Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          kVfcO2SxsFq+jIt7O8X7aBMryHVvoGI2aKcmxUDI3bw=
Subject key identifier:   90:9A:F8:FB:E6:06:14:E5:45:6E:95:AF:84:03:E7:14:B4:22:4F:CA
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       01A00FCFC048D4DC610ED0FE129238171871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          199C
Signing time:             Mon 17 Aug 2026 13:01:08 +0000
Manifest this update:     Mon 17 Aug 2026 13:01:08 +0000
Manifest next update:     Tue 18 Aug 2026 13:01:08 +0000
Files and hashes:         1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
                          2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
                          3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: IFQZaSEhzC8qv6qLj5fQ9jrUoAl0G42jk2BCSUQGVMc=)
                          4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0f:cf:c0:48:d4:dc:61:0e:d0:fe:12:92:38:17:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: Aug 17 13:01:08 2026 GMT
            Not After : Aug 18 13:01:08 2026 GMT
        Subject: CN=909af8fbe60614e5456e95af8403e714b4224fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:c8:60:db:66:be:08:8b:68:73:68:dc:5a:
                    85:ce:5f:59:6d:1e:b2:ae:39:da:ac:cf:c8:62:9a:
                    22:85:2b:9b:8e:8d:29:95:18:62:08:3b:91:d6:dd:
                    2a:b4:ed:29:ce:87:d4:a7:f3:71:5a:82:82:4c:46:
                    75:d2:43:1e:7f:05:9c:21:13:39:bd:37:02:72:ec:
                    b1:ac:94:ba:f1:20:5a:26:8e:a7:09:34:24:a5:fc:
                    95:8e:51:a2:9a:0a:06:b6:6a:61:99:59:e0:fd:2d:
                    e0:5b:81:e0:58:9d:54:8b:5d:7b:fa:e5:86:f0:ca:
                    23:ec:ba:a0:72:03:66:df:c7:6e:f0:b4:b1:73:9f:
                    21:c2:f4:8d:b7:1b:9c:6d:6f:9b:4e:41:26:20:c7:
                    97:da:4f:12:a7:09:9e:22:56:ff:32:24:5e:45:a7:
                    af:7d:51:84:86:6a:3a:cf:cf:6c:bf:38:4e:d7:48:
                    3d:32:8a:1f:60:fb:60:d6:af:72:36:8a:12:6c:14:
                    16:99:bd:1c:e6:fc:04:02:d0:64:ae:f7:f8:fa:90:
                    1b:c0:93:e3:c0:58:83:4a:a1:ac:22:da:0f:3f:02:
                    ce:ff:79:10:aa:41:65:3b:da:f3:f1:c4:5c:08:52:
                    88:4b:d8:a4:00:6b:db:e9:ef:4f:89:11:9e:ec:82:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:F8:FB:E6:06:14:E5:45:6E:95:AF:84:03:E7:14:B4:22:4F:CA
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:a4:a6:38:ac:d3:bc:f5:55:b7:f1:23:95:43:94:4a:90:60:
         c9:52:ed:2a:22:af:77:83:e8:31:3d:a8:e3:5f:42:b0:a6:bb:
         f3:c9:c7:93:27:d3:95:60:c7:1d:80:e5:1d:bd:9f:55:7e:4a:
         ce:1b:4f:1b:dc:37:e0:6f:94:96:78:e9:e8:c6:8c:b6:12:1d:
         ed:45:9e:ba:e5:f9:5d:ff:ce:3b:eb:41:60:2d:d3:8d:e2:c9:
         5f:14:0e:b1:30:16:e5:72:f9:72:db:da:e3:a7:c2:27:4a:50:
         28:78:82:b9:c3:7b:c8:1d:5a:d9:82:97:38:55:14:9d:31:f6:
         22:fe:90:46:bf:3a:e5:cf:cd:dc:32:45:df:b0:d4:4c:aa:09:
         3b:58:d0:fe:b6:ea:c4:dd:e8:62:2f:91:87:25:25:5b:23:42:
         b7:77:38:80:87:3b:1a:fb:58:3d:4d:fe:5d:ee:01:ff:8f:6f:
         42:d4:fc:98:fc:66:48:54:7d:82:7b:99:db:b5:63:d0:fb:79:
         03:c3:f9:a8:a4:9e:dd:0f:f9:00:7e:6e:77:f4:9b:9c:10:2a:
         5a:07:1c:80:4e:9b:2a:4c:0c:b2:91:c7:2f:6b:73:83:67:85:
         85:66:93:03:5e:9c:5e:96:f4:e7:04:51:e0:10:52:cf:b0:49:
         da:17:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:15:57 2026 by rpki-client