Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          6o40OWcK/SsZwCJY0Z/STZIrWYM05+8E3QjMDt/Eixg=
Subject key identifier:   45:46:FA:1E:70:AD:45:BC:32:1C:A7:80:86:2C:9F:7B:96:67:EB:94
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       01A001A5CC384E4EFA6AB467B2D83C6EB2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0C86
Signing time:             Fri 14 Aug 2026 19:00:37 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:37 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:37 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: EnIFoa45yIm88JD/EZOf5GDhfaRlroIdJMsY4/kMpjs=)
                          2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
                          3: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (hash: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=)
                          4: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:cc:38:4e:4e:fa:6a:b4:67:b2:d8:3c:6e:b2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Aug 14 19:00:37 2026 GMT
            Not After : Aug 15 19:00:37 2026 GMT
        Subject: CN=4546fa1e70ad45bc321ca780862c9f7b9667eb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:a4:82:61:fd:4f:88:7a:2d:53:cf:79:12:
                    62:f7:20:7b:28:09:7f:88:1d:51:c0:66:d0:97:5e:
                    3e:50:97:2e:36:7c:f1:c1:8d:11:02:e5:1f:14:37:
                    39:6c:7e:63:9f:38:1d:da:61:93:bb:65:bd:a3:fc:
                    5f:ec:f3:77:69:3c:50:44:6f:73:f6:6c:6f:76:48:
                    79:0d:87:1b:84:30:bb:9c:0d:bb:35:68:dd:71:3f:
                    31:bd:1e:eb:a6:fb:96:dd:6f:f5:89:84:71:69:29:
                    92:01:46:a2:54:3e:c7:85:8e:3b:56:90:cd:40:c5:
                    5c:a5:0a:bc:9f:ae:39:b0:31:b2:01:97:c8:5e:d7:
                    0e:8c:05:8f:89:9f:27:95:f6:54:68:d8:62:a8:be:
                    81:20:44:13:09:be:a6:f7:66:5b:fd:f4:97:88:e1:
                    9a:1b:3b:04:6e:28:c5:9f:44:a2:46:e9:28:2e:88:
                    ba:78:cc:a9:df:bb:35:b0:83:a3:85:71:ce:1a:1c:
                    43:2e:bf:d0:eb:00:91:1b:fc:9e:53:41:fc:19:f2:
                    6b:91:0f:69:16:6c:06:45:2b:e8:b2:47:a6:5c:4a:
                    77:84:18:e3:4c:87:01:43:a2:a6:10:4d:b6:82:31:
                    ab:76:d1:46:51:9b:11:0e:57:59:69:38:a5:45:61:
                    ab:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:FA:1E:70:AD:45:BC:32:1C:A7:80:86:2C:9F:7B:96:67:EB:94
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6b:e9:51:53:45:47:bc:71:d6:cd:dd:9c:16:1f:4f:ab:3b:
         8a:f2:c9:75:dc:f9:61:1e:fb:6a:f0:7d:88:20:91:d6:e9:a4:
         51:37:0f:92:7f:31:a7:de:dd:e3:9f:54:8b:06:a3:f0:6a:60:
         ef:40:87:41:cd:d4:26:fd:b4:b4:4d:89:94:72:30:1d:79:5b:
         17:5f:21:6a:e5:83:09:a2:ac:81:a6:2a:a1:4c:c6:fe:08:02:
         d8:55:33:da:50:3c:93:78:ab:48:d4:6b:09:43:23:b2:4d:3f:
         11:2f:a9:af:59:0f:fe:04:50:3c:a5:15:da:ba:4b:f7:ec:1d:
         c4:41:86:3d:71:b5:b7:31:59:e6:d1:ba:17:87:01:5d:ab:92:
         8e:c4:d2:8d:ff:90:a6:67:a6:eb:18:c5:38:78:f6:0a:6c:85:
         e4:d9:52:88:a7:1a:d3:c8:1e:86:31:47:50:72:73:28:30:03:
         36:30:2c:72:c7:1b:c4:eb:e9:d2:f5:ee:9e:38:1e:71:9a:78:
         39:38:77:b6:c9:06:9a:34:75:aa:ce:43:00:79:0f:86:1c:e3:
         f2:d6:54:d0:27:3e:e2:19:3a:b5:73:6f:44:f4:95:83:f7:3d:
         b6:e7:31:f6:65:61:c8:1a:98:f0:c3:14:88:cc:e0:22:39:87:
         ac:5e:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:07 2026 by rpki-client