Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          aUjBDoJXZ3mIeiJf16FSvjAVWeWf18vrCw7Iv+taLrQ=
Subject key identifier:   EE:7D:E9:48:F3:18:89:84:F3:2E:D1:50:25:6C:3E:04:6B:84:D1:20
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       01A002139602F3157A4425C58FFEA4F85037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          0AA0
Signing time:             Fri 14 Aug 2026 21:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:33 +0000
Files and hashes:         1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: PfrugPxIgxro5xvjdbq22ubxXqBJn2FlkEeXFkYwTXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:96:02:f3:15:7a:44:25:c5:8f:fe:a4:f8:50:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Aug 14 21:00:33 2026 GMT
            Not After : Aug 15 21:00:33 2026 GMT
        Subject: CN=ee7de948f3188984f32ed150256c3e046b84d120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:75:cd:da:13:67:91:2c:68:7b:5e:6f:b6:
                    d8:85:9e:16:47:48:d7:c1:92:79:68:47:89:37:76:
                    7e:fc:0f:32:8f:db:30:84:e5:7c:f1:2b:bd:7d:fc:
                    dd:ca:0f:48:71:92:a6:b0:a1:53:24:8c:e8:02:53:
                    c8:32:cd:80:1a:06:89:80:0e:e4:41:93:ba:f0:a2:
                    91:33:ae:a3:f3:70:43:84:ec:a4:ee:fc:7e:d5:69:
                    3c:4c:d2:1c:b7:da:11:29:5d:96:75:d9:7c:64:b5:
                    eb:66:09:76:62:04:ec:26:e3:91:82:0b:34:b6:10:
                    d0:e9:e3:b3:7f:69:0f:9a:f2:21:48:ad:10:a3:a3:
                    84:1a:62:f7:91:1c:83:ca:a8:0e:95:b7:72:77:05:
                    7d:ac:76:a7:60:71:a7:92:7e:f1:b3:5e:ff:db:a5:
                    ba:f2:2e:bb:cf:3b:82:7d:94:e0:b0:9e:5e:2a:bb:
                    54:31:78:c1:be:6b:aa:ee:ff:79:72:7a:7f:c3:bd:
                    0e:fa:88:87:98:2e:e7:28:2a:ee:18:c8:28:cc:c9:
                    aa:28:b3:e0:72:94:5c:ea:74:4c:f6:d9:23:41:9c:
                    40:2d:f7:3f:37:b1:8f:36:28:ed:92:16:12:ff:f1:
                    c6:bf:50:e8:66:46:5f:98:69:b5:e6:89:db:84:46:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7D:E9:48:F3:18:89:84:F3:2E:D1:50:25:6C:3E:04:6B:84:D1:20
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:05:fc:2e:13:a0:b6:8c:23:a0:ac:78:28:1e:0b:9f:2d:51:
         77:4f:8f:9b:bb:b2:64:fb:dc:c3:34:10:dc:23:db:0e:82:6e:
         7c:97:22:84:f8:f0:31:69:60:9b:95:fc:cd:7f:b5:d7:cc:3a:
         11:cb:fe:12:c2:8c:82:f0:c7:79:d5:fa:0a:07:20:3d:56:33:
         bc:ae:f8:34:ef:40:40:b8:98:3b:cc:e1:2e:cc:a1:31:35:21:
         9c:f0:23:f6:d1:81:62:a6:43:01:74:ac:00:6b:0f:53:53:85:
         ab:18:03:8a:ec:b2:a5:3f:19:af:6f:9a:20:dc:49:0e:1b:e3:
         f6:9e:c9:c6:88:6b:64:34:68:ef:53:1a:2a:84:76:bf:d0:f8:
         62:67:0a:55:d2:00:c8:30:c5:74:b6:cd:04:51:52:25:93:90:
         93:b4:14:56:9f:95:ed:74:45:67:94:9c:75:74:ff:03:33:41:
         24:1b:56:66:e8:ad:24:39:97:cd:a9:f6:f1:d7:87:ac:36:3f:
         5e:66:f2:5e:d1:bb:3d:be:ba:1d:c4:61:86:26:66:9c:82:c7:
         a1:57:cb:cc:cb:46:87:89:e0:b7:95:39:a8:7a:b9:54:cb:e9:
         38:fd:5d:97:97:a7:85:3b:ef:1c:43:93:2e:2d:c4:02:4a:65:
         59:42:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:28:08 2026 by rpki-client