Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File:                     1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier:          /oO6Hvv/7FNlZyGaKkYxKQyG5Ve8iMcU9NcdvORQ4gc=
Subject key identifier:   41:C9:A8:D1:A4:25:61:80:2D:C6:0A:80:0E:A9:79:0B:24:66:51:DD
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer:       /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial:       01A001A607EE89D35375DEEAB154D4C99135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: cUpCcWneqdCeWaAeyX6rCMF55j9TmQqIQjgGQ4deewU=)
                          2: 3OShaLp1tgG0w6F8SnVFUGGGJJU.roa (hash: 6F9cP81CAB2z6kxGDavpoTqFUUII+JeGSAu6vLBGSQA=)
                          3: aSq4kwpisiyPqp-dHXzcfCq_VbE.roa (hash: W/mYGGv/Jtea8oXyonioU+JGGz0ezZ8tWqj2IvUsfjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:07:ee:89:d3:53:75:de:ea:b1:54:d4:c9:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=41c9a8d1a42561802dc60a800ea9790b246651dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:ec:29:51:60:91:d9:41:58:e8:f7:c8:28:
                    e8:e0:15:11:06:de:92:9b:61:6b:9d:3f:64:8d:c8:
                    11:2e:b2:2e:d3:4d:7d:4e:14:8f:0c:0d:23:d2:da:
                    5a:ae:a2:8a:51:cd:f4:10:9c:95:ea:a2:fa:b7:5e:
                    fc:f2:9a:6f:9c:3b:9d:40:aa:f4:77:15:6f:1f:b8:
                    1e:5c:d4:2a:d8:aa:36:4f:e4:5e:5d:b1:87:11:e3:
                    81:c5:d6:a3:93:71:1a:01:18:15:ec:b3:7c:24:6d:
                    86:e4:0f:5f:8f:d5:cb:03:96:c7:05:7b:51:3f:61:
                    d7:76:9b:31:ca:ba:8a:5d:93:c9:bd:55:f8:5b:b0:
                    f5:2e:91:4e:a5:39:60:57:9c:32:cf:ca:ea:85:3a:
                    07:93:36:ec:1c:9e:8c:e2:5b:e9:10:59:24:3d:e6:
                    a5:8b:53:dd:2b:d5:19:66:d4:3d:61:95:d8:95:50:
                    25:45:10:3d:3f:00:ac:f5:dc:e9:ff:19:68:0c:09:
                    1d:78:d0:db:51:ff:5b:51:5b:7f:4b:3d:13:e7:3a:
                    25:34:76:16:91:4b:b0:cc:d2:81:d1:9e:36:53:9e:
                    c2:a3:a1:bf:77:32:9f:57:60:45:49:6b:04:5a:64:
                    ee:c5:8b:81:20:69:9e:44:0b:7e:d3:65:8c:09:e3:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:A8:D1:A4:25:61:80:2D:C6:0A:80:0E:A9:79:0B:24:66:51:DD
            X509v3 Authority Key Identifier:
                keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:83:f1:de:97:d5:3f:a7:dc:21:8b:64:fa:08:00:83:09:
         1a:ae:47:17:40:c6:c9:ab:84:c4:c7:0b:99:6c:1c:cf:bf:bb:
         eb:4c:1d:13:64:78:31:6a:89:cf:7e:54:43:45:8c:4f:53:15:
         18:0d:2a:be:90:cb:cc:53:72:86:c8:44:6e:ac:ec:6e:a6:ed:
         37:c7:18:b8:f9:33:85:fd:38:82:c3:b5:91:be:60:fb:52:06:
         26:eb:b6:60:b9:ea:a8:9b:11:36:54:4f:e5:2e:9c:6d:39:13:
         d5:b5:56:9c:d8:2f:d0:26:dc:88:fd:2b:87:83:7e:29:6d:29:
         67:ef:c1:3a:39:68:66:2c:e9:ee:d3:60:3f:40:be:ee:29:4b:
         63:42:f1:88:ac:3d:75:50:25:83:0b:1e:58:d6:2b:9c:c8:f4:
         ae:0d:2a:26:38:67:79:87:e8:7a:0e:a2:2b:27:2b:02:26:f5:
         49:5f:0b:de:46:16:26:05:89:e2:98:8c:e0:ee:28:64:a1:5c:
         6c:7d:8f:8e:ae:5e:c1:d3:2f:94:10:2f:c5:3a:63:1c:78:7e:
         84:7e:48:da:34:c7:40:18:b0:f2:dd:3b:96:29:ba:89:3d:68:
         61:60:5a:a2:6e:db:21:22:a1:62:c1:15:3a:40:3f:d9:85:1d:
         d2:5a:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:09 2026 by rpki-client