Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File:                     8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier:          kH0OUbkH8WilVpQV+SbThpAM8yFeXwRBII1HgSTLvZc=
Subject key identifier:   E1:F2:3E:07:75:70:2E:FC:18:0A:09:6D:12:B2:04:31:96:20:CE:49
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer:       /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial:       01A00138431F9E7C2B477960DD2FFDB7F5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number:          0A06
Signing time:             Fri 14 Aug 2026 17:00:59 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:59 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:59 +0000
Files and hashes:         1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
                          2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
                          3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
                          4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: 6+D1BZUUZezKwIzD4NQVkcM8BXhMFCUwf/N8ISbY330=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:43:1f:9e:7c:2b:47:79:60:dd:2f:fd:b7:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
        Validity
            Not Before: Aug 14 17:00:59 2026 GMT
            Not After : Aug 15 17:00:59 2026 GMT
        Subject: CN=e1f23e0775702efc180a096d12b204319620ce49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:9d:16:21:9b:c0:67:54:bd:bc:06:a5:13:
                    d9:0f:a4:1b:3c:ef:1e:a5:29:6e:3f:ba:34:ca:40:
                    4c:fc:e8:bb:eb:41:1e:a0:a5:1c:04:0e:33:df:46:
                    b7:82:a9:d3:b5:eb:61:82:32:33:b0:09:08:f8:32:
                    f0:bb:eb:c4:e3:92:2b:ac:45:4f:b1:21:6d:53:76:
                    2a:b3:c2:27:95:f4:b0:b8:f3:19:d4:44:17:4c:1e:
                    e9:f9:cd:c0:fd:13:7f:e2:83:2a:27:04:93:28:00:
                    5a:c8:df:d7:4d:48:1c:06:34:8e:00:53:48:cf:a0:
                    d5:d6:87:af:02:c5:ae:d7:3b:af:55:9d:f6:72:55:
                    b0:1e:a9:cf:25:a2:c0:41:28:bf:0e:53:12:7c:56:
                    80:47:cc:b3:bf:eb:6d:90:36:83:bf:24:a5:b2:95:
                    de:d1:b5:0e:e7:b6:e1:ee:0b:3c:28:dd:bc:bf:b7:
                    41:83:d2:95:96:25:d8:7b:76:9b:6a:75:36:98:e6:
                    37:65:04:43:71:ed:8e:01:c2:5c:7f:e6:4f:07:8d:
                    9a:bf:5b:9d:8c:85:df:b1:d9:e4:e6:2f:93:96:05:
                    04:f1:75:50:5e:2c:00:1c:ad:83:4c:1f:05:4f:d0:
                    a2:e3:74:0e:70:d3:22:f4:44:e0:01:09:df:9f:1e:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:3E:07:75:70:2E:FC:18:0A:09:6D:12:B2:04:31:96:20:CE:49
            X509v3 Authority Key Identifier:
                keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:2f:f1:ef:5e:36:fa:dc:12:d0:e9:04:96:a0:b2:e5:73:d4:
         9f:65:c7:e3:bf:73:08:71:31:d2:2b:18:7a:67:db:55:40:8c:
         6a:a8:54:c4:91:6a:42:1f:07:5b:11:67:f1:39:bc:8a:97:b5:
         b1:d0:c3:6a:1b:4a:4c:99:ce:05:95:88:3d:ab:a6:7f:c2:70:
         66:ae:b6:ed:99:ae:f5:04:33:7a:bc:f3:27:a6:48:cf:f1:73:
         88:80:d5:d6:6f:c4:11:18:5f:a5:4c:60:f9:00:ba:8f:55:fb:
         82:8e:45:cc:d9:1e:2e:bf:13:b4:33:ce:ac:ee:92:19:48:b0:
         64:8d:15:4e:5d:4e:a2:68:37:a0:49:d7:fd:00:52:b3:23:e8:
         22:c7:54:96:0b:ad:2c:f4:d0:cd:7a:ea:41:79:39:10:00:bb:
         93:ec:85:b7:53:5f:b2:80:b4:4a:0a:f7:38:7d:c6:ed:22:71:
         00:c5:67:4e:89:63:be:12:fa:4c:42:5a:29:10:d5:51:da:91:
         d0:38:9d:42:2f:1a:86:1b:20:9c:c8:d9:fa:d9:37:f2:07:34:
         d7:64:cc:1a:17:5a:79:1d:a0:7d:2d:92:9e:0c:c0:1f:56:6a:
         63:76:df:9c:78:f2:ed:4a:16:96:33:ad:5a:c7:16:e0:44:fa:
         ac:5c:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client