Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File:                     gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier:          Ot/DlEygVUPzWoYLO/YWwPSbVR7GJW7TPnQxhq++BbM=
Subject key identifier:   30:6A:F7:93:C9:F0:5F:21:39:1F:6A:3D:B5:81:B6:3D:F5:2C:2F:64
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer:       /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial:       01A026218BB5F5D7BD18FEE7F8932936A920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number:          1A15
Signing time:             Fri 21 Aug 2026 21:02:07 +0000
Manifest this update:     Fri 21 Aug 2026 21:02:07 +0000
Manifest next update:     Sat 22 Aug 2026 21:02:07 +0000
Files and hashes:         1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
                          2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
                          3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: A4F2/ewWVp9Nnz6EkDEUH5JAjaKRcLKgr4gP43H79LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:21:8b:b5:f5:d7:bd:18:fe:e7:f8:93:29:36:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
        Validity
            Not Before: Aug 21 21:02:07 2026 GMT
            Not After : Aug 22 21:02:07 2026 GMT
        Subject: CN=306af793c9f05f21391f6a3db581b63df52c2f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:7e:75:33:74:5e:f8:3e:b2:5b:7d:ac:3f:
                    45:79:67:62:48:27:b6:b6:ab:78:57:99:ac:3b:3c:
                    02:48:a4:69:b2:42:47:4e:0c:e1:02:d1:c2:16:14:
                    05:a1:5e:a5:f6:66:6a:b8:d4:40:48:a8:37:98:dc:
                    f6:ce:39:24:9e:f1:a8:d2:c7:ee:aa:44:6e:ca:d7:
                    cc:f4:91:46:28:77:2a:e7:9f:ce:3e:f1:81:2f:76:
                    3a:b2:20:37:9b:94:6c:d4:8b:c0:fd:0c:36:c3:ac:
                    53:8f:32:75:74:6b:d1:99:26:71:6f:4c:50:90:30:
                    f9:54:ef:37:b3:1f:b4:6c:35:28:30:b7:91:5b:e1:
                    fb:ac:54:62:a0:5c:c9:41:38:96:f8:43:ca:b2:10:
                    45:2a:f7:c0:7d:c4:08:31:86:5a:33:43:bb:98:f3:
                    0f:bc:5f:e6:6e:16:43:b6:2c:67:81:84:3d:60:17:
                    c6:9a:43:e8:e5:97:05:92:a4:f8:04:62:e1:32:b2:
                    30:43:95:6a:00:6b:01:23:b4:41:ca:ae:39:70:4c:
                    20:ed:08:cb:6b:b5:81:29:17:90:e5:7f:c6:4c:24:
                    48:bd:ce:24:da:86:78:b7:08:2e:f2:81:20:8e:44:
                    bd:c3:95:d8:20:e9:d2:51:7a:db:5b:ae:db:11:37:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6A:F7:93:C9:F0:5F:21:39:1F:6A:3D:B5:81:B6:3D:F5:2C:2F:64
            X509v3 Authority Key Identifier:
                keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:d9:b1:c2:52:21:56:e1:f6:8a:2f:7a:93:b0:e1:aa:fe:1a:
         53:cb:d3:65:4a:8a:f9:6f:24:e9:70:b0:58:8f:44:cb:1d:96:
         ff:87:8e:4d:26:17:d8:b8:fd:97:fe:6a:1c:a0:72:00:c1:ef:
         13:1b:0d:66:f8:62:60:78:46:7a:9c:e7:e2:f3:d8:8c:26:ac:
         e5:db:0c:dc:8b:67:30:9e:e0:c0:2c:bd:16:f8:f9:43:4b:53:
         4b:54:a5:ed:83:41:15:62:b3:3e:fd:bb:2e:e4:b5:2f:8a:8e:
         4f:75:6e:a5:da:46:96:14:8b:6c:ba:2b:f1:7d:8e:fc:d3:0f:
         af:f1:7b:14:22:a4:20:78:23:e0:46:ff:52:ff:70:12:be:32:
         8f:cb:a3:21:68:06:5c:46:d5:02:30:8e:cc:4c:56:a4:4d:9e:
         6f:87:f0:5b:66:8e:02:07:95:ee:d6:c2:3f:22:a6:3c:0c:e5:
         e4:73:59:ff:e1:59:eb:40:c2:e9:16:d2:22:c5:fb:d7:2c:be:
         80:72:96:2b:da:a3:c8:93:d1:15:0c:d9:30:36:b9:71:ab:e9:
         1b:98:17:cb:c0:4c:4e:72:51:74:77:93:ef:3b:78:1e:78:f9:
         fa:f9:80:be:3f:c2:6e:83:4b:15:56:85:e3:82:41:6c:20:d3:
         4b:58:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:26:14 2026 by rpki-client