Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
File:                     jZxuhD_-fzS5XToM1y3Uq7abpCU.mft (raw, json)
Hash identifier:          dpAygQtqbiW3E2CRCP5WwuMMYMkSlDHP/FxEeu+6z4Y=
Subject key identifier:   DB:D0:EA:92:B4:37:15:8B:50:BD:03:17:77:D8:22:71:B5:8D:CE:C9
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Certificate issuer:       /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial:       01A020553A9EAF66C189221D2A790B9E3E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
Manifest number:          8A
Signing time:             Thu 20 Aug 2026 18:00:51 +0000
Manifest this update:     Thu 20 Aug 2026 18:00:51 +0000
Manifest next update:     Fri 21 Aug 2026 18:00:51 +0000
Files and hashes:         1: 5obrous7XUZitja1_hFFYlNQZ7k.roa (hash: NfULfmjDL7GL5S7q3lxZzNVHHsHI3SMrW1ODtOA3XQY=)
                          2: HYe7sVkhcA0-XfmeqjiB4IGETrY.roa (hash: wE+9P2a3reoKHkptwHKo9c9l79kAKhyB8j8AYkmyO3U=)
                          3: YFjZ7PDdgCtA2pIj93N3qBt_WLk.roa (hash: N4WC8IbaKS6Y1uAtos17ccb/a4w6H5ZTAuoZB9Rb3vg=)
                          4: ajFaZwTIdu3W6qUXInD2ZebB8Ko.roa (hash: WWyrqyz1eCJbRVCKQIKHhhIgeU4jmP2rAh23Pg0mu/Q=)
                          5: jZxuhD_-fzS5XToM1y3Uq7abpCU.crl (hash: eYQ7WzU59phcshzlfGSvaHaYa45kWFqE/s0GDJtLBBw=)
                          6: x86CTom7AXVfPVrzqqXjbrUQURY.roa (hash: VtlBuK8OxKd67U/IaQcXt0yJ5PAebcLvZF4N1BHaydo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:55:3a:9e:af:66:c1:89:22:1d:2a:79:0b:9e:3e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
        Validity
            Not Before: Aug 20 18:00:51 2026 GMT
            Not After : Aug 21 18:00:51 2026 GMT
        Subject: CN=dbd0ea92b437158b50bd031777d82271b58dcec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:61:b1:b3:c9:46:70:7d:7f:96:4d:38:52:
                    e8:6b:9c:c6:cd:74:7f:ee:2a:c2:74:ad:35:fc:4a:
                    82:04:4f:ec:7f:75:fe:08:fa:24:31:3b:81:40:58:
                    9b:9a:e7:20:15:9a:c2:67:f8:94:34:e6:56:f6:4e:
                    09:a5:c2:da:a0:3a:4c:32:9f:eb:b7:81:e9:28:ff:
                    64:41:03:f7:77:62:e9:7b:fb:ef:32:8a:37:e5:3a:
                    f6:94:e3:a5:ec:d6:af:12:ac:14:ef:c6:cf:f0:b5:
                    d4:c7:c6:51:9b:8e:b8:26:56:f3:8a:2c:a1:3d:a1:
                    90:d1:0b:fb:c9:1f:23:f5:88:fb:7f:a7:8a:d8:71:
                    68:23:9c:6a:b3:ac:42:ef:e7:fa:16:b9:31:01:cb:
                    9f:b9:08:9c:e6:a1:0b:52:4d:e2:0d:7d:55:d1:81:
                    4f:96:a5:b0:0f:cd:f1:73:54:42:b2:a2:ac:85:06:
                    3b:2a:03:dc:b2:06:23:8f:1e:33:0d:03:d0:97:6e:
                    fb:6b:32:b5:67:43:05:73:48:20:38:1a:de:b8:96:
                    54:fa:fd:5a:20:29:a8:10:19:24:c1:f3:79:21:4a:
                    fe:d4:6d:bd:9a:2f:4b:bb:f0:c1:37:47:1b:d2:ff:
                    eb:99:2b:a3:67:64:68:2a:83:ca:3b:69:f2:cd:f7:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:EA:92:B4:37:15:8B:50:BD:03:17:77:D8:22:71:B5:8D:CE:C9
            X509v3 Authority Key Identifier:
                keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:8d:f5:4a:5b:30:24:82:30:4b:9e:7e:33:39:c6:5a:03:
         90:58:1a:01:44:40:84:b3:c2:9f:a5:2b:95:df:e2:25:d8:94:
         2e:a5:c7:54:64:86:eb:d3:c2:d0:3a:d9:5e:3b:de:59:8d:c6:
         fa:48:78:4b:2b:97:93:96:18:24:9c:a2:9a:14:45:4d:e0:53:
         e4:d2:8a:23:3b:51:3c:4a:94:1c:d0:f8:dd:01:44:e1:c0:ed:
         01:66:5b:99:a0:b4:45:81:2a:bf:a8:f3:01:0b:a1:9f:45:bf:
         43:13:c8:ff:35:a2:f2:9e:5b:a5:24:30:cb:5f:ae:83:ff:fc:
         e4:ae:d5:f2:24:3c:77:dc:5b:64:38:70:cd:3c:d6:bb:00:61:
         50:02:3a:22:ad:43:ed:63:44:5e:fa:d9:6b:6d:47:1b:2b:40:
         78:e8:b9:ff:03:b3:f2:c6:13:7e:28:de:db:e3:86:c5:45:6c:
         66:e0:e5:7a:45:d8:ad:bb:fb:4d:42:1b:68:c1:5b:9b:14:3a:
         72:a5:52:e7:16:09:00:7a:c6:e7:97:40:55:2c:43:ea:a5:88:
         db:f1:65:0b:5a:43:4d:8d:e0:73:36:da:42:9b:41:f6:66:15:
         e7:da:f1:bd:62:11:c2:68:80:ce:22:64:37:ae:af:cf:0d:76:
         e5:96:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:49 2026 by rpki-client