Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File:                     4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier:          obxOmMOQQcheza5OFaeYdkJefZd94nxteMSx92SyW8k=
Subject key identifier:   7F:1C:68:6C:16:56:A6:D2:6F:7E:98:B9:86:B5:66:70:79:C4:91:43
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer:       /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial:       01A000936741E9633752286FFFD00023EF41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 14:00:55 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:55 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:55 +0000
Files and hashes:         1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: qtc17K1eQ0aiawwiLo+U0o/ya9umvc5pBoFkSKxrNpY=)
                          2: R887zp6sFk_dmP9fKtjrY24hpnk.roa (hash: xMhP2OXxBMHOz2sXZctb+22OEYUQG/I6CAM/IUlPtic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:67:41:e9:63:37:52:28:6f:ff:d0:00:23:ef:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
        Validity
            Not Before: Aug 14 14:00:55 2026 GMT
            Not After : Aug 15 14:00:55 2026 GMT
        Subject: CN=7f1c686c1656a6d26f7e98b986b5667079c49143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:43:c1:0e:c5:38:e2:b2:bb:07:71:37:21:
                    55:a6:23:ba:3a:7b:46:0d:d9:a0:72:c8:5d:21:4c:
                    86:c6:64:ce:e5:19:8f:a5:0f:38:42:a1:60:70:46:
                    03:5a:ae:1a:02:e1:6e:bf:64:3f:63:06:c7:e4:ee:
                    f8:99:0e:f4:88:85:20:5b:1c:7b:93:5a:92:c1:94:
                    8c:86:4c:5e:67:91:55:ac:32:7d:10:df:e7:a8:bf:
                    51:c2:e2:fc:08:f8:96:94:e0:fa:53:b1:b0:67:84:
                    fd:9a:23:7e:90:1e:2b:38:f0:ac:a3:8f:dd:ab:69:
                    95:7f:38:fc:f3:96:be:36:43:f2:63:6e:29:49:07:
                    da:e0:05:f5:cd:cc:e0:ae:74:0d:0c:26:f4:15:ac:
                    9f:b3:31:e3:9b:87:3f:3b:5f:18:00:3d:c4:3a:52:
                    9d:da:ea:4a:23:b8:00:19:1c:a7:94:38:42:23:5c:
                    30:d6:b1:19:8b:9d:60:d4:c7:be:bf:0e:00:69:f0:
                    a4:e8:a3:b0:f9:d7:3c:69:02:b9:23:ef:38:d3:10:
                    d4:9d:d4:7b:43:dc:00:55:d5:a6:f7:ea:05:44:2a:
                    8b:fa:07:26:68:57:1c:79:39:93:7f:4a:74:ab:09:
                    91:78:8c:c7:09:5b:ba:74:93:43:d7:16:f3:e8:b1:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1C:68:6C:16:56:A6:D2:6F:7E:98:B9:86:B5:66:70:79:C4:91:43
            X509v3 Authority Key Identifier:
                keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:27:6f:85:6f:e9:2c:e1:a0:0e:6b:fd:7c:8c:c9:9e:f4:b0:
         d0:62:1f:55:56:34:c7:7e:2d:dc:d2:51:a4:a5:fe:e9:3a:ab:
         39:a8:2f:0e:90:29:1f:57:0b:13:cb:db:4d:ca:ba:cf:e3:ad:
         94:a4:ec:e3:51:e8:1a:7b:73:d8:f9:8f:1f:3c:8c:48:ed:fd:
         53:cf:c4:45:5c:c7:a8:62:5e:20:dd:bd:70:cf:e9:e0:72:77:
         14:6c:0c:71:6b:8a:94:d7:40:16:ec:78:91:06:ad:ce:85:0e:
         5a:84:ed:56:8a:1b:73:af:ac:c7:c1:c9:23:39:02:1c:17:3c:
         bb:b5:0b:82:5a:70:86:59:07:91:a0:a9:65:8c:fe:58:90:37:
         bc:57:55:0a:f0:cf:a3:76:6a:4c:f8:f5:71:f0:90:55:e9:62:
         a7:e7:16:74:c6:d8:e4:77:7a:9c:d7:15:60:61:ad:99:a6:a7:
         6c:c9:f3:00:6c:c8:af:7a:23:21:e3:08:05:a1:b1:c9:50:fe:
         87:0f:ad:a5:51:d8:bb:95:b9:ff:2c:b5:fc:2a:d9:a1:47:79:
         88:5d:93:5c:c3:41:11:ee:85:47:54:81:77:00:2d:20:1a:c9:
         09:03:d4:c9:4c:90:a4:09:8f:51:13:ce:a4:65:43:eb:0c:77:
         3f:a4:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:24 2026 by rpki-client