Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File:                     8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier:          vvAOs/WVNwXBq3cdGK2M/71B9eBP+fgambQtrqifTSA=
Subject key identifier:   5A:BC:EF:AF:7F:C7:92:22:D3:A6:D4:00:04:DB:17:D7:E6:97:30:83
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer:       /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial:       01A0013855C872DB10032BBD0439679F6D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number:          144F
Signing time:             Fri 14 Aug 2026 17:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:04 +0000
Files and hashes:         1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
                          2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: TUR6VaJiE1KWw591aZry0/ay2Jds3PPZr9ZfT0Ysgj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:55:c8:72:db:10:03:2b:bd:04:39:67:9f:6d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
        Validity
            Not Before: Aug 14 17:01:04 2026 GMT
            Not After : Aug 15 17:01:04 2026 GMT
        Subject: CN=5abcefaf7fc79222d3a6d40004db17d7e6973083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:20:62:ec:c6:c4:e2:df:a4:bc:c9:c6:09:
                    82:3d:96:a3:8f:2f:fa:1b:3c:78:24:a0:0e:5c:70:
                    f0:73:a7:b8:68:a6:d2:48:8f:74:df:eb:11:7b:86:
                    eb:d6:69:59:16:94:96:27:4d:c1:fc:d4:82:42:df:
                    39:1b:37:78:09:6b:00:f1:09:9c:d9:6a:9d:ba:f8:
                    39:b5:3f:1c:86:d6:1b:e0:be:f2:fa:30:e0:eb:97:
                    26:6f:ae:65:e4:b5:91:c9:8e:19:3e:25:3c:cb:a8:
                    69:3e:34:fb:bf:f1:4e:84:c6:a1:01:63:2d:29:f8:
                    6a:8a:9e:e2:d8:26:42:18:8d:56:c6:7f:70:48:3c:
                    d5:f2:70:70:3e:d2:3a:f0:da:a7:63:70:d1:ca:ba:
                    92:76:ee:74:22:6e:aa:b1:d7:f7:e0:0d:e4:a6:ca:
                    28:6a:61:50:9f:42:28:d1:c3:80:f4:f2:23:b5:cd:
                    55:f9:6b:f9:31:29:09:68:d4:f2:94:c4:10:34:83:
                    a3:cb:e5:f6:64:22:88:8a:9e:83:9b:51:76:74:41:
                    65:0e:8d:9c:f4:d5:9e:4e:ad:73:99:c6:4e:52:42:
                    86:44:a7:f0:92:2b:c9:66:e2:c5:c6:a7:ed:80:39:
                    6a:ec:ba:68:1e:58:33:a7:28:11:60:6f:b8:18:3f:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:EF:AF:7F:C7:92:22:D3:A6:D4:00:04:DB:17:D7:E6:97:30:83
            X509v3 Authority Key Identifier:
                keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:71:8c:e3:1f:a4:2a:57:21:02:ef:c6:25:3b:f3:58:20:ad:
         5a:7a:96:a4:e7:f9:f1:57:c9:a2:9f:b7:5b:e4:e0:8c:04:f5:
         15:30:44:2e:f2:97:a2:84:54:1f:7c:6d:30:93:86:2e:a6:e4:
         2a:40:c6:61:a7:4c:27:f8:e8:30:19:96:b6:89:aa:33:fb:00:
         d9:a5:10:59:8b:34:ad:ae:5f:9f:c6:99:b6:97:ce:d0:72:3c:
         31:43:41:3d:a7:55:a2:49:ae:f6:a7:fe:4b:69:e4:fb:f9:9c:
         e9:c8:fd:fe:be:de:d7:0f:d0:a8:b1:a7:df:64:a2:c0:cc:b8:
         46:01:eb:6c:a5:d0:48:20:40:e5:3d:3f:93:d5:83:ed:96:56:
         74:04:01:3a:13:95:77:bb:53:33:db:a0:78:f9:a4:73:5b:02:
         fc:77:0e:53:c9:f1:89:33:76:27:35:98:6d:db:12:f4:ff:58:
         88:d0:d7:57:5d:96:4d:e8:87:03:9a:ac:dd:4b:3e:48:e5:c3:
         db:e9:a5:6f:ec:d7:c8:99:10:42:f6:02:70:f3:94:44:26:29:
         77:ef:6c:53:48:d5:c2:23:62:e7:34:20:ba:25:ef:d3:2a:29:
         04:fb:80:13:28:6a:9f:c4:a5:53:43:30:bb:04:30:ad:f5:8c:
         38:a4:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:30 2026 by rpki-client