Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          UvseuQFDvJUxmPNDErHPwwaSxQBrMRAl70hdl/QFvJ8=
Subject key identifier:   8E:A9:D5:7C:87:B2:F7:DB:40:AF:C0:A4:1C:42:BF:00:B4:30:5E:16
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       01A00214132C36E4D9B56E4EFE3CC50DA6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          0C68
Signing time:             Fri 14 Aug 2026 21:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:05 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: Y7/RJo65dkJ925omxfr5spdfUPcVshKKRhs0HB162xA=)
                          2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:13:2c:36:e4:d9:b5:6e:4e:fe:3c:c5:0d:a6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Aug 14 21:01:05 2026 GMT
            Not After : Aug 15 21:01:05 2026 GMT
        Subject: CN=8ea9d57c87b2f7db40afc0a41c42bf00b4305e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:06:b8:ad:6e:26:09:ba:35:6d:45:12:b5:
                    54:1b:83:1d:bb:2b:1e:1d:d7:eb:ef:7a:9d:8d:d3:
                    2e:e1:e8:00:2d:0f:d1:22:f0:bf:75:ac:96:ee:e9:
                    47:6f:f5:25:be:e5:3d:39:a8:5d:91:36:bc:83:82:
                    f4:ec:cf:b0:c5:75:ca:d9:3b:75:1d:1b:01:8e:b4:
                    89:6f:21:27:6d:6a:5f:8d:f1:08:71:8e:7c:2d:da:
                    14:5a:69:d2:2a:84:20:f9:d3:ff:91:59:4c:78:c7:
                    1f:bf:c1:3b:dc:a1:a0:24:99:b1:a9:9f:1a:43:13:
                    e3:12:54:76:9f:bb:d9:81:15:3f:bb:b1:5b:79:19:
                    ba:46:33:b8:29:64:66:86:99:db:a8:5d:04:4d:97:
                    05:96:a5:bd:f1:e6:30:94:1c:38:60:dd:ce:9d:a9:
                    11:3e:c8:70:fe:f1:c5:d7:72:ac:53:89:f0:40:0a:
                    4a:0a:72:8f:42:68:2b:2c:5c:09:a7:c4:0a:e5:08:
                    a2:d4:3d:7f:8b:cf:ed:3c:ba:8a:fb:9a:ba:2e:7a:
                    f6:a9:11:6b:26:ce:26:44:72:c9:f2:de:fc:f7:34:
                    d0:a6:63:e1:7a:3a:1b:6c:f4:44:84:5d:ad:94:84:
                    51:42:5e:38:2f:c7:3d:a4:29:84:8c:7c:c1:d3:39:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:D5:7C:87:B2:F7:DB:40:AF:C0:A4:1C:42:BF:00:B4:30:5E:16
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:06:e1:66:d2:7b:b1:35:38:c2:e1:51:f1:e7:fc:7b:96:b8:
         a4:a3:92:cf:6a:02:3f:fa:e8:ae:ec:cc:6f:04:89:d3:f0:04:
         ad:93:a6:80:89:86:78:3f:92:5e:55:28:39:ae:81:4f:48:3d:
         3f:70:58:94:10:73:d1:21:41:04:c9:35:75:88:9d:0c:63:2d:
         10:65:de:10:70:7d:51:5c:ba:45:03:12:c3:f1:a8:b9:eb:34:
         cc:a1:33:23:e0:72:d5:be:32:95:ef:eb:4e:5d:73:28:b1:98:
         a0:5f:64:73:af:22:72:58:6e:17:34:9e:ac:57:a8:bc:d4:2a:
         04:34:c1:37:fc:aa:63:f1:18:0e:44:25:0c:8c:f7:7b:00:46:
         40:c1:00:68:eb:02:f6:1d:f5:12:27:b5:08:31:6c:8a:af:ec:
         d2:b4:b2:7e:18:6a:a7:46:34:8f:db:df:f8:f0:24:6b:f1:3e:
         65:6b:75:a1:8d:71:ec:c9:56:bf:54:42:fa:fa:1a:07:86:3e:
         b6:71:ba:85:f5:b0:89:76:5e:eb:27:a3:3f:48:43:e1:e8:cd:
         9a:88:9c:e1:d7:7c:b0:3d:78:40:1f:b9:8f:19:31:ba:ae:cd:
         e7:e1:31:9b:73:e1:53:69:b4:62:0d:b0:14:6c:45:0d:84:80:
         6d:87:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:07:09 2026 by rpki-client