Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File:                     4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier:          jvPSBXGh0sMO67zR00CvAHLcNFvfOqMjhhrSyqPW794=
Subject key identifier:   18:FE:28:CE:6C:89:CF:13:E7:55:30:39:6C:0B:CC:19:95:42:25:98
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer:       /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial:       01A000C9EF2F907E66922F6674E61EE7F716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number:          0D1B
Signing time:             Fri 14 Aug 2026 15:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:28 +0000
Files and hashes:         1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: X8/aRQMOeP5cdpRyaFV14oichKlnTA4hLuW81yS8XaA=)
                          2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:ef:2f:90:7e:66:92:2f:66:74:e6:1e:e7:f7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
        Validity
            Not Before: Aug 14 15:00:28 2026 GMT
            Not After : Aug 15 15:00:28 2026 GMT
        Subject: CN=18fe28ce6c89cf13e75530396c0bcc1995422598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:a0:0b:0c:40:69:f7:c4:3e:12:6f:0b:5a:
                    68:6b:93:3e:f8:54:b3:df:fd:7c:57:bc:85:90:54:
                    ad:67:18:a4:2e:ad:6c:1e:b2:fd:75:0a:66:8d:1a:
                    fe:5e:41:9a:80:e6:fc:7d:23:94:c4:1b:62:f9:6e:
                    08:b0:90:6d:49:9d:85:55:a9:8f:eb:c1:95:96:f7:
                    47:c4:8a:51:2b:2c:f4:dc:2d:e3:f2:ca:61:c1:9c:
                    a1:6e:8f:da:9a:03:04:80:c1:c2:ff:91:91:3e:4f:
                    12:70:32:75:99:38:d5:57:f6:ef:2f:ff:6b:64:b3:
                    e0:6f:42:3d:15:0e:2e:21:b6:db:1e:a2:6c:46:21:
                    1a:d6:cc:eb:85:74:e0:15:99:af:67:73:59:d6:02:
                    f1:ae:58:0f:1f:ce:9a:09:e2:1b:93:fc:e2:65:76:
                    e8:4d:2f:55:62:82:e5:00:17:e3:89:c5:48:bf:df:
                    48:d2:12:de:bd:13:09:1a:7e:81:fb:b8:a6:1e:2b:
                    2d:cc:bd:00:85:f9:7e:75:ff:29:5a:d7:0b:88:f1:
                    a3:20:0c:64:bf:03:bf:b7:9d:6a:3f:b6:93:ce:48:
                    4f:cf:6b:66:e6:bc:88:7e:9e:b4:40:0f:41:7a:b3:
                    9a:a4:94:2a:0a:23:db:a2:2b:15:07:e2:be:1d:06:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FE:28:CE:6C:89:CF:13:E7:55:30:39:6C:0B:CC:19:95:42:25:98
            X509v3 Authority Key Identifier:
                keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:dd:11:96:c8:dc:aa:d7:58:a2:9b:75:06:aa:c1:17:83:
         1a:a5:42:04:09:5d:a4:36:26:ef:54:d0:5c:99:62:83:e1:17:
         46:f6:16:26:fd:e2:ec:9a:cc:fa:3c:2b:22:5a:6f:1c:3c:0d:
         da:23:37:45:0d:b3:dd:81:b6:04:de:80:ba:51:72:e5:80:64:
         2e:d6:fa:70:97:6d:e9:bd:dc:f2:b3:b7:7b:3a:e0:af:b4:6a:
         a8:a3:84:ff:ea:32:cc:3f:86:ea:6c:24:a7:cc:52:ee:5a:ec:
         6a:7c:74:1e:be:6b:2a:2b:06:40:1f:56:2b:a0:b7:c8:7e:5e:
         07:7e:4e:c9:f1:01:3e:bc:ee:c8:1a:63:79:a0:2d:f8:84:0c:
         13:67:eb:1e:8c:45:22:7c:c8:45:e8:ee:80:e8:03:63:10:a1:
         54:14:13:78:60:74:e9:91:7b:2b:6f:dc:13:eb:f9:0b:e9:b8:
         bd:72:20:9b:09:ea:f5:16:70:13:c0:86:17:28:0c:b3:40:69:
         04:a2:f7:5f:f3:b3:81:a1:5c:a3:95:b2:0e:bd:70:fe:db:7b:
         fb:69:13:c5:49:1c:49:1b:dc:32:09:51:f5:cb:e7:bf:af:73:
         d7:68:dd:7d:65:ac:b5:2f:30:a8:cc:fe:9c:f9:78:b5:98:a1:
         72:89:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client