Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          j3OiXSQpSEkWKWUTlIB9ohDF18FkBRQ5ThMZuGm6nJI=
Subject key identifier:   E9:E4:F2:AA:BC:07:BA:4F:ED:11:D8:2A:85:BC:31:58:71:AB:3B:9E
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019FF0E9F637FD3F931C1127D75057944AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1A1A
Signing time:             Tue 11 Aug 2026 13:01:32 +0000
Manifest this update:     Tue 11 Aug 2026 13:01:32 +0000
Manifest next update:     Wed 12 Aug 2026 13:01:32 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: t/MUxYLgMDH6TRxzbSpw23S5HY2IDyQyIq5JqRvceT0=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f0:e9:f6:37:fd:3f:93:1c:11:27:d7:50:57:94:4a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Aug 11 13:01:32 2026 GMT
            Not After : Aug 12 13:01:32 2026 GMT
        Subject: CN=e9e4f2aabc07ba4fed11d82a85bc315871ab3b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:b4:d0:f9:9f:84:e1:c4:b3:56:83:37:75:
                    b8:ca:18:75:bc:0e:d5:04:a9:59:9d:1c:1a:78:00:
                    30:7e:57:a4:be:10:aa:55:c0:90:99:0d:e0:cc:21:
                    38:c6:6e:94:a8:b6:1a:e2:3d:75:63:3e:79:86:bf:
                    cb:c2:f3:1b:17:98:6a:5c:28:c0:e7:c3:66:8d:a0:
                    f3:d7:49:c0:49:a5:02:d3:52:1a:27:a0:c7:2d:d6:
                    59:c0:a4:5c:ba:b9:3d:e4:04:5f:c2:e7:23:08:9b:
                    07:8c:e8:79:e5:b3:be:0b:dd:f0:b1:a1:7f:a8:5c:
                    59:b1:cb:63:d3:0e:7c:5a:13:14:b8:11:f9:ce:be:
                    76:94:01:df:a4:13:78:22:99:c4:67:ef:01:12:5a:
                    10:2b:05:dc:ff:78:65:dc:8c:6a:14:01:88:75:5f:
                    0b:c5:b9:65:67:20:6e:da:fc:49:87:19:35:05:9e:
                    bc:80:5b:07:af:51:22:42:f2:e6:b8:f8:b5:2d:d3:
                    c8:fd:3c:0c:6a:c4:1c:66:47:64:ff:62:80:2c:cd:
                    f4:b3:b7:86:b2:50:18:06:d8:c9:64:e5:a1:da:4b:
                    bd:44:9a:49:3d:cf:2f:7e:76:40:78:20:32:d2:93:
                    b1:26:2f:c9:41:ec:57:02:32:fb:3f:21:09:24:f7:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:F2:AA:BC:07:BA:4F:ED:11:D8:2A:85:BC:31:58:71:AB:3B:9E
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:d3:40:bf:bb:6b:8b:d0:2f:3f:26:8c:8d:d5:46:ce:79:
         99:88:2e:ac:b5:ce:73:92:4c:91:cd:a3:68:3c:b6:1a:57:06:
         31:bf:1d:3b:60:13:4d:0a:1d:b0:a8:b8:31:cb:f0:65:8c:d4:
         60:a6:de:41:9d:c1:00:1b:21:13:e1:b7:21:02:23:68:32:ea:
         9b:f5:0e:5d:c4:fd:e8:91:33:1d:ab:1d:b9:4a:fd:c2:73:6c:
         0f:2f:a1:c5:6e:d8:4d:50:08:ae:9b:c1:5c:4f:49:e0:98:fc:
         10:42:95:1d:dc:ad:ee:53:ba:44:8a:b2:ca:28:b2:d0:03:e5:
         e7:6b:f2:13:b0:f1:a8:d0:b0:03:28:96:a8:62:9a:8c:ff:1d:
         87:13:de:72:5b:5f:db:72:b3:11:3a:a9:09:06:78:cf:b5:2c:
         89:77:fd:64:08:e6:80:a0:8c:3a:7d:b0:1f:74:6a:53:a4:03:
         34:f5:4c:91:ce:21:cf:79:db:c7:94:4f:ea:86:95:7b:ed:46:
         13:52:57:b8:90:d3:08:33:e1:ef:c7:db:c2:c7:90:17:6b:da:
         40:4d:38:87:49:07:d8:be:81:63:e9:c0:45:36:cd:13:c0:8c:
         5a:ef:70:d6:fe:c8:7b:69:11:c3:c9:fa:9a:01:f4:40:18:af:
         68:3b:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 21:06:21 2026 by rpki-client