Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          Qszt/hj6raCZ9BoueHCJrdEtTmyUA6vGXA0HgDLOwnQ=
Subject key identifier:   F5:30:77:F1:73:30:F7:6F:04:5E:DD:26:7B:7F:19:22:30:4A:1C:30
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       01A001A627DC27D55264A9D20C0BA006CC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          1A07
Signing time:             Fri 14 Aug 2026 19:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:01 +0000
Files and hashes:         1: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (hash: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: thyZAN7wX+fQax52WMSsygfIqvZ0d3/kHTuj2wNmojI=)
                          3: _7qWKS1csoWUqUsFNNOiL6451ys.roa (hash: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU=)
                          4: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (hash: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU=)
                          5: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (hash: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:27:dc:27:d5:52:64:a9:d2:0c:0b:a0:06:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Aug 14 19:01:01 2026 GMT
            Not After : Aug 15 19:01:01 2026 GMT
        Subject: CN=f53077f17330f76f045edd267b7f1922304a1c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:8e:04:b4:dc:e8:a5:2b:5d:49:de:5f:49:
                    4c:e0:79:39:db:0f:89:13:04:66:7c:6e:8e:0e:1a:
                    d6:da:e4:58:cf:6d:77:c4:ec:53:88:1d:5c:e5:e7:
                    1a:90:0b:c9:6a:7d:49:05:a0:7c:64:84:04:9b:e2:
                    18:dd:53:25:f8:64:42:27:e6:31:b5:2f:67:bb:5b:
                    ee:67:b9:eb:03:d2:5d:97:d6:59:6d:a7:2c:85:c2:
                    9a:78:ab:31:49:41:a0:5c:13:cf:d8:f9:1b:1f:d0:
                    20:9b:bd:b9:c9:e7:da:73:3c:09:52:c2:d4:55:89:
                    ca:90:5e:97:b3:f4:b7:52:69:04:6e:53:77:15:57:
                    f8:a3:ec:39:0d:c2:9d:bd:dd:a0:8c:73:24:8a:0c:
                    cd:16:d1:c5:32:7a:4d:e0:4b:58:e3:70:89:68:b4:
                    a8:4b:e8:5a:94:bf:24:d9:f8:ef:8f:a8:00:05:18:
                    33:fc:19:71:a3:d1:2c:ef:33:92:38:a4:c6:da:55:
                    5c:df:70:aa:3c:c6:1b:34:2c:cd:a3:3e:9d:84:91:
                    9e:c0:40:bf:0a:69:03:7b:b9:58:8a:bd:cd:e5:dc:
                    a8:b8:1d:39:e9:78:6b:32:3d:e9:15:a9:99:72:82:
                    be:a3:3f:97:2d:7b:b8:2f:a9:9f:91:12:e3:7f:d1:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:77:F1:73:30:F7:6F:04:5E:DD:26:7B:7F:19:22:30:4A:1C:30
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:df:3c:4c:aa:c1:83:e0:2c:8c:ea:c2:17:29:7e:21:65:
         f9:5f:22:6e:86:79:d7:0e:22:9a:b9:96:79:74:ef:82:ba:9f:
         49:29:0d:dd:c2:56:04:b3:ef:23:69:e4:73:42:5f:47:a4:a0:
         d6:49:8f:a6:7a:5c:94:29:44:95:87:9e:b3:8f:78:db:90:ae:
         73:35:ec:c2:67:8b:b1:16:02:5d:69:35:9c:5d:34:f7:e0:66:
         1a:8c:e0:1f:ee:be:c5:82:9e:98:c7:8e:0c:90:75:e9:b7:09:
         b8:0b:03:ee:5f:de:8b:83:17:31:03:6e:3e:0a:b0:76:71:cc:
         7e:66:f2:c9:9c:f0:4a:c9:15:0d:0b:6d:40:f3:0f:1f:6a:b1:
         64:8e:e2:b4:c1:56:89:46:f4:75:ba:2f:cb:9f:0f:dd:6e:e3:
         90:b8:71:c3:fe:c9:d1:4c:b1:02:8c:c8:6d:9e:d7:f5:9f:12:
         9f:c3:22:c0:23:eb:80:1a:e6:b7:57:45:cc:7c:b4:e7:b1:6a:
         19:a0:e1:eb:b3:86:25:13:56:3d:60:52:b7:f5:18:69:97:e3:
         70:5f:30:29:f8:4f:cc:d1:9e:21:34:79:d5:50:78:b5:6e:ab:
         f7:b4:a8:43:a2:e3:8a:6d:81:33:a0:2f:a1:76:3f:f0:f1:4b:
         c7:38:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:32 2026 by rpki-client