Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File:                     4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier:          k3UJ1dzo0wS6l5tGlncP6+d9scLPsAyp/NEwxvhXFBU=
Subject key identifier:   BA:18:2A:BF:4A:E5:D7:76:0B:DE:40:3E:C6:6D:84:2C:DE:29:A3:1B
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer:       /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial:       01A0016FA17C0F2AB9EA6F0B5B42348B1F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number:          0A82
Signing time:             Fri 14 Aug 2026 18:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:27 +0000
Files and hashes:         1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: usJL6y6sVkDFguNuT/IPffcAaLhXZW/sJdfmizkIhaw=)
                          2: dhPvX_i1mFOzhmyQ6cgEC3zR_ns.roa (hash: 9n9s5loPBcCb7Ueh7CcxWNEVFKz5nZ6rOXbrQKMlyU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:a1:7c:0f:2a:b9:ea:6f:0b:5b:42:34:8b:1f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
        Validity
            Not Before: Aug 14 18:01:27 2026 GMT
            Not After : Aug 15 18:01:27 2026 GMT
        Subject: CN=ba182abf4ae5d7760bde403ec66d842cde29a31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:92:b2:4a:03:ff:21:bf:b6:46:64:71:65:
                    df:09:af:9e:d4:f8:8d:04:8d:c1:b4:0c:2c:7c:08:
                    dc:2e:ac:cf:91:a0:2f:4d:8c:09:23:c9:9e:4e:db:
                    a7:af:47:01:b9:b4:f9:6d:a0:fe:60:3c:86:51:b5:
                    80:0f:f8:2b:60:70:d3:1a:e3:b8:77:f5:29:45:f7:
                    37:67:e6:1b:13:02:1a:5a:7e:4f:34:69:85:dd:8d:
                    61:a2:b8:db:a5:d6:6f:6c:17:91:0a:4d:1b:af:1f:
                    64:58:90:0c:18:10:02:55:1f:10:62:d2:95:6e:c6:
                    31:68:5d:c0:84:d2:06:8b:6a:3c:c4:66:28:6d:bb:
                    35:3e:13:c2:d9:1b:60:a0:1d:d2:f2:c6:48:f0:5c:
                    a7:40:e7:c8:0d:af:53:c4:53:f8:cd:60:bf:de:91:
                    d0:03:c8:48:e7:4b:e1:a2:73:b0:6e:30:9b:55:48:
                    3a:10:02:6f:1e:ec:e7:34:a3:2a:30:2c:9f:c3:e4:
                    91:a9:00:0c:0a:d5:cc:78:0a:13:cb:e0:29:bf:9c:
                    a8:5f:1f:5e:9f:16:45:de:26:4d:6f:0c:b1:5d:dc:
                    fc:e1:fc:16:4d:e1:23:cd:67:ee:76:39:98:82:ee:
                    06:32:fb:ec:14:d9:3d:ca:8d:ec:ee:af:94:ab:2d:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:18:2A:BF:4A:E5:D7:76:0B:DE:40:3E:C6:6D:84:2C:DE:29:A3:1B
            X509v3 Authority Key Identifier:
                keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:21:52:00:3e:03:97:22:cc:5c:f4:92:04:22:7a:fe:a7:
         0f:27:ea:ff:06:8f:72:56:4c:f7:ec:e0:1e:cb:9f:f8:ce:d6:
         ef:95:c9:10:47:46:a6:a9:0c:82:e9:06:c2:07:77:3e:74:04:
         a1:93:73:f0:70:f0:4d:45:c3:44:a3:bc:bd:22:f4:44:2f:b0:
         8d:29:49:fd:f7:12:e7:e9:d7:7e:18:1c:e5:b3:87:da:db:1e:
         80:45:ce:dd:c5:4c:a5:af:39:8b:51:63:14:48:76:98:e1:1f:
         5a:31:27:22:6a:64:29:10:56:d3:e1:ec:fc:a3:7e:25:b8:63:
         bf:03:82:77:4c:10:c8:3a:1f:7b:e3:cd:b1:b6:cd:eb:dc:3b:
         a0:49:ee:bb:9f:e6:b9:22:8b:c7:8f:1d:ee:93:a5:b0:ae:07:
         fb:a3:87:b6:6e:eb:4b:29:e7:31:23:a5:de:f2:6f:a6:64:16:
         36:49:5c:0f:b1:85:af:10:cb:f0:c4:77:0b:00:fa:c5:0a:5e:
         b1:53:4d:c2:66:72:b8:95:3a:33:35:36:b6:4d:1a:02:34:ca:
         5a:10:a6:42:42:0a:df:19:f4:8c:0a:3f:a2:ec:fd:c0:cb:fc:
         7b:50:2e:5e:9f:62:35:79:b4:c4:fb:c9:4b:4d:79:a1:80:40:
         de:3f:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:07 2026 by rpki-client