Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          kIHaCxnyHSjV5EYeIkTm1/DvddS2UOsw2nlLsbnSpUs=
Subject key identifier:   92:64:3D:37:4C:C4:0C:E9:DA:18:0B:25:F7:BC:7D:51:F5:85:84:4B
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A01F4286FDFA1A981ED22E913D568F0FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1A32
Signing time:             Thu 20 Aug 2026 13:00:48 +0000
Manifest this update:     Thu 20 Aug 2026 13:00:48 +0000
Manifest next update:     Fri 21 Aug 2026 13:00:48 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: AQ775SAnwDmRzkrW0X15kN9hcGYL5C7/wHdHWGNDsPU=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:42:86:fd:fa:1a:98:1e:d2:2e:91:3d:56:8f:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Aug 20 13:00:48 2026 GMT
            Not After : Aug 21 13:00:48 2026 GMT
        Subject: CN=92643d374cc40ce9da180b25f7bc7d51f585844b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:c1:44:91:de:aa:fb:f0:0c:65:5a:38:3c:
                    ab:8e:ec:f0:57:7e:51:04:62:57:c1:89:2e:60:ef:
                    dc:13:39:a1:d6:55:7b:fc:cf:2a:41:55:28:9b:69:
                    4b:a3:9e:94:e7:33:89:69:8b:42:db:82:27:24:c5:
                    16:ac:36:be:ef:14:62:36:89:f0:dc:75:f5:2c:fa:
                    88:ea:41:d3:9d:c4:c1:23:e3:89:be:6b:25:47:2f:
                    81:8e:22:3e:d8:aa:89:86:39:e6:be:e4:90:0b:2e:
                    49:34:33:aa:98:3a:d6:92:6e:76:b0:26:04:7a:dd:
                    22:27:d3:de:a8:13:29:07:57:67:eb:a3:ac:87:67:
                    f2:88:22:09:97:98:96:5a:cb:08:81:35:38:b9:a9:
                    24:93:75:b4:07:aa:3e:fb:89:67:09:83:6a:25:27:
                    f1:6e:ad:97:fd:91:68:5f:da:81:96:b8:96:d0:eb:
                    52:a4:11:2a:3f:80:0a:c9:2e:f2:16:08:40:79:6e:
                    55:a2:68:67:e6:1b:f7:cc:a6:be:a5:57:bc:a1:a6:
                    1e:b4:b0:4f:99:ad:0b:b9:44:29:ae:c2:8b:f6:bb:
                    2f:5f:a3:8a:19:b0:f8:58:eb:5b:f5:bf:aa:25:b3:
                    22:e4:42:f3:eb:58:87:ea:88:9b:93:fe:14:36:32:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:3D:37:4C:C4:0C:E9:DA:18:0B:25:F7:BC:7D:51:F5:85:84:4B
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:ec:47:15:61:cd:c7:79:07:d4:4d:48:30:05:79:52:2a:
         59:f6:9b:0f:f7:a8:53:3d:07:18:9d:0e:65:56:06:2a:74:31:
         4c:4a:98:4c:f1:fd:14:e0:fc:5a:1d:e4:d6:63:2b:e9:ef:f7:
         61:0c:78:da:a7:bc:a1:b4:1d:74:14:42:15:41:7d:5b:b7:b4:
         ed:64:87:8c:81:1c:64:0a:61:5b:b7:33:e0:3b:8d:94:f8:9b:
         e0:c4:6b:40:ef:28:d0:49:d9:d0:68:2d:89:a0:07:d6:24:93:
         dd:fc:13:51:92:7f:93:1c:ab:11:95:74:09:28:60:76:83:f1:
         8d:b6:40:f2:67:c1:f4:9e:1d:3d:6e:d2:b9:93:d6:8a:92:17:
         38:20:de:43:64:41:3b:e9:81:fb:12:b8:14:30:36:c8:71:70:
         95:f3:54:d3:43:34:c4:05:bc:12:ed:12:d9:8c:f0:98:75:38:
         49:10:ec:14:88:7b:42:0f:78:fd:ee:10:2c:7f:9f:26:64:e3:
         a4:20:58:dc:8e:17:4a:ee:b3:8c:d3:7d:e1:16:95:15:0c:4c:
         69:d0:fa:95:95:26:95:b2:7a:2b:a8:e0:49:42:f2:f4:47:4a:
         ea:e2:47:1c:df:79:8b:1c:d5:84:76:35:6c:c6:78:dd:d8:a1:
         d1:6f:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:24:09 2026 by rpki-client