Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          Q3jEAwAywkeIsVuiL7t1IS5duXooJCM3WQUWau5ieCU=
Subject key identifier:   A2:62:C2:70:67:19:E5:31:3C:29:BE:EB:FE:76:2A:B2:90:EF:BA:81
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       01A001A68C95D17D22C93C566B70B7E44AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          0C34
Signing time:             Fri 14 Aug 2026 19:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:27 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: i5DEmLEzHLv8U9EkddVWH/fF8f9draDQQMgViyXobuk=)
                          2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:8c:95:d1:7d:22:c9:3c:56:6b:70:b7:e4:4a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: Aug 14 19:01:27 2026 GMT
            Not After : Aug 15 19:01:27 2026 GMT
        Subject: CN=a262c2706719e5313c29beebfe762ab290efba81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:2c:b6:7d:ca:21:4c:43:1a:64:35:c7:77:
                    d7:96:71:ed:6c:08:b6:ae:29:66:08:a9:27:ae:d7:
                    59:d7:57:90:39:67:a8:2c:bc:0c:5a:23:bc:7a:11:
                    9a:04:fa:b6:0d:a4:a9:95:75:40:ca:5f:ce:25:10:
                    67:c8:17:ce:09:8a:8c:77:89:6a:a3:47:90:6d:96:
                    44:ae:1d:bd:04:28:34:38:72:be:16:c5:e6:59:b5:
                    e0:bd:d6:0c:3d:e8:9f:ef:84:90:aa:c0:a6:7d:a4:
                    30:1c:ca:86:f9:87:a2:00:4d:e1:cd:fe:d9:63:35:
                    c0:ca:da:3f:ca:31:a7:cb:7d:04:32:12:ab:b0:97:
                    eb:08:7d:8f:55:7a:6c:69:1c:b3:e0:44:7e:5a:41:
                    01:c0:6e:80:ad:af:e9:15:42:b3:f5:de:67:4f:3f:
                    cb:ac:45:8c:3f:2a:98:62:bc:04:04:e0:0c:57:32:
                    50:81:d1:38:32:34:29:34:e2:c1:47:a2:9f:60:b8:
                    09:d8:29:17:48:82:c1:28:76:92:75:7c:92:3e:75:
                    a7:23:54:05:5f:c9:ff:69:2e:49:36:da:11:4c:9b:
                    9b:4f:80:85:f3:8f:de:08:aa:72:4f:3a:23:95:25:
                    ce:8d:8b:9e:c4:ac:4c:bc:0e:9e:cf:86:ed:f8:82:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:62:C2:70:67:19:E5:31:3C:29:BE:EB:FE:76:2A:B2:90:EF:BA:81
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:61:89:7b:70:f4:0b:d6:e8:06:f4:03:27:cf:76:9a:a5:45:
         63:76:9c:70:2e:64:ef:b8:28:ff:18:8e:58:0a:1c:0b:49:48:
         2e:83:44:2c:63:ae:55:84:c2:9b:27:a9:47:20:55:03:0c:11:
         4d:b6:dc:5e:df:31:f2:e0:af:53:df:f7:67:ef:de:43:2d:56:
         b3:22:86:a2:9f:2f:d5:8a:bb:c4:d1:ab:49:3e:d0:62:0d:59:
         91:a9:09:a7:67:85:16:1a:c2:ca:46:6a:ff:71:0b:92:44:c1:
         34:f1:35:db:23:8d:79:d6:07:2d:40:17:c7:68:fc:cd:4d:14:
         ef:b8:fa:8f:8b:91:09:77:39:0e:dd:bc:d3:19:ac:f7:9d:c3:
         6d:da:c4:6b:5e:1a:cb:2a:d4:aa:2e:5e:b2:da:63:1a:99:36:
         56:d2:c8:1b:99:78:89:9e:ad:ee:05:8f:fe:5a:d8:ed:c2:8d:
         0d:0e:3a:8e:c4:67:e4:9c:31:dc:20:a5:d8:96:a2:bd:60:fc:
         a6:a3:a6:34:02:aa:d7:35:0b:ff:ca:54:51:33:54:dc:fc:e3:
         31:95:25:8e:d5:25:85:c5:36:10:72:3b:57:48:91:44:ec:ea:
         b8:07:ab:70:28:31:dd:ad:74:87:ae:05:45:22:30:a4:83:d1:
         46:3f:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:21 2026 by rpki-client