Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          5B+8xQLnTJKFDaCH7Qc8rBvthvo1e/UTBXNbntvDuLY=
Subject key identifier:   6F:D9:31:B3:ED:9D:E2:63:20:4C:10:C7:98:1E:A4:76:BC:3A:2D:DE
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       01A001DD97543A4DE5C9B3792889C2168FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 20:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:34 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: zi0wRht7Q1x8ObtUlBDl2eowoxpSaWVB+8NyiqRZK2U=)
                          2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:97:54:3a:4d:e5:c9:b3:79:28:89:c2:16:8f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: Aug 14 20:01:34 2026 GMT
            Not After : Aug 15 20:01:34 2026 GMT
        Subject: CN=6fd931b3ed9de263204c10c7981ea476bc3a2dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:fe:94:a8:4c:5b:92:4b:e7:6e:3b:73:d4:
                    18:fe:bb:88:f7:e7:07:41:dc:89:87:2b:be:ae:c1:
                    e7:f8:60:19:bb:34:b4:80:b3:6b:9d:13:6e:24:0d:
                    00:7c:6a:d8:0a:5f:46:ce:b5:9f:4b:0e:58:ef:1d:
                    6e:e7:40:7d:24:1b:04:e8:d3:f0:e0:f1:5e:b2:7b:
                    8f:70:9a:f1:de:94:46:6e:dc:15:ef:46:09:d2:28:
                    44:b8:1a:ad:95:85:73:c1:ca:e7:6d:89:da:4f:3b:
                    6d:62:57:d9:3e:b0:0e:d2:2d:e0:a6:72:f7:b0:c0:
                    2d:34:9e:e9:9e:d8:13:c1:42:4f:44:85:7e:86:af:
                    f6:6f:3a:f2:76:f6:7c:80:e7:99:c0:df:78:9d:67:
                    f0:ef:6c:78:82:6f:fb:ff:40:35:b0:40:b9:f4:e7:
                    69:00:01:17:03:31:e1:95:2d:f9:08:29:8f:7d:a7:
                    25:4e:f1:0d:34:11:c9:8c:51:bd:86:81:96:28:3c:
                    b9:c8:51:b0:9e:47:e5:9e:0b:cd:7c:47:32:9d:1f:
                    c4:78:80:76:82:c8:2b:c6:da:12:8d:ce:92:44:f9:
                    f3:eb:06:45:0c:13:11:76:2e:ab:e9:d1:72:a4:66:
                    5d:a7:18:c0:17:65:3c:d7:d3:86:3c:ac:2d:14:97:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:31:B3:ED:9D:E2:63:20:4C:10:C7:98:1E:A4:76:BC:3A:2D:DE
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b5:7a:41:b3:2c:e9:01:a5:01:83:2a:36:18:c5:14:ed:d4:
         b6:c8:b3:7c:e2:8a:f9:50:18:5f:d8:4b:39:d7:06:a4:95:94:
         8a:02:4c:f2:53:3d:ad:60:66:e0:da:36:71:61:0a:04:c2:98:
         29:cf:ba:1f:ba:15:5d:28:89:25:36:92:f1:75:a6:dd:41:93:
         db:99:13:58:a6:89:9a:d6:62:04:f7:1e:d3:bb:d8:4d:cf:26:
         5e:f1:1c:83:1f:a6:0e:1b:23:ea:c2:67:d9:db:e6:86:8d:f6:
         5b:0f:f8:77:aa:9d:38:89:6b:3f:f8:27:e1:1f:b3:1f:93:55:
         21:1b:36:03:7a:3c:e8:f9:f4:f8:72:af:af:2e:26:51:02:79:
         12:8f:0b:56:56:29:3a:19:dc:5e:8d:f7:1d:8b:35:94:34:ba:
         cd:d2:a8:d8:8e:ea:a6:33:86:27:8d:2b:81:e4:73:fc:a0:43:
         4e:e7:53:b7:d2:1e:1a:8f:01:b4:41:b7:11:80:ed:18:19:4a:
         55:63:1e:90:a8:17:67:d6:32:68:02:39:37:40:55:ac:b0:11:
         b8:14:cf:eb:a7:e8:e7:7a:da:e2:3b:00:c4:1d:17:9d:e0:45:
         47:28:45:d4:fb:06:80:56:4c:ea:c2:44:43:a9:27:4c:dc:71:
         7e:0b:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:28 2026 by rpki-client