Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          dAK1Q5pNBz87z1xoSVAeuMlJpk7IA+pdChhBz6ceBc8=
Subject key identifier:   51:8F:83:92:F2:2E:BC:BC:DF:13:AC:00:61:83:D5:EF:37:ED:8A:A7
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       01A04084DB468E553AEB7EEC99516E6D4546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0DCE
Signing time:             Thu 27 Aug 2026 00:00:43 +0000
Manifest this update:     Thu 27 Aug 2026 00:00:43 +0000
Manifest next update:     Fri 28 Aug 2026 00:00:43 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: IuH/6c4zGg7EfanSksaFbg3wx5Jh0y28hvszShXhp5M=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:84:db:46:8e:55:3a:eb:7e:ec:99:51:6e:6d:45:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Aug 27 00:00:43 2026 GMT
            Not After : Aug 28 00:00:43 2026 GMT
        Subject: CN=518f8392f22ebcbcdf13ac006183d5ef37ed8aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:fb:f3:b9:f8:86:70:26:2e:f2:01:86:4f:
                    71:e6:c0:06:85:3f:76:c1:fa:7a:cd:03:47:34:4e:
                    d0:0b:e2:b6:ff:e2:4c:5c:5c:d4:17:99:41:2b:e6:
                    0e:91:17:24:8b:95:7c:20:63:57:9a:73:09:9c:5d:
                    2b:3e:4b:48:db:ea:23:b0:4e:3b:f3:ea:01:93:b8:
                    7d:2c:56:5e:58:83:bc:97:be:0e:ce:79:07:ac:6c:
                    4e:10:03:77:fb:59:99:57:9e:d6:12:df:14:ec:be:
                    4b:5d:45:49:97:22:84:55:99:ec:51:b7:72:6f:ba:
                    15:f6:c5:b8:4b:06:c3:a6:0d:4e:dc:80:c0:22:3e:
                    33:2c:03:5c:ca:04:87:ef:1e:73:0f:c7:20:e4:dd:
                    76:0a:3c:f6:48:ba:ba:67:b2:21:83:a1:9a:4d:71:
                    8d:40:90:b2:5b:ea:d6:2c:84:2d:8d:90:02:6b:b2:
                    2e:99:bf:c8:d1:96:27:53:4e:19:68:7c:09:8b:da:
                    46:11:f6:dc:4c:ea:d4:1c:dc:75:41:e9:2e:ec:b1:
                    7d:9d:61:d2:ae:1d:26:8b:df:f5:86:dc:0b:52:64:
                    1a:2e:54:c0:9a:93:76:6b:1a:27:70:1d:e4:36:d3:
                    c9:3a:22:3f:d8:d6:44:d2:98:fd:df:8a:f2:a0:50:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:83:92:F2:2E:BC:BC:DF:13:AC:00:61:83:D5:EF:37:ED:8A:A7
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:19:6d:2f:56:70:b1:7c:65:73:75:4a:1a:5d:65:5e:cf:94:
         9b:9f:f9:e7:2f:6e:d8:5d:1b:72:ba:cf:1f:d1:99:7f:28:5c:
         27:f1:86:d3:f0:a9:9a:f0:5e:27:9b:5d:dd:bd:f3:1a:1f:38:
         7b:0f:8f:37:0d:d7:ea:9d:cc:52:89:49:73:74:e9:1f:71:6e:
         00:30:48:a2:7a:02:08:53:36:f3:62:b8:9e:cd:cd:d9:e7:ad:
         48:1b:99:00:40:00:d1:1c:92:37:6c:e5:a7:1e:14:73:4c:6d:
         48:ad:17:73:02:b6:9d:51:48:64:e9:e2:0b:e0:19:0a:4b:e3:
         c3:44:c1:e4:f1:fd:84:b9:ce:58:84:02:84:69:80:93:04:e9:
         b7:dc:84:84:72:25:11:cf:09:84:29:e3:a1:00:cc:0d:50:62:
         71:9c:f8:5d:12:e9:fa:43:a2:2a:89:99:fd:7c:35:89:f2:19:
         9b:57:1e:89:74:d4:dc:45:8f:3b:c0:f2:4e:25:68:96:90:13:
         4a:5e:20:b3:59:c4:97:8e:67:55:04:86:ca:28:6e:95:f7:03:
         50:59:45:d4:e3:f1:db:68:00:5b:ff:b4:41:16:ff:4e:a0:53:
         3e:e8:b6:8b:f2:5f:74:e5:90:a3:27:62:c0:a2:a0:fe:6a:36:
         b8:07:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:58:45 2026 by rpki-client