Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File:                     j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier:          USb5RTQH54h7RfEXPv6u2o4uk7LzT7EKsEISSx2ocCs=
Subject key identifier:   1D:31:E9:06:95:04:F5:CA:F5:33:0F:CB:DB:F9:DB:3F:45:99:3F:26
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer:       /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial:       019FF3EB00F482ADABE95B9D6B490DD5330D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number:          1A0D
Signing time:             Wed 12 Aug 2026 03:01:32 +0000
Manifest this update:     Wed 12 Aug 2026 03:01:32 +0000
Manifest next update:     Thu 13 Aug 2026 03:01:32 +0000
Files and hashes:         1: GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa (hash: 0oQogmWm+7L8vyOzeRyovxgJ33f02sYon4T+HeiS/Bg=)
                          2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
                          3: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: ciTVTD3WRqSqpVPr62v7kvzNDblwY5qajtcS8zfTZd8=)
                          4: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f3:eb:00:f4:82:ad:ab:e9:5b:9d:6b:49:0d:d5:33:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
        Validity
            Not Before: Aug 12 03:01:32 2026 GMT
            Not After : Aug 13 03:01:32 2026 GMT
        Subject: CN=1d31e9069504f5caf5330fcbdbf9db3f45993f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:ec:3e:1f:46:aa:01:a7:86:cd:d6:20:21:
                    eb:0e:a9:88:98:bb:78:16:1c:cd:93:82:8d:f9:dd:
                    50:39:f7:71:23:b0:cd:0a:d4:ff:b8:0d:f9:a9:16:
                    87:b5:18:25:c2:e7:10:33:12:50:63:c2:8b:42:20:
                    b5:f3:9a:2c:f8:7b:d0:5e:fb:26:d7:ad:db:9f:a8:
                    ca:1d:89:7b:53:cd:c2:e6:54:e0:b6:37:7e:f0:82:
                    31:4f:c1:04:5d:ac:c4:93:d1:7c:aa:98:f5:70:42:
                    3b:d1:7b:06:87:ae:94:56:89:e5:da:50:97:68:c3:
                    b4:d1:89:14:e0:5d:2c:94:6a:ff:26:f8:a5:c3:46:
                    5b:67:81:e3:c9:bd:47:ae:53:58:27:04:45:d1:1a:
                    0d:4e:42:d3:cb:c5:a8:31:7d:c6:22:23:01:6d:6f:
                    30:68:b9:9b:bc:8b:8d:ab:56:7f:0d:ef:9a:32:1c:
                    5a:e0:21:6d:60:7b:81:db:69:07:4e:d4:c4:4e:bc:
                    c6:58:f3:65:02:65:9c:5d:b8:66:2e:47:18:7c:60:
                    11:40:bc:38:53:9c:1c:24:12:a7:55:26:b7:f2:81:
                    be:fa:42:7f:eb:a9:cd:e7:9e:8c:d0:62:74:86:bd:
                    bf:2b:f5:ca:97:3c:12:19:34:77:bf:e8:01:29:24:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:E9:06:95:04:F5:CA:F5:33:0F:CB:DB:F9:DB:3F:45:99:3F:26
            X509v3 Authority Key Identifier:
                keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4f:0f:61:44:98:82:dd:fa:b6:d9:6d:02:84:c7:0f:59:20:
         12:ea:25:3b:0b:0a:d7:ea:89:b3:ed:79:85:fc:93:c4:49:c9:
         3b:01:5a:9e:98:42:fc:55:f5:6a:9d:55:04:44:b1:0c:54:a7:
         93:2b:b0:ac:89:5d:fb:6f:b8:f8:53:57:f0:5d:11:49:0d:15:
         19:63:13:14:1f:2c:d2:4f:26:dc:9e:d7:21:cf:e7:99:b5:36:
         c7:88:3e:d6:c1:29:5c:ae:be:b3:7e:84:30:49:94:d2:98:f4:
         9a:97:ca:ea:6d:19:1b:04:b1:5c:82:77:2d:3f:7e:87:80:75:
         43:ce:a9:f6:04:98:e8:0d:ec:7f:b2:37:ce:ea:e2:c6:af:00:
         b8:11:c3:db:60:1a:32:bd:e5:03:23:ec:12:b8:ec:ff:6a:ac:
         82:82:eb:30:d2:ea:63:6e:c0:4f:9b:52:35:8b:68:35:2f:00:
         9b:3f:b9:d5:58:fb:e2:a0:d5:54:7d:65:cb:3f:be:cc:6d:15:
         54:b3:34:77:44:e4:1e:a6:a7:39:d8:f2:fa:63:95:64:49:04:
         69:72:72:6e:0f:60:7a:bf:48:ff:ef:c0:3a:3b:6b:c5:1c:d9:
         a0:68:22:bb:0f:e2:38:6a:04:30:ca:28:b5:45:a0:df:69:54:
         90:a6:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 11:55:22 2026 by rpki-client