Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File:                     5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier:          9/ce0fdqveRHSKXt+JeBgdzgGqQIfWPNIykghUlVQwQ=
Subject key identifier:   9A:E8:6C:DC:3F:81:BC:8B:72:D6:76:0F:2C:F2:90:60:10:0B:F3:F7
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer:       /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial:       01A001A64DE7DBB31FBDA5840B502447C44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number:          15E7
Signing time:             Fri 14 Aug 2026 19:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:11 +0000
Files and hashes:         1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
                          2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: XClWKCbdfLZAarY8EojkkgaExoSQYUPJDSyyNnebuNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:4d:e7:db:b3:1f:bd:a5:84:0b:50:24:47:c4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
        Validity
            Not Before: Aug 14 19:01:11 2026 GMT
            Not After : Aug 15 19:01:11 2026 GMT
        Subject: CN=9ae86cdc3f81bc8b72d6760f2cf29060100bf3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:94:36:e7:dd:05:1b:2d:3a:01:10:86:92:
                    d3:2b:95:20:87:8d:c5:04:19:3a:39:b6:af:41:68:
                    81:77:b1:a5:3b:0a:43:d4:9b:50:cc:55:c4:57:ae:
                    2b:00:78:ec:2a:d8:0e:5e:30:7e:63:2d:01:a3:a0:
                    47:c3:f6:4b:ce:e5:fe:b2:43:c2:0b:e2:0b:6e:df:
                    5b:8c:a6:21:72:e6:71:79:82:db:b5:64:36:69:f1:
                    b7:32:c5:74:11:c0:c4:b1:f2:c2:3e:49:dc:ef:b8:
                    a2:07:ba:b5:9b:44:b8:9d:f1:e4:fd:fb:33:d7:47:
                    15:9b:58:48:ae:7f:9c:86:9c:d6:bf:6e:4d:4d:31:
                    56:15:54:82:6a:26:25:c1:2c:6f:87:a9:a9:11:8f:
                    f5:24:37:1f:a8:a0:83:91:4c:eb:00:fd:54:6b:89:
                    df:5f:7b:9d:a5:9d:b6:ec:fc:66:0c:ad:c9:f3:89:
                    44:36:e3:8c:bf:01:31:d6:9e:a5:ee:05:6f:de:39:
                    9d:80:9c:06:67:5c:32:44:01:2e:91:32:f3:73:8e:
                    46:f4:d7:b4:ce:d0:7e:a8:0f:4e:99:76:44:4e:3b:
                    b9:e3:0a:fd:c9:f5:a8:d7:82:96:b6:52:ec:3e:b0:
                    35:ec:09:73:27:3d:4b:3c:44:14:9b:23:cc:6c:ec:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E8:6C:DC:3F:81:BC:8B:72:D6:76:0F:2C:F2:90:60:10:0B:F3:F7
            X509v3 Authority Key Identifier:
                keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:f2:e3:93:34:20:4c:28:99:9d:45:87:61:80:39:c7:ed:
         30:1d:f3:95:49:8a:0e:67:05:5f:0f:b0:38:5c:b8:d1:ad:39:
         e9:f1:8a:b2:78:aa:e6:84:93:9a:b5:db:27:67:a6:64:ef:44:
         bb:83:a6:16:dc:10:60:5c:95:e7:63:ba:c3:a8:36:3a:ad:71:
         0e:92:9a:99:ea:f2:93:04:f1:30:f6:1d:81:e5:e8:47:2b:55:
         b1:0b:ee:17:da:63:be:84:83:83:6e:78:5c:3b:bd:57:3a:a3:
         81:36:25:7c:a8:96:12:19:bf:cf:8b:f8:bf:c2:47:3e:20:d3:
         3b:e6:82:d6:af:11:92:db:fa:1f:ff:4a:fa:d2:e2:5b:e3:fe:
         bc:9f:83:58:87:c2:96:10:77:c6:57:7d:44:79:57:a1:4d:1d:
         77:ff:4d:e5:71:af:d7:f3:62:1b:23:c4:24:1d:f7:0a:bc:87:
         51:c3:6b:7a:40:43:32:bd:cf:c0:6e:c2:f2:af:5f:27:c2:3e:
         c1:74:3c:41:b4:9b:e9:db:c4:a1:ca:22:f3:ec:b3:12:ae:af:
         0e:69:d1:f8:39:4c:8f:ad:ae:ee:ee:6d:1a:17:ba:47:8c:dc:
         8e:20:09:ff:df:ae:01:89:e8:c1:1c:ba:f1:b6:bd:98:23:e8:
         79:81:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:46 2026 by rpki-client