Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          1ycXrw0av7ScCrmeikiWdTC1O3JAKreuqvF3A033iEA=
Subject key identifier:   93:CF:FC:E2:8F:E5:2C:6A:43:C5:2D:73:BB:98:58:65:95:0A:9A:4C
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       01A01FB0ECE2A8982AFC57D38DFDA0BD6408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          1123
Signing time:             Thu 20 Aug 2026 15:01:23 +0000
Manifest this update:     Thu 20 Aug 2026 15:01:23 +0000
Manifest next update:     Fri 21 Aug 2026 15:01:23 +0000
Files and hashes:         1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
                          2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
                          3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: eX79ApeoOyNALe7u5M9u258uZQZyxFxgf/YkhJztTLs=)
                          4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
                          5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:b0:ec:e2:a8:98:2a:fc:57:d3:8d:fd:a0:bd:64:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Aug 20 15:01:23 2026 GMT
            Not After : Aug 21 15:01:23 2026 GMT
        Subject: CN=93cffce28fe52c6a43c52d73bb985865950a9a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:4c:83:7a:63:ef:28:03:55:71:d2:aa:91:
                    28:12:7f:22:50:7f:c6:2d:8c:a0:e5:73:a0:13:43:
                    61:96:1c:d9:a2:5e:3b:db:4f:80:53:a7:ea:6f:d5:
                    a7:e3:de:d1:2a:ef:53:73:ba:04:7f:55:1c:8d:82:
                    f2:95:dd:52:7c:1c:ef:2f:d9:a3:4b:41:aa:3f:98:
                    3c:d1:71:b1:4e:c4:6b:f4:82:1c:65:29:59:c3:0a:
                    1c:93:84:67:22:7e:80:6a:0c:62:ee:54:71:0e:f4:
                    9b:cc:02:07:39:a8:4d:b4:9f:ef:8d:87:f2:21:bb:
                    d0:d8:8f:36:03:40:ac:bf:32:7e:08:c4:34:f6:8c:
                    93:42:11:e6:5e:43:81:72:6b:1a:e0:7b:a2:0b:ec:
                    e9:20:93:81:cb:9f:a8:21:ed:4f:c8:21:62:0b:cb:
                    e9:dc:01:58:19:e5:8c:b2:d5:a9:9b:68:be:1a:42:
                    a8:31:fc:1f:11:60:52:08:f0:f3:ec:1d:9d:8a:4a:
                    46:19:5e:62:8d:b1:3c:7c:50:a9:21:4c:5e:bc:d1:
                    bd:72:25:66:8a:55:5b:ee:dc:52:43:69:c2:c1:37:
                    2e:a2:16:39:22:eb:52:9c:79:b8:57:28:cb:40:c7:
                    80:80:29:4c:5a:f3:03:97:c3:3b:dc:7e:06:37:02:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CF:FC:E2:8F:E5:2C:6A:43:C5:2D:73:BB:98:58:65:95:0A:9A:4C
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:a6:38:bf:90:8b:b5:be:da:27:37:62:cd:4f:7a:35:14:
         32:86:e7:07:43:81:3e:0d:95:cd:b2:5b:a0:62:9e:89:74:66:
         bc:2d:f2:0a:f0:05:13:73:94:8c:d0:f7:9a:38:4c:4f:98:24:
         14:d6:53:89:11:8d:54:5e:57:a7:e6:9d:f0:dc:a4:7d:d8:91:
         41:3b:32:dd:eb:fc:ac:b2:4c:b9:9c:49:d2:ca:d4:95:63:99:
         9b:eb:fc:e9:a6:83:8d:c8:92:90:65:47:f8:8a:85:d8:f2:db:
         cf:90:9e:6a:db:39:da:92:ac:d4:93:f0:82:f6:dc:e9:2e:24:
         90:fc:40:de:5f:fd:22:a0:8c:da:84:17:25:62:28:b3:44:b6:
         8e:07:8d:76:11:55:8d:f1:54:d4:97:82:3f:e9:8b:17:ff:65:
         0c:59:f7:98:9c:c8:30:24:74:b7:d7:b2:06:6f:e1:12:dd:db:
         c8:14:a1:4a:db:43:56:f1:a2:a3:d4:07:38:4a:ab:51:bf:6b:
         db:88:58:c3:2f:74:e6:75:e9:83:df:22:98:d2:ae:67:9b:a4:
         96:2b:e2:34:ea:86:68:41:58:bd:64:1e:42:79:12:31:18:50:
         ab:2d:a2:6d:fd:25:98:28:ad:4c:b2:4e:4f:ff:65:cd:22:6c:
         04:27:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:10 2026 by rpki-client