Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File:                     a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier:          ot+NGWSeQO5geugj+O8JamhPs6unInO6/8vrKVBFCoU=
Subject key identifier:   C8:4D:00:6B:BC:F7:B2:2B:53:12:BD:C0:55:4A:A3:FA:3F:C6:95:C3
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer:       /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial:       01A00439946955B636BC50799B2CA63DE0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 07:01:17 +0000
Manifest this update:     Sat 15 Aug 2026 07:01:17 +0000
Manifest next update:     Sun 16 Aug 2026 07:01:17 +0000
Files and hashes:         1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
                          2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: 3WOuBRqcfKuxLS+qmIiUJE+CzVlHndtlYvp+eGQkwf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:39:94:69:55:b6:36:bc:50:79:9b:2c:a6:3d:e0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
        Validity
            Not Before: Aug 15 07:01:17 2026 GMT
            Not After : Aug 16 07:01:17 2026 GMT
        Subject: CN=c84d006bbcf7b22b5312bdc0554aa3fa3fc695c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:3d:28:f3:e6:65:1f:ab:26:ae:a6:a4:64:
                    c6:2a:b8:c1:03:ed:0e:61:11:a1:0c:8a:95:3a:61:
                    08:48:43:52:a8:e7:41:b6:24:48:a4:a0:2f:a4:54:
                    20:53:de:98:3d:3c:5f:5f:e6:54:96:53:80:d3:a8:
                    a9:a3:7b:58:fd:b6:90:91:96:1a:55:62:61:ae:09:
                    d3:0a:92:87:e8:7f:18:2e:fa:58:a5:65:6f:5a:78:
                    c6:a3:c0:f0:b3:7b:a7:4a:9c:83:26:55:82:9b:ca:
                    32:23:4a:05:42:7d:43:76:cb:c8:73:df:ac:47:32:
                    a7:37:de:0e:4e:88:77:64:15:a6:33:99:b0:55:a0:
                    96:38:52:48:51:06:36:cf:be:93:6e:2e:15:17:3a:
                    2f:33:d5:02:86:cf:fe:71:b8:c5:fe:a7:8b:d7:b8:
                    32:bb:05:4e:89:5b:cc:9d:fe:cf:ff:71:d8:54:86:
                    03:db:4e:04:73:7c:a1:1f:40:b9:9c:7a:b8:aa:a5:
                    27:0c:17:73:46:f2:1c:68:cb:62:41:34:d6:59:b9:
                    98:68:88:6f:9d:94:13:16:9d:9e:fe:97:39:df:19:
                    44:2f:8a:d1:34:e8:f0:cc:f9:33:65:3b:74:4d:83:
                    62:02:2f:22:18:f5:1f:90:5f:b4:ac:6c:ed:9f:c0:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:00:6B:BC:F7:B2:2B:53:12:BD:C0:55:4A:A3:FA:3F:C6:95:C3
            X509v3 Authority Key Identifier:
                keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:f1:7f:22:d2:e6:3a:eb:65:85:36:14:86:bb:a6:91:49:
         11:74:26:90:4a:af:a9:ae:f0:4c:e9:c6:34:49:c2:c2:99:b9:
         9a:47:c1:67:e4:6c:56:d5:32:b7:b7:6c:8b:a6:9c:30:8c:af:
         27:1f:a4:a3:5e:4d:cc:51:2c:5f:a0:1c:ce:3d:4f:77:dd:f8:
         87:46:eb:72:c8:c7:15:da:2b:ab:df:47:d2:42:8f:7c:0f:ef:
         7f:c1:61:08:93:a3:f3:d2:5f:0d:bc:53:a0:5c:76:b8:1c:b7:
         bf:02:02:64:ec:36:13:ba:78:95:49:5d:0f:c3:44:e6:f2:7f:
         c8:f5:11:ef:09:e7:98:30:58:80:b5:67:5c:c6:fc:01:86:58:
         29:bf:ee:be:cf:58:ef:7c:23:51:57:76:57:b3:41:53:d4:dd:
         a6:f9:ca:2c:8e:44:5b:3a:53:44:b8:65:4b:8c:c4:48:42:7e:
         c6:d0:14:0b:04:00:e1:d2:0e:51:76:34:a3:c8:d0:e2:6a:2e:
         71:1b:30:7f:a6:b0:d2:54:3a:e2:89:3c:06:25:1a:83:26:28:
         ef:f1:60:76:64:e4:21:77:2e:85:56:37:60:14:26:80:93:c2:
         73:99:f0:42:fd:61:80:c8:f8:e0:3e:5a:ab:32:80:eb:a5:3c:
         4b:36:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 17:50:39 2026 by rpki-client