Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File:                     3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier:          E+euGoklJdWtm0fGS1WcuWn9dRjhqvGShxRFTFIZK8c=
Subject key identifier:   8C:38:C0:0D:07:C9:C7:32:CC:AD:53:6F:C1:A2:4A:DB:53:BD:CA:C7
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer:       /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial:       01A001A609FF45AF76A6D65D9C2B648604C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number:          0E6C
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: fmrK2LdejOF/zZOlHYps1KQxvo5vUNh8/OXliwB9H98=)
                          2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:09:ff:45:af:76:a6:d6:5d:9c:2b:64:86:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=8c38c00d07c9c732ccad536fc1a24adb53bdcac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:d8:e9:55:23:4f:79:84:a2:44:18:c7:04:
                    35:ea:26:77:e7:ab:9e:63:71:99:fa:a0:9d:42:43:
                    82:42:8f:d4:5e:c2:cd:6e:2f:4a:17:2a:d0:d6:e3:
                    3e:0b:71:20:70:d8:98:c1:fa:d4:cb:9a:80:c1:8f:
                    0b:b2:14:69:f5:07:da:3f:88:41:66:87:a7:92:8b:
                    18:b9:6d:13:5e:eb:f2:03:06:da:da:d5:d4:03:23:
                    e6:98:59:eb:59:3e:2b:27:c8:8c:a9:4b:a2:9c:5a:
                    a6:2e:0e:f7:3b:32:39:ab:39:62:47:ef:e9:79:8f:
                    a7:34:54:cb:fa:80:8a:58:49:fc:a3:17:cb:0c:6f:
                    fe:44:d6:88:57:56:7e:6d:9e:86:7b:1d:b0:4f:3c:
                    7d:d2:6b:62:07:45:aa:bd:52:46:15:86:9a:bc:a8:
                    22:ea:42:54:63:c7:1e:52:14:8f:fb:fe:8b:77:30:
                    9a:dc:9f:c9:6e:0f:4f:07:92:37:30:c5:ad:dd:0a:
                    32:2f:7b:c6:8d:74:5e:43:98:33:4c:c1:24:1b:e3:
                    9f:6c:79:90:37:ab:30:59:b7:89:66:e9:c2:59:b9:
                    b2:7b:72:9a:36:34:22:30:21:c6:78:9f:f3:cf:54:
                    ec:dd:b6:72:df:dc:13:70:56:c9:01:73:db:1a:34:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:38:C0:0D:07:C9:C7:32:CC:AD:53:6F:C1:A2:4A:DB:53:BD:CA:C7
            X509v3 Authority Key Identifier:
                keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:2b:4f:f1:bc:9f:0c:7e:2c:c6:31:a3:6c:bc:53:b4:19:
         72:dd:ee:8a:93:8d:7c:3d:cd:ca:74:1d:8e:40:09:b6:0f:c4:
         83:3c:c9:24:71:bd:ea:96:bd:59:7b:37:01:18:9d:28:93:8e:
         9a:fc:69:66:30:b8:92:13:27:20:53:7c:6e:5d:45:5d:46:73:
         e9:72:92:43:16:b8:99:44:db:bb:ee:b6:aa:90:62:42:6a:59:
         f6:0c:89:05:59:51:30:6c:31:03:a9:cc:a3:7a:dd:77:98:cb:
         6f:f6:59:65:41:0b:6a:23:ec:5d:a5:5e:f2:af:0c:2f:15:19:
         03:17:68:5b:65:fb:0d:2d:56:11:37:0f:ee:52:98:8d:bd:8a:
         27:4b:60:0e:46:92:5a:3e:02:2b:6c:bd:15:80:ae:69:92:cd:
         8a:28:4f:a5:a2:ae:eb:00:08:c6:22:5f:93:5a:81:69:1d:9c:
         5b:08:ac:94:0d:1a:6f:fa:7d:f3:a1:9b:f7:98:4c:52:ec:97:
         d4:47:a7:bf:41:73:02:06:f0:17:35:69:44:e4:42:36:eb:1a:
         80:cc:c3:3e:a5:06:71:57:d5:e4:e5:59:c1:ab:39:f8:ad:61:
         33:0d:1d:e0:b8:86:15:f5:ef:5c:d7:a4:0e:5a:21:21:c1:2f:
         5f:f7:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:22 2026 by rpki-client