Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          e8g1j6d/y/EdGgeVLWCunfl0/sIBuFW9KQrdBEY7vUA=
Subject key identifier:   FC:3A:D0:01:EB:76:28:E5:71:AE:E3:D2:3B:98:2D:91:1C:17:98:48
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       01A00137FB72F033E2886B2D8C51B1E0C533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 17:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:41 +0000
Files and hashes:         1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
                          2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: YW72zJgjG8zIIJi8tAcpirn7TjfT3D61S6RrX/S3jaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:fb:72:f0:33:e2:88:6b:2d:8c:51:b1:e0:c5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Aug 14 17:00:41 2026 GMT
            Not After : Aug 15 17:00:41 2026 GMT
        Subject: CN=fc3ad001eb7628e571aee3d23b982d911c179848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:44:d3:16:92:da:bf:a4:f4:08:0a:ec:2e:
                    f1:2f:2a:e2:18:b6:71:12:b0:1b:3e:40:4d:d1:69:
                    82:bb:53:7f:45:8c:fd:fc:fb:b8:61:39:a5:05:b7:
                    19:fc:53:77:75:d7:2c:af:4b:67:f0:b7:64:f5:32:
                    1e:3a:10:6e:b8:93:29:08:83:d8:ce:d5:9c:14:bd:
                    8d:35:cd:3b:a4:86:93:a1:23:95:1b:9a:ec:28:31:
                    db:5a:96:90:bb:31:2f:c8:d2:a8:c2:d9:d2:bb:82:
                    c6:af:de:5b:3a:26:71:ba:26:04:c6:a0:a7:d4:f4:
                    83:da:36:05:05:73:a6:01:6b:6d:e5:82:f2:13:be:
                    30:20:dc:65:b7:3f:83:e7:d3:cd:51:95:9f:f4:6d:
                    4e:46:3a:1e:9c:71:d0:87:c9:cc:18:ca:d9:37:ed:
                    a8:5e:58:0d:44:58:6f:20:fa:dc:ce:bb:41:e6:3c:
                    2c:05:a0:6a:43:5a:fe:ce:b8:2e:88:ca:f3:db:95:
                    c7:1c:a0:dd:7b:fa:b0:0b:d2:8d:a8:95:28:4d:11:
                    ca:90:f0:cc:69:25:a0:29:26:aa:3e:75:f4:c1:b0:
                    02:3e:82:90:c8:36:a0:6d:05:e0:23:e8:3e:1c:9c:
                    27:c1:df:74:3b:32:8a:66:3f:e3:d5:da:23:ff:58:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:D0:01:EB:76:28:E5:71:AE:E3:D2:3B:98:2D:91:1C:17:98:48
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c8:cf:8d:6f:a7:43:26:b7:df:62:e9:2f:9e:ad:da:93:75:
         f2:02:e3:a1:7c:f8:50:e5:87:ad:d9:5c:97:7a:29:42:bf:e1:
         ea:f1:2a:3d:91:2d:55:00:db:55:1c:ad:a4:c2:69:18:cd:79:
         be:47:92:2f:2a:d9:01:b3:1f:ef:4c:1c:41:e6:f6:07:1c:46:
         c1:c7:ac:67:17:08:67:c3:ee:c6:4f:75:78:b6:5e:df:7d:bc:
         8f:d3:85:ed:33:34:6d:8d:65:ed:74:59:c6:b0:5f:19:fd:e4:
         a1:4a:34:d9:c0:1c:a6:05:8a:99:e7:6e:6d:92:c5:18:5f:91:
         21:bb:fe:de:05:75:67:4b:9f:02:3d:bc:ad:7f:36:47:97:57:
         22:97:23:48:c7:61:ed:17:d7:d1:96:22:cf:cd:ce:0d:8b:56:
         b9:a6:b0:f4:b8:1c:43:e7:23:07:db:c9:82:fe:e2:d2:b2:bb:
         05:09:fe:cd:05:c8:d3:b3:47:b8:46:24:6b:6e:61:b8:ce:2f:
         db:63:19:96:05:e4:d0:db:5c:0f:50:0d:ca:ef:18:b4:4e:67:
         70:1b:27:87:07:c8:de:ed:64:e0:29:46:a5:d5:d5:37:23:81:
         dc:85:87:1a:8c:db:9e:a2:2e:83:47:6f:d4:e5:86:fd:ac:d1:
         c5:0e:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:58 2026 by rpki-client