Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          dkSSs4nNCBdnxz6MLfJx9MT/YAB5mD9Ur/jO3/XcaYU=
Subject key identifier:   D0:52:D8:A1:35:82:A5:5B:A6:2D:88:3B:25:6D:C4:F1:E5:97:30:08
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       01A000C9F6943662D0230F5F46F6843DC60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          0D32
Signing time:             Fri 14 Aug 2026 15:00:30 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:30 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:30 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: jyWTXMp6UkHVcolT8ZsM9eTohO4/iwJYLUe9+ykTS9M=)
                          2: 3oec_TyMXwngpMvuUxwQnKRoElI.roa (hash: TFcbDBit8LDG31OcoB8NyufVnMw0bC4YlIBYjbX5HV4=)
                          3: 834MdZoIilVHj8ITDHKmWhc4LI8.roa (hash: 0joC1jVmieeRq9IYfq18LPrQeRhpWEC9AchkePVGZrA=)
                          4: RkmzIDwv2MgHZyKYScrBn60mQH8.roa (hash: w8dH9EMpt6cAmLFLrxm/+tA+56apr6HKvXBTw5qDHJ0=)
                          5: hEnie4lAKWMfLCKJsCCZKZxiu1g.roa (hash: LVdc2gIDM4zgTqHBAYOGjuQI7H2q3tdcKwkXIssuGwo=)
                          6: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (hash: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=)
                          7: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:f6:94:36:62:d0:23:0f:5f:46:f6:84:3d:c6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Aug 14 15:00:30 2026 GMT
            Not After : Aug 15 15:00:30 2026 GMT
        Subject: CN=d052d8a13582a55ba62d883b256dc4f1e5973008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:ed:7c:54:a3:9c:6a:96:ef:54:ca:e7:6f:
                    44:9e:a2:7e:cd:75:8e:32:94:85:18:4e:e2:ac:9d:
                    90:a8:10:35:32:48:da:9e:e6:43:a1:29:cb:5b:62:
                    28:1b:5c:59:0b:f1:aa:38:61:04:84:09:f6:10:35:
                    4f:ea:a4:0c:31:d4:51:a8:28:83:20:23:62:d9:63:
                    9d:12:b4:30:f9:29:f6:cf:26:f3:93:51:21:e5:5d:
                    ce:13:b0:30:5e:e6:af:0e:33:9a:40:3d:95:10:29:
                    e9:d8:e8:11:23:06:ed:c1:eb:d5:f2:72:ee:31:aa:
                    f6:c8:9f:b9:3e:63:72:52:99:08:d8:4c:b3:ff:65:
                    4b:a0:f7:b1:90:e8:30:9e:13:ac:b8:e6:9a:38:49:
                    86:4e:0a:dc:21:77:a7:40:38:44:23:24:d3:8b:6b:
                    38:ba:86:e9:b4:4d:af:f3:1b:82:d1:73:2f:ff:d1:
                    cb:4e:83:04:99:b5:25:0a:4a:77:7c:e7:8c:6d:6a:
                    73:a5:a8:75:70:69:9b:99:fa:2a:7c:d6:4e:0d:11:
                    cb:dd:98:52:27:21:ed:7d:e2:4c:ed:79:97:9e:c1:
                    64:a2:2f:71:37:69:7f:44:ea:35:ff:47:ca:27:e9:
                    f2:bd:85:3f:a5:fe:fa:25:ff:f1:04:2b:22:74:f8:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:52:D8:A1:35:82:A5:5B:A6:2D:88:3B:25:6D:C4:F1:E5:97:30:08
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:a3:55:c8:aa:34:86:c9:e6:4c:1f:5c:70:c5:bc:02:6f:
         a3:5a:d3:06:63:d1:cb:81:d1:e7:cc:72:7f:de:10:38:c3:6c:
         12:e2:02:81:4f:69:a9:04:a8:f8:9b:72:30:94:45:80:90:73:
         05:2d:70:f5:ad:1d:66:c6:69:df:7a:ed:e1:4a:53:27:02:cc:
         35:69:3f:41:b1:07:34:cf:bc:42:e1:01:b9:ae:8d:9e:57:b3:
         37:a5:14:48:42:72:d4:a0:94:43:45:fd:42:80:84:28:4d:eb:
         8f:35:e1:de:5e:48:02:3c:4b:15:9a:33:54:19:40:88:58:a3:
         16:43:48:77:5e:a0:d0:dc:ee:47:ce:7f:ef:09:85:07:55:51:
         34:c2:a8:e3:de:19:89:51:53:fd:99:4a:4c:22:75:65:48:a2:
         f5:72:98:22:66:df:b7:0b:47:91:20:d7:e8:fd:1d:ce:4e:f2:
         f6:46:65:0c:ec:fe:a8:8f:49:11:d7:87:3c:df:e1:0b:ca:45:
         4f:c5:e5:77:c0:41:81:16:21:4e:4d:7a:9f:fa:b4:a6:ed:f8:
         4a:67:d3:b5:c5:f4:ef:26:12:7a:42:34:6f:fa:0e:7c:78:ce:
         31:e3:5f:36:17:6d:c0:fd:49:38:4e:f0:bc:06:1b:19:a0:f9:
         8a:0d:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:20 2026 by rpki-client