Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File:                     Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier:          WpOrIPrMIQABqI9g5GkKhmamBV4SpLU6j97Rf0871sk=
Subject key identifier:   12:F4:CC:05:95:75:19:B8:26:B8:BD:9C:E4:BB:23:17:18:28:00:38
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer:       /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial:       01A024D6937E954FD44D84BBBA8B09430FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number:          1A1E
Signing time:             Fri 21 Aug 2026 15:00:37 +0000
Manifest this update:     Fri 21 Aug 2026 15:00:37 +0000
Manifest next update:     Sat 22 Aug 2026 15:00:37 +0000
Files and hashes:         1: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (hash: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=)
                          2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: Bf0uUGHCS4SrKeHud4b2Xl3oroYiwQY52Yk0jCNcRuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:24:d6:93:7e:95:4f:d4:4d:84:bb:ba:8b:09:43:0f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
        Validity
            Not Before: Aug 21 15:00:37 2026 GMT
            Not After : Aug 22 15:00:37 2026 GMT
        Subject: CN=12f4cc05957519b826b8bd9ce4bb231718280038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:04:eb:79:b5:6d:09:fb:72:69:6b:d8:4a:
                    35:d2:a7:10:d8:12:39:85:7b:fd:63:30:86:ae:50:
                    a4:a3:99:eb:f7:d9:40:9d:60:41:02:70:a8:dd:bc:
                    83:97:bc:60:3d:57:23:49:3f:17:8f:12:5f:bc:20:
                    f8:e3:30:8d:9b:14:12:bf:61:a3:c8:03:c8:ab:7f:
                    b6:41:64:0d:5f:ad:83:20:df:a3:fa:d0:52:e1:f5:
                    16:80:46:b4:01:09:9e:01:ca:62:06:36:1d:7d:e9:
                    72:dc:15:b7:16:20:9c:e4:e3:a3:dc:86:48:95:c1:
                    f9:00:74:cf:83:cc:f6:9e:a5:9f:1b:a0:b6:11:6e:
                    d1:25:f5:89:2e:aa:92:ba:c5:5a:c3:11:00:f3:75:
                    45:de:cb:a6:6b:03:d6:e7:d8:9a:4a:3a:aa:bc:c8:
                    1a:64:5e:28:ef:de:13:96:1b:33:40:dc:17:f3:46:
                    65:f5:6c:8e:71:e9:63:21:67:a0:5f:bf:7c:a1:0e:
                    db:04:c1:43:e8:b2:bc:e3:39:7c:1b:bb:eb:7f:96:
                    a1:69:d7:ca:6e:98:04:cb:2b:4b:17:24:41:69:4e:
                    1a:21:e0:ae:7e:5f:69:4c:53:cd:2a:c1:f2:d6:52:
                    ef:50:13:17:18:7c:8b:fa:55:e4:80:a5:9d:fb:86:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F4:CC:05:95:75:19:B8:26:B8:BD:9C:E4:BB:23:17:18:28:00:38
            X509v3 Authority Key Identifier:
                keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:8c:ec:ad:fe:14:06:98:08:98:11:8f:2b:77:20:d5:fa:
         5a:f2:90:27:8c:48:73:f6:a6:cc:c0:98:9d:85:75:65:5e:fd:
         07:18:78:86:c4:1c:41:30:2f:e4:0a:8b:ab:f7:8c:b2:dd:21:
         c2:ad:4b:e8:13:1b:d2:88:3e:d2:e0:3d:bd:c8:96:ef:f5:9c:
         38:bc:a7:6d:6e:31:d7:78:68:e2:5f:88:b2:26:1a:74:77:64:
         82:52:cb:a4:be:9c:1e:fd:f2:7e:78:b9:c7:07:1f:9c:28:ad:
         4d:0e:92:aa:a6:ec:b7:64:81:c5:a2:08:62:b5:aa:e8:ba:05:
         41:e2:44:9e:d3:e6:f1:47:be:7f:11:fd:9a:ef:99:70:6c:24:
         59:3a:fc:f7:81:22:d6:d9:a1:29:47:b7:03:3d:e4:b8:89:da:
         89:25:39:0d:b7:3a:d4:33:9a:9a:05:ad:2e:7c:ce:07:ed:28:
         57:67:c2:d3:21:42:8a:32:28:dc:14:72:c5:c0:4c:9b:4c:d2:
         75:d2:37:a3:24:21:84:29:9d:01:27:60:b7:5f:8d:eb:2a:09:
         e5:d7:26:a1:da:79:8f:8e:c7:01:46:4c:06:63:77:df:ff:08:
         3c:5a:ce:c2:e8:65:08:23:31:d1:73:46:97:92:1d:b7:66:3a:
         99:41:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:03:56 2026 by rpki-client