2gSoHCauuaBDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 14:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:47:4e:c3:3d:df:86:88:a6:4b:07:8c:a3:85:25:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Aug 12 14:01:35 2026 GMT
            Not After : Aug 13 14:01:35 2026 GMT
        Subject: CN=2120589f58d93d484c4e18032a0d75f41718337a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:c1:c6:de:1b:3e:f6:38:98:63:a6:db:14:
                    c3:ea:8b:17:08:70:47:7d:39:bc:d7:33:f6:20:37:
                    f3:62:1f:4b:97:a2:fe:f5:5c:6b:32:6a:09:59:ce:
                    bb:29:20:04:be:0c:d1:eb:50:a8:c6:94:ed:f9:bd:
                    7f:9a:a4:79:34:07:47:83:90:f6:36:fc:36:c5:4b:
                    19:db:33:6c:63:90:d4:8b:fc:83:a9:17:76:15:85:
                    2c:cc:90:3f:38:96:f2:ff:0a:15:90:d8:a2:64:b9:
                    81:47:41:a7:90:f0:f8:80:db:e3:3f:55:2e:fc:dc:
                    7b:20:88:49:e3:73:ed:0c:56:fd:bc:47:d3:80:b5:
                    1c:68:7f:76:85:bd:1a:ec:d3:09:d5:c1:07:88:df:
                    36:47:7a:bd:51:0b:00:31:9f:6c:c7:09:5f:e4:d6:
                    04:33:66:3e:49:cc:55:be:9c:d9:be:04:63:6e:fa:
                    f5:88:f7:40:db:25:c5:0b:b0:39:69:3d:8f:1e:28:
                    a2:7c:dd:33:3f:f3:ea:e7:fe:1b:2e:ed:1f:12:45:
                    07:0f:33:78:5f:ec:71:54:a8:7c:42:e1:d3:d6:08:
                    21:5d:f3:4d:69:28:91:01:42:b6:9f:04:ca:59:d8:
                    f5:05:40:ee:b9:33:0d:67:6d:67:4f:e3:c0:f7:c0:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:58:9F:58:D9:3D:48:4C:4E:18:03:2A:0D:75:F4:17:18:33:7A
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:3c:f4:61:37:52:76:3a:93:93:1f:8f:c9:a0:73:2b:80:
         3d:8e:87:09:5c:4d:8c:37:83:ed:17:b4:11:24:1a:7d:18:a7:
         a1:b1:f5:08:81:92:e0:3d:56:c6:28:4d:90:ca:84:07:fe:e2:
         8a:ae:34:dc:47:cd:af:88:74:bd:33:45:e3:ac:62:9a:1d:84:
         ec:9b:f4:04:87:de:2c:28:ae:e8:59:04:6f:f7:cc:ce:fb:26:
         72:14:37:79:90:d7:48:25:41:ff:ef:ba:24:0f:3c:34:2f:4a:
         7f:f9:3e:fa:e2:15:c0:d1:ba:a2:7a:18:2e:cb:ef:16:b1:71:
         eb:8c:92:6b:78:ff:c4:d4:1d:d9:e2:83:7c:b5:d1:3a:d0:80:
         ae:e8:f1:0f:f2:a6:a5:c4:d1:54:d3:2e:6a:b3:b5:f0:20:df:
         66:ce:b2:ef:5a:4a:9c:4a:13:1b:fb:ff:5b:32:c0:2c:f2:6b:
         34:03:9c:71:b5:21:f9:60:73:c7:78:24:eb:f5:36:14:20:69:
         ed:8b:95:e1:7a:cb:4f:a6:27:3b:c9:6b:ce:26:f9:2c:78:cd:
         2a:e6:47:51:7a:97:f9:c7:0b:0d:9e:57:2a:34:d5:29:63:bb:
         86:1c:f7:7b:dd:f9:7a:9f:26:26:5d:30:af:ec:f8:5d:12:fc:
         3c:0a:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:54:47 2026 by rpki-client