Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
File:                     42THc_ePWKQYAxOiJl7eYmpO3o8.mft (raw, json)
Hash identifier:          gxc06ty2/Jej/vAXZn1QwevlxbCxnk6BBdTOYHsXSj8=
Subject key identifier:   57:18:54:66:37:4E:DD:13:B9:92:B4:09:E4:42:4A:22:09:50:94:8B
Authority key identifier: E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F
Certificate issuer:       /CN=e364c773f78f58a4180313a2265ede626a4ede8f
Certificate serial:       01A040BC6E0B8BC0F0E947A947424312CB5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
Manifest number:          0271
Signing time:             Thu 27 Aug 2026 01:01:25 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:25 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:25 +0000
Files and hashes:         1: 42THc_ePWKQYAxOiJl7eYmpO3o8.crl (hash: eyzahU9sycnEGoife6m6J/Qs+msI8PfO4DG1qATRsXY=)
                          2: JEiEOpBmU1uH_8AmrDoyELuwAj0.roa (hash: 8utU4M2KV5mtQMT6I9Tf1TNzyzqi7bmjgO8ePSDyuYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:6e:0b:8b:c0:f0:e9:47:a9:47:42:43:12:cb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e364c773f78f58a4180313a2265ede626a4ede8f
        Validity
            Not Before: Aug 27 01:01:25 2026 GMT
            Not After : Aug 28 01:01:25 2026 GMT
        Subject: CN=57185466374edd13b992b409e4424a220950948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:a4:ed:00:4d:8f:00:47:3c:78:1b:37:a3:
                    39:dd:44:47:6f:08:e7:1b:9c:b3:80:d7:66:aa:96:
                    1e:10:33:2d:b5:39:13:3c:e4:eb:35:25:11:a2:c8:
                    30:3b:c7:91:87:ea:54:a2:9b:20:11:0d:e1:30:89:
                    82:2a:cb:13:49:94:dc:82:7e:06:bf:1b:29:5d:c8:
                    b7:19:43:e8:b5:bf:34:68:34:e1:e0:38:54:b5:4a:
                    ed:64:77:5c:f2:20:f5:6c:1e:27:b3:e2:ff:af:ad:
                    d8:5a:73:ce:af:c1:ae:eb:bc:11:da:c9:0d:2e:14:
                    36:9c:05:15:76:e4:62:f5:c2:07:e9:c1:7f:a4:c6:
                    3a:89:c5:87:d1:3e:5c:be:e9:8f:36:00:fc:ae:d7:
                    3c:34:03:14:8b:b6:f3:d9:8f:17:c1:b5:93:89:8c:
                    a1:b8:1a:39:e2:6c:13:10:fd:97:d4:3e:5d:77:79:
                    e3:ab:75:34:ef:c4:6b:8c:a9:9f:d1:49:b4:89:30:
                    42:5f:42:16:2d:1b:5b:48:81:8e:09:e2:f0:ca:80:
                    9b:f9:cb:20:9a:86:2a:53:c6:a8:ac:db:37:8d:38:
                    0f:b3:eb:19:65:a6:96:96:72:99:ab:33:cc:ec:52:
                    7c:1e:d8:b8:c3:95:bc:0f:7c:f1:d9:d5:01:a1:1d:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:54:66:37:4E:DD:13:B9:92:B4:09:E4:42:4A:22:09:50:94:8B
            X509v3 Authority Key Identifier:
                keyid:E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:15:a0:1c:31:1a:d4:43:93:48:0f:1b:6e:ee:53:3c:a2:7c:
         ff:82:ac:c5:39:00:e7:15:33:1f:a2:af:96:36:5a:af:02:27:
         f5:cd:59:56:6e:f5:f6:ae:d1:dd:5b:77:fb:b9:ec:82:02:ea:
         86:de:46:ae:24:d5:ae:67:51:e1:0e:5a:cf:e6:87:00:4f:a2:
         f0:23:1a:5f:f3:16:85:1f:12:d5:96:d5:e7:bd:6e:5a:07:05:
         fb:ac:57:ff:5d:c9:c7:a0:79:4b:5b:4d:72:d6:0a:3b:51:82:
         b9:af:b9:45:77:68:84:74:2c:c7:9a:40:cf:bf:a4:9a:4c:e7:
         5c:7d:02:df:e4:f9:32:d0:60:10:71:66:79:a4:99:09:bb:b4:
         a4:9e:4e:b0:47:b5:d3:49:a7:18:de:54:48:49:05:5d:b1:4c:
         5f:b2:58:47:60:b1:6b:78:73:80:18:c9:e7:64:9c:d1:6b:41:
         54:d7:cc:8f:0b:e2:45:25:18:6c:0b:4d:6e:d3:01:9a:62:e4:
         7c:89:aa:64:9f:30:98:f7:46:1f:4d:58:69:96:2b:4a:53:59:
         cb:dd:52:1b:70:b3:2e:47:ad:ed:9b:85:aa:8f:33:d0:66:06:
         b7:5e:e9:bc:0e:2c:28:3b:20:ff:29:71:59:e1:48:39:64:fd:
         d0:95:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:31 2026 by rpki-client