Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File:                     1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier:          bJKj0PguhSuzvEI/96scKnRo+6zQq1H3dtJi6SRecX8=
Subject key identifier:   23:D5:AE:96:03:0A:EF:7B:8C:DB:A6:29:B8:DF:32:B8:2B:6B:01:88
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer:       /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial:       01A0024AEFC325796477DB80708F43DEAE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 22:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:00 +0000
Files and hashes:         1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: 2IsJJX6RTVVb04kpw4sYgrPMGKsJadZVWIDkJ90/wMY=)
                          2: ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa (hash: tgnllS0U1hZ0N2hin4TK1nqPVptt1uSkt6Jkh0W7oGk=)
                          3: lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa (hash: iUpeWO/zWeAoo1xidbKM+b5szCcBiTY0HxyO251Cj3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:ef:c3:25:79:64:77:db:80:70:8f:43:de:ae:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
        Validity
            Not Before: Aug 14 22:01:00 2026 GMT
            Not After : Aug 15 22:01:00 2026 GMT
        Subject: CN=23d5ae96030aef7b8cdba629b8df32b82b6b0188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:f8:d2:3c:44:e7:97:c9:56:a9:08:01:58:
                    c9:5e:8b:fc:59:28:1f:e1:80:d1:1e:41:5e:8f:01:
                    91:3a:3a:7b:d7:92:73:19:e4:df:6b:3f:12:e9:d2:
                    80:87:c3:92:58:cf:5c:3b:03:c3:fb:e3:95:81:03:
                    fd:bc:30:1a:3d:f1:4c:ae:a8:02:d9:4f:c7:15:ae:
                    51:e2:42:0b:0f:0f:ff:66:f1:ff:b1:63:43:3c:ed:
                    52:2f:64:69:dd:56:9b:fd:af:a5:4a:10:ab:c2:58:
                    37:14:99:3c:56:13:a2:7a:0a:33:9d:f9:99:5d:b5:
                    eb:1c:39:b7:a8:91:3f:94:ed:8d:9e:18:c9:98:f7:
                    a5:c4:ef:b2:3d:94:07:42:d6:ec:f7:2b:c0:55:de:
                    17:ba:1e:be:a0:31:56:6d:fd:63:8f:b4:a1:82:ac:
                    fb:4f:eb:3d:b0:3d:a1:3e:ee:d2:a3:9a:4b:2a:a1:
                    8e:1f:94:e2:d5:e6:96:b4:6e:2f:45:85:2d:07:fa:
                    10:9f:cd:fb:5a:37:7c:43:fc:9b:2c:91:22:dc:b5:
                    e1:c8:37:10:c0:a6:0c:c8:12:96:de:ba:fb:cc:ad:
                    06:54:11:75:ab:d9:64:7d:ad:92:56:08:ad:50:c9:
                    a7:f9:ae:6e:b4:ae:52:83:6a:00:09:aa:18:dd:12:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:AE:96:03:0A:EF:7B:8C:DB:A6:29:B8:DF:32:B8:2B:6B:01:88
            X509v3 Authority Key Identifier:
                keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:20:45:58:7b:d5:ce:d8:07:7a:f6:ba:39:78:2e:5a:fc:18:
         54:ba:3d:8b:a9:5d:0e:74:d7:9d:f3:92:9d:2d:07:c3:aa:05:
         4e:3c:8b:92:a2:21:60:ba:e9:ef:9b:d5:34:41:8e:99:c4:fe:
         ad:33:95:93:b1:e4:35:95:f1:9a:d6:ff:a7:01:a3:20:11:36:
         5e:06:bc:88:9d:07:c3:3c:be:bb:42:f4:a5:d3:8a:14:17:81:
         9b:bb:3c:05:8c:5e:b7:66:44:41:f2:37:ff:a0:d8:b9:27:66:
         b0:7b:d5:c1:ac:4a:8a:25:cc:de:38:f0:85:c3:ef:5b:b1:bd:
         c4:0d:7b:ab:b0:9c:21:42:69:39:3a:eb:16:3e:44:ca:0f:30:
         26:6a:6d:74:26:20:dd:5a:0a:1c:d3:df:2a:3f:55:a0:c6:1a:
         2f:b9:79:ea:1e:a1:fb:1e:53:f6:63:59:eb:bd:d0:4d:e8:fb:
         d3:c6:1d:98:93:69:ca:a5:5b:05:cd:49:e0:e4:f1:cc:c1:19:
         e4:22:a1:13:16:86:21:39:bd:c4:8b:94:c4:36:a2:a8:05:01:
         d6:bc:ce:77:0a:16:d4:c4:13:be:05:b7:1d:4c:58:f0:a7:84:
         04:6d:a8:09:97:4a:bc:cb:28:53:37:16:53:8a:76:61:f1:df:
         7a:7a:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:00 2026 by rpki-client