Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          SKDPiR14IZKTfo13Z4Skx4qSeNNTyTUP6WAnGF1yF7Y=
Subject key identifier:   4A:33:FF:92:4E:A8:6D:32:E5:C3:76:21:86:AB:91:FE:A2:35:75:81
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       01A001DD6D4FF380CA2CA73CAF8D1C9FFDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          0F20
Signing time:             Fri 14 Aug 2026 20:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:23 +0000
Files and hashes:         1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: g4tDkgXK3fhHAa4XwDvi5pc3XtQEKWq+THvyTzUoNBM=)
                          2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6d:4f:f3:80:ca:2c:a7:3c:af:8d:1c:9f:fd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Aug 14 20:01:23 2026 GMT
            Not After : Aug 15 20:01:23 2026 GMT
        Subject: CN=4a33ff924ea86d32e5c3762186ab91fea2357581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:a7:ba:cf:ac:4f:27:c5:0b:30:5f:05:d0:
                    a3:3f:1a:e9:39:b4:15:a4:c7:78:cc:b1:f3:5a:25:
                    99:5f:d2:a5:44:68:ec:6f:5b:0d:c9:a9:fa:b3:2b:
                    38:5d:2c:25:aa:f6:df:ab:49:60:80:f0:17:01:3f:
                    1e:77:b6:14:6a:3f:03:59:b0:48:c3:67:56:2f:dc:
                    0a:d9:1a:cf:78:4f:aa:2a:91:a3:f9:a9:90:77:37:
                    31:c0:58:4d:05:d4:af:a3:39:84:93:fb:e2:40:6d:
                    79:90:8a:a4:99:5d:23:a7:1b:0c:e0:50:57:36:39:
                    d9:2d:cb:5f:2d:34:a7:31:57:eb:de:e4:a9:a8:fe:
                    7e:c3:06:e8:4e:0a:01:2a:02:7d:d0:ae:10:e8:21:
                    81:87:3b:ab:ce:a5:f0:7b:c8:31:ca:86:10:33:e9:
                    9a:7d:b1:66:78:3e:e6:b0:ef:45:8e:a6:2f:05:5f:
                    8f:22:fb:51:a0:a3:55:9f:a3:98:6d:3a:0b:60:46:
                    d2:f3:3d:b0:35:78:5f:93:8b:0a:6c:87:99:06:52:
                    a4:0d:cd:ba:9b:3b:8b:5e:36:2f:d9:ea:53:94:5f:
                    c6:64:c6:5b:bc:1b:4b:88:e0:81:7e:95:42:45:3b:
                    da:e6:25:bc:df:94:6e:cd:84:8d:73:f1:08:56:94:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:FF:92:4E:A8:6D:32:E5:C3:76:21:86:AB:91:FE:A2:35:75:81
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:0d:ac:9f:56:c0:a1:4f:d2:92:4c:b6:e7:ce:ef:63:d0:
         88:96:83:1c:7b:c0:6c:a6:8b:05:09:75:ce:ed:90:1b:54:3f:
         1c:2b:5a:7a:75:26:53:bd:d9:23:6f:ba:16:2e:34:72:7e:85:
         7c:34:15:4a:e5:e4:cd:8b:71:76:41:69:5b:dc:89:47:ac:52:
         5f:af:42:00:76:bc:89:c0:1c:53:c1:ec:13:12:dc:75:ce:ec:
         bd:f5:a1:6d:92:31:92:ac:df:06:51:f3:62:48:c9:fa:5d:67:
         ed:31:f9:54:eb:35:2c:d3:b3:ee:49:82:f1:85:b7:db:45:37:
         88:3d:c9:c7:9c:05:d7:bd:de:7c:ac:73:e4:81:96:53:69:66:
         93:15:73:d7:03:8b:a6:25:b4:90:a5:49:6d:ac:21:0a:9a:6a:
         d2:a2:e3:0c:7e:9d:ad:97:c8:43:24:c2:2a:fb:60:62:92:40:
         d4:05:3d:62:82:92:9d:17:64:dc:28:bb:ae:0a:cb:18:60:f3:
         e7:bb:bc:48:d1:19:b1:34:21:61:84:62:3f:8c:6c:41:e3:e5:
         a7:bc:fe:ed:c2:d9:71:63:ae:a2:2f:51:27:53:70:87:70:51:
         34:f0:3e:54:c2:db:60:6e:9f:fb:22:c0:91:81:b2:9b:c6:93:
         fd:e8:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:59 2026 by rpki-client