Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          tOS5BZ1qN+1qEm/fRGPWLEURcifUUjqlksFbon7EQqw=
Subject key identifier:   14:D4:0E:A0:85:6E:4E:64:6C:81:7C:37:93:74:26:49:63:FE:03:BA
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       01A002B89733356472CA5C5EA594BD3BCAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          1545
Signing time:             Sat 15 Aug 2026 00:00:46 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:46 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:46 +0000
Files and hashes:         1: 6JZ7XwAAQjYcJy-iMu7ApYDu0IE.roa (hash: OgfErWAGIy3L32XMleS4jSHvDJW/cp8NDQpdWGx5uXw=)
                          2: MseO7vestFH8N1df65EU38zBzfs.crl (hash: VPuSXBn0dY3wL7UL4taBPoYSSjCoJcsec357fXOM8RE=)
                          3: bnh9H9MtaO7JJkGv9fB6vzfbRL8.roa (hash: OarhJBM7HcEYsfcrksfUPdeB09DN8UfGjioylIK5c3k=)
                          4: dF9sPCEN_zHoOwfh4IOcs-1yTLs.roa (hash: 3JIrXXGe/T2UAMIBqEouLulWgUj2qDcUjutd+HRZT2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:97:33:35:64:72:ca:5c:5e:a5:94:bd:3b:ca:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Aug 15 00:00:46 2026 GMT
            Not After : Aug 16 00:00:46 2026 GMT
        Subject: CN=14d40ea0856e4e646c817c379374264963fe03ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:53:b7:8c:4b:c1:8c:24:26:7e:a4:53:e7:
                    ea:73:1b:61:89:bb:f4:f6:d4:85:cd:97:28:fb:7d:
                    24:34:73:e0:d2:d0:87:de:dd:72:1e:a7:87:8f:4e:
                    78:7c:f0:d9:50:3e:1d:30:5c:17:6b:26:4e:17:82:
                    db:42:60:f6:66:34:89:71:e2:48:65:92:5c:4d:c1:
                    6d:56:8b:ac:c7:71:c1:de:99:63:5e:04:28:4d:6a:
                    e1:5d:ad:6f:e9:2b:ba:e7:47:fa:bf:ac:87:e8:36:
                    42:9f:0c:10:ac:90:b9:a3:07:96:1e:2c:01:33:ff:
                    70:5e:5a:d7:2f:8e:d0:85:8e:29:0d:33:d8:9a:82:
                    13:e1:a1:5a:e1:e2:50:3a:47:d3:87:27:7d:00:7c:
                    55:2f:19:ec:e4:61:4d:2a:4f:d7:0d:e2:79:c1:52:
                    9b:1c:12:99:61:73:d7:07:db:e5:f8:32:f6:65:50:
                    29:38:d3:18:c5:8a:45:8c:0e:8f:99:50:68:f6:b0:
                    16:10:aa:d6:8c:35:33:fd:eb:78:0f:b8:cc:a1:04:
                    cb:2d:09:ac:98:50:52:75:7f:57:89:a1:09:73:56:
                    7a:48:9e:74:58:e3:f3:c3:d1:be:e2:a4:bb:50:d6:
                    f1:64:ff:6b:e8:89:33:61:ff:a0:10:c9:f3:34:a5:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D4:0E:A0:85:6E:4E:64:6C:81:7C:37:93:74:26:49:63:FE:03:BA
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:c6:68:2f:fa:3a:29:a4:d5:66:5c:3a:2b:9d:e0:49:54:
         66:70:41:34:29:1d:46:a6:68:a1:fe:73:28:72:05:7f:0b:b1:
         2d:cd:5d:92:5c:38:35:a0:af:6b:3a:a2:dc:bd:8d:a5:75:36:
         47:87:13:a3:37:9d:3b:5e:71:cf:35:42:cf:c3:93:a6:96:3b:
         1b:5d:e2:1a:87:40:ae:6b:0c:67:70:94:d9:db:d7:47:c0:ac:
         e6:d0:50:7f:f4:23:5c:a7:dc:9e:0e:53:18:ac:f1:71:dd:ed:
         cc:36:11:51:b4:f8:17:8b:66:2d:fe:32:67:75:8f:32:ce:3d:
         27:d1:07:23:cf:5e:7b:70:16:5d:cf:d9:8e:18:a7:2a:1b:3a:
         f6:81:08:59:32:1c:5a:5b:32:cd:6b:22:57:84:d0:80:33:a3:
         1b:d4:da:90:c8:46:81:25:e8:b3:f2:f2:9d:bf:78:78:22:76:
         6e:02:2f:6f:7b:c5:0f:53:7f:b4:1d:63:a4:cb:27:48:c3:c2:
         34:88:e5:64:9e:63:ee:b7:56:a6:4c:45:a4:45:ae:d8:6d:5c:
         1f:88:1f:8a:a6:14:a2:1c:3f:c2:07:f9:25:be:45:ca:84:98:
         a9:3f:0b:82:57:7a:36:20:51:04:af:c8:8a:bc:53:96:e7:12:
         bd:3e:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:42 2026 by rpki-client