Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File:                     kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier:          qp/VYqnB22tKtyTIBH4pyi4QI6sGjhD6b3zRRaM3VKg=
Subject key identifier:   1D:0E:30:E4:92:D2:1F:6F:88:9F:A3:A1:01:CE:F1:BF:B2:26:0B:44
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer:       /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial:       01A0032696245B5A438B738AC96BA20F8B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number:          13D4
Signing time:             Sat 15 Aug 2026 02:00:55 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:55 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:55 +0000
Files and hashes:         1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
                          2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: VXP8Viyi9x6g8bv1XKukEIcaMN0y8XjInlZmVt+2P8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:96:24:5b:5a:43:8b:73:8a:c9:6b:a2:0f:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
        Validity
            Not Before: Aug 15 02:00:55 2026 GMT
            Not After : Aug 16 02:00:55 2026 GMT
        Subject: CN=1d0e30e492d21f6f889fa3a101cef1bfb2260b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:24:2c:24:2c:2d:96:9a:17:e1:e8:20:e6:
                    bb:e9:1e:0c:01:d5:4d:43:a0:a6:69:d3:e1:24:42:
                    9e:68:be:26:c3:c4:7c:d1:f6:e8:bc:83:99:a5:6e:
                    2a:e3:b8:95:f6:4f:14:5b:9e:50:ff:d6:a5:10:a5:
                    5e:c1:b3:e0:4a:25:a4:58:28:11:ae:5f:ad:31:ba:
                    f1:2a:b1:98:f0:14:07:10:a0:ee:04:bb:ab:68:90:
                    4a:60:08:c9:1f:50:be:43:a3:75:7c:71:79:61:8c:
                    85:a1:05:dd:5c:6c:4b:cc:7e:68:62:a1:e6:f5:dd:
                    08:a5:67:6d:70:26:6d:16:4d:38:88:ee:f9:da:94:
                    2d:53:cf:20:b8:53:0c:80:07:ab:ff:03:bd:75:4e:
                    9b:e1:c9:94:ea:51:4e:19:d0:01:f4:cd:00:70:91:
                    90:b5:6c:49:dd:fd:da:a4:8c:44:45:a8:3e:98:7e:
                    0b:09:65:c8:13:a7:44:56:9b:e7:6b:ae:8f:bf:58:
                    d0:8f:c2:4d:23:ed:69:cf:83:7c:6f:59:35:ad:f0:
                    c3:8a:c9:92:31:b0:ba:ba:50:fd:b4:52:4d:e7:65:
                    50:44:5c:a1:07:53:b6:61:91:48:d0:0d:b7:a6:f1:
                    2e:fa:be:83:74:bc:2a:5b:20:08:31:00:55:48:86:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0E:30:E4:92:D2:1F:6F:88:9F:A3:A1:01:CE:F1:BF:B2:26:0B:44
            X509v3 Authority Key Identifier:
                keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f6:8c:0a:24:f8:bc:ab:be:1c:88:0b:01:cd:9c:26:21:d4:
         89:bf:48:40:d7:35:6d:76:98:2d:d8:88:c9:38:d6:f8:83:61:
         27:c9:3e:38:0c:97:46:ce:2a:77:aa:55:e9:16:fb:bb:8d:3f:
         68:bb:73:3e:b8:10:1f:9b:6a:7a:5a:c7:ca:16:c4:08:2c:d9:
         87:b3:80:e9:4c:16:ed:f8:87:da:33:d2:a6:4b:9d:83:7a:34:
         a7:db:0c:f8:0d:71:8c:aa:1c:b4:96:b2:45:70:a5:ab:1e:d2:
         4e:7e:ec:64:e0:47:18:ec:9e:87:ed:fd:8f:02:d7:b4:2e:0d:
         bd:18:91:a7:7b:9f:e7:e0:e2:14:c6:95:4f:7b:66:a0:20:5f:
         58:49:0b:0a:8b:50:eb:da:46:81:3e:61:2e:60:6c:f4:68:15:
         95:f6:89:70:fc:e3:03:4c:b0:e7:c7:e2:e0:ee:88:06:7c:27:
         72:b8:35:36:ac:1d:f3:71:50:a6:5c:da:ba:f3:28:b5:c2:a0:
         a6:08:82:f8:91:a7:2b:ee:6f:69:c9:5c:86:c6:4f:73:a4:40:
         a0:a3:6e:c8:bb:58:cc:8c:1b:ed:8b:2e:d3:9e:2b:a1:66:ba:
         20:9f:11:df:f6:d4:d6:2f:99:64:52:7e:ee:0b:03:9b:15:6f:
         d3:5a:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:35:03 2026 by rpki-client