Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          3N0YzfKQQ6MN4A63Bfd5+po0xXovwGT+pey1PwcO3ag=
Subject key identifier:   18:FE:F1:03:FE:33:2D:4D:02:F0:DC:95:6E:AB:45:34:7D:AF:4D:85
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       01A0016ED85C8F0FD7DA1205F7B160413CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          1476
Signing time:             Fri 14 Aug 2026 18:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:36 +0000
Files and hashes:         1: 44Stl3msveF1YCvCfN2G3HepMdM.roa (hash: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s=)
                          2: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: LVinrD2ZdIyOOvAzNhTlsFSqqn5hM7nJKxyTQ9s1lgg=)
                          3: oOxUVzAK0hDvaSyyxd4ItdCNzlk.roa (hash: z2hGxtDc3xsCMxUAYZ0wzFuiPIpWeNKitXxT4Qhak2E=)
                          4: qWMcoazuJWd0mzovPbjclSWnCpk.roa (hash: nWdd8YlV26SHwkLvSuGYiscACa3svh/Yxd8Z+LoR89Q=)
                          5: r2dMo2_D-Dbh-yqi6VAZ1meJk-s.roa (hash: ICU0J+ujal+UqVKVSbOsudUv0G3UkLSD3WQWpN8VVhQ=)
                          6: tjYT-uHNpnFgFGTdE6itSftZVqY.roa (hash: KHqysYVsduT2z29K9pGLDzRY8wOYildZ8N84ngXiOeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:d8:5c:8f:0f:d7:da:12:05:f7:b1:60:41:3c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Aug 14 18:00:36 2026 GMT
            Not After : Aug 15 18:00:36 2026 GMT
        Subject: CN=18fef103fe332d4d02f0dc956eab45347daf4d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:91:65:fc:19:0a:04:7c:2d:0d:f2:12:46:
                    52:27:a1:d5:e9:3d:f0:5c:51:08:f8:d8:96:62:48:
                    68:ef:b4:7d:15:36:ca:34:fb:fa:5b:57:8c:69:4d:
                    c2:5a:f6:c9:69:d8:10:71:0a:af:08:3b:f6:1a:7a:
                    15:86:b7:f2:01:d5:29:89:2c:e3:4d:b9:61:4c:8c:
                    db:cb:99:68:b7:f7:fc:f2:11:33:4b:63:d7:ce:4b:
                    a3:ae:be:00:83:fc:f2:d1:85:df:de:1a:9e:3a:2c:
                    fd:e2:c9:d7:bb:6b:50:5e:fb:ff:fe:70:dd:3f:df:
                    b0:0f:ce:88:36:e2:3e:dc:56:08:8b:60:d0:7a:d5:
                    63:9e:b4:2d:7e:b8:12:d4:81:9d:44:0e:c2:af:ac:
                    16:ef:d3:4b:1d:2a:c1:c5:dc:4d:14:25:19:be:c4:
                    f7:86:7e:a7:d9:fa:04:8c:91:e7:62:41:04:af:b4:
                    15:8c:62:06:fb:a8:db:ec:45:2c:cf:c7:9e:ee:89:
                    6b:21:3e:c3:bd:05:26:bf:1d:68:3a:6c:36:90:a5:
                    ce:20:ee:d2:96:11:e3:9d:a9:9f:56:7c:69:80:73:
                    65:ad:12:21:d3:7a:58:ad:01:02:00:5f:24:a0:90:
                    f0:9a:e2:92:4a:69:54:3a:b7:c1:b2:84:57:e9:d4:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FE:F1:03:FE:33:2D:4D:02:F0:DC:95:6E:AB:45:34:7D:AF:4D:85
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:33:04:48:37:68:ed:52:b6:ff:d5:64:bb:06:7b:5e:3f:93:
         88:0d:4f:95:72:31:4f:da:33:ce:5d:9d:ea:c9:17:d9:cd:c5:
         0a:89:ee:7d:5d:73:5f:0d:69:56:67:0f:f0:41:82:7c:89:15:
         6c:53:16:4d:89:b2:1d:14:0b:c3:81:59:35:c1:86:16:06:29:
         13:71:9c:60:ac:d5:5e:e9:8f:7c:3e:27:ac:4b:a4:9d:47:16:
         5e:6e:4b:8e:c4:b8:10:e3:44:79:8c:8f:56:9a:f2:4e:46:7f:
         17:e1:66:99:25:bb:5d:70:7b:19:5c:01:c3:6a:1a:e0:e9:eb:
         8a:9d:d6:e9:6e:b8:d3:ef:9e:f1:22:0f:e5:4a:84:b4:26:af:
         f9:7a:b4:fb:36:92:88:e3:1f:eb:f9:03:f0:f1:f7:9a:3f:05:
         58:ec:0a:c4:22:67:1f:88:ea:46:35:f4:0f:6b:62:f3:04:32:
         48:a4:b1:95:8a:fb:c6:67:45:af:0b:e9:89:5d:0e:55:cf:f5:
         2f:90:d1:22:d3:73:8d:91:b0:38:fc:e6:40:82:e7:70:67:56:
         f9:9b:26:cb:80:a7:a2:24:17:51:1e:00:17:48:4c:b1:fb:80:
         15:a2:94:39:6a:09:bd:5b:00:17:3c:83:50:66:4c:3b:21:1b:
         28:43:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:10:14 2026 by rpki-client