Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          YQXn98f0OPLW5oihntE4NZ93oCfvN/ujoUEcMH4s8PU=
Subject key identifier:   00:1C:EC:8A:5E:F2:1C:AE:F8:86:38:0E:92:3E:81:22:EE:E8:23:4C
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       01A00326BFB7C2006BD5051E40D9CDD93625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          1993
Signing time:             Sat 15 Aug 2026 02:01:06 +0000
Manifest this update:     Sat 15 Aug 2026 02:01:06 +0000
Manifest next update:     Sun 16 Aug 2026 02:01:06 +0000
Files and hashes:         1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: +/dy/l8/qgfes+XTvNSPx2fm74+E8Rv/I7iKTznk4D8=)
                          2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:bf:b7:c2:00:6b:d5:05:1e:40:d9:cd:d9:36:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Aug 15 02:01:06 2026 GMT
            Not After : Aug 16 02:01:06 2026 GMT
        Subject: CN=001cec8a5ef21caef886380e923e8122eee8234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:7a:d3:b7:8a:86:5c:b7:2b:aa:c4:6e:11:
                    63:3a:6e:6f:be:1b:25:7c:cb:aa:6e:1b:37:f5:c6:
                    ca:67:47:80:71:81:02:ff:5c:99:d6:58:22:eb:d3:
                    5a:b6:b4:e0:07:39:2c:97:30:3f:79:4f:62:cb:f4:
                    00:d9:ec:14:e9:b2:13:a9:6d:be:44:4a:64:31:43:
                    ab:1e:db:68:3b:7f:ab:52:61:4c:fd:7b:87:ad:58:
                    3e:51:eb:39:2b:ea:1d:b2:52:81:41:52:f3:5f:fc:
                    10:af:05:18:88:b5:5c:18:fe:6e:99:0f:35:ff:f5:
                    41:b6:4a:5a:39:c4:20:bc:94:76:fe:0f:e0:9f:a7:
                    fc:b3:7c:a4:34:fc:17:8e:7b:9d:5a:9f:13:92:44:
                    57:14:01:a0:5c:b1:f4:7e:eb:93:b5:f8:82:34:d7:
                    33:c5:03:23:98:36:b2:d7:13:59:03:39:d1:49:52:
                    86:d0:7a:52:6d:04:d8:39:36:1b:ee:63:38:f9:a1:
                    d4:72:85:2e:78:22:b4:3a:55:57:d3:e6:b7:ad:78:
                    3c:6f:40:55:a6:6d:79:6a:9c:f7:f9:b0:72:02:d2:
                    93:b8:1a:5b:ff:3a:b4:9d:6d:e8:be:a9:45:32:04:
                    e5:7a:1c:7e:c1:8e:48:76:d2:60:92:de:d1:58:3c:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1C:EC:8A:5E:F2:1C:AE:F8:86:38:0E:92:3E:81:22:EE:E8:23:4C
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:36:80:bb:7e:93:c3:b4:ff:1a:56:8b:08:f6:68:65:dc:3a:
         17:aa:a6:11:71:be:cb:7f:d1:f6:d8:68:2e:23:ca:a8:7f:c9:
         ae:1f:2f:f6:a8:0d:df:24:3f:8d:64:6d:ec:18:f8:28:7b:e7:
         dd:e6:82:ce:b0:01:1b:66:8a:ff:13:1c:75:49:85:7c:a9:db:
         a1:de:67:22:be:0c:eb:bb:e4:a7:79:82:ec:49:a1:64:5d:ba:
         2e:93:61:8e:1a:00:bd:9f:a0:87:0f:04:2d:ca:f0:87:3b:c8:
         78:ba:12:a3:6b:c6:01:d3:7d:b7:81:ce:be:e0:39:7c:8c:72:
         4c:2c:3e:b5:11:54:92:31:b7:f7:13:70:02:43:c6:68:3c:e7:
         67:6c:c3:9c:bd:d8:12:ab:88:aa:8e:81:45:8f:23:5b:eb:05:
         54:2c:97:e5:2e:1d:2f:40:a7:8c:e9:db:2c:0f:e8:75:64:0c:
         56:84:55:07:43:aa:d1:b0:99:6b:27:a6:0e:8a:d1:05:02:e1:
         16:fe:52:1d:87:ce:da:60:ce:f1:1b:fe:a2:72:36:f1:4d:f3:
         ba:97:68:af:41:f5:75:69:e4:4b:2c:d6:2d:b9:c3:15:bf:c8:
         6e:30:de:ea:54:c9:10:2a:9c:75:8b:23:f9:92:4d:91:ba:ff:
         aa:11:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:41:49 2026 by rpki-client