Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          BVSndulU/yqQ6dN8Da/kIZ1MU4BwiejA8SepF7iBGuE=
Subject key identifier:   A0:BC:FF:07:AD:EB:10:10:71:44:AB:57:0E:D1:71:28:27:35:2A:1A
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       01A002EF8D70E96CD50BAF2C5F52404E6DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 01:00:48 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:48 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:48 +0000
Files and hashes:         1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: F4MqgjoFWekrf8tY7ppavhaU84Eqopk2Cm7Pg98nTjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:8d:70:e9:6c:d5:0b:af:2c:5f:52:40:4e:6d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Aug 15 01:00:48 2026 GMT
            Not After : Aug 16 01:00:48 2026 GMT
        Subject: CN=a0bcff07adeb10107144ab570ed1712827352a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:08:f1:8b:09:2d:f2:3a:fd:36:ca:36:bf:
                    b5:9d:f7:c6:7e:54:e4:b4:2c:82:3a:8b:c8:97:93:
                    49:db:6f:da:a1:01:bb:66:8a:04:05:33:bd:d2:c0:
                    6c:78:76:5b:86:6b:29:51:d8:10:75:f3:57:6b:a7:
                    03:32:9d:11:ab:f1:a1:a9:8e:da:b3:52:af:b5:ac:
                    b0:74:7c:86:94:88:2c:b0:db:c4:3c:9d:0c:ee:e1:
                    c1:ae:a7:c8:8e:b7:f0:47:d9:c6:ea:06:11:e2:94:
                    b9:3d:e1:d1:dc:7e:94:bd:ed:0a:1c:11:46:a0:76:
                    a5:0e:3a:da:80:b4:0f:c2:cb:0f:1a:14:c5:30:9c:
                    72:a2:4c:03:34:ad:38:5f:8b:7b:0f:b6:c7:26:76:
                    88:37:36:ad:48:25:4b:1f:60:cf:43:cd:01:63:6f:
                    b0:8a:75:08:8a:9e:83:1d:b5:0e:86:96:34:5e:b6:
                    cd:cf:9c:a0:25:fe:7b:20:6a:a2:11:da:03:6b:93:
                    7e:86:89:74:f4:b1:cb:0e:12:86:5e:c6:f4:eb:08:
                    8e:61:75:08:f0:d4:29:eb:53:a5:fe:35:ad:b2:cb:
                    c1:40:4c:00:e5:04:99:e8:f0:da:9d:96:8d:0c:c9:
                    86:5a:49:f3:c4:bc:bc:c2:16:ff:e4:24:eb:0e:16:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BC:FF:07:AD:EB:10:10:71:44:AB:57:0E:D1:71:28:27:35:2A:1A
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:1e:38:ab:66:dd:0b:7f:89:21:df:0e:24:d5:b0:26:34:
         e5:47:0d:bf:ab:e5:c1:93:d0:7d:68:31:dc:19:26:d6:4d:27:
         18:0f:3b:9b:e4:4e:ad:98:30:7e:f0:68:b1:ec:ae:e9:07:3b:
         80:86:c9:c7:26:5f:0e:f8:10:c7:2b:3e:51:56:fa:a8:fe:15:
         85:45:e4:85:38:dc:ec:cf:57:cf:72:2e:ef:0f:6d:9b:1e:ed:
         56:cd:d2:1d:e2:15:40:ef:47:1a:a5:76:48:88:7b:92:f8:67:
         32:84:36:e4:0c:da:c9:55:37:d6:0b:a5:5c:a5:43:0b:03:df:
         f7:f0:e0:87:fd:f6:fb:9d:eb:ae:10:03:26:24:a1:0b:44:ad:
         17:91:e6:6e:56:d5:65:ad:16:5d:5c:5e:0b:88:c3:3b:ae:fd:
         99:76:20:f8:59:8d:7b:f9:e2:18:0b:98:2b:93:95:0d:1e:3c:
         b2:51:e1:8e:ae:37:92:17:ed:0a:99:02:3a:97:d5:dd:56:2a:
         f8:99:f7:00:80:07:1d:21:77:88:fd:31:38:63:5f:9c:7a:96:
         30:af:69:53:6a:a9:fe:e6:a3:77:26:33:51:4f:7f:72:dc:87:
         02:d6:5f:ee:f1:4b:ec:b2:2c:0c:1c:cf:ee:67:38:d8:1f:7e:
         92:2e:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:55:45 2026 by rpki-client