Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File:                     1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier:          fvcCO8RyKY4afbtDGSljdmi4D4Enn9SZzQfatnC228o=
Subject key identifier:   7D:0E:35:CC:A2:A6:8A:07:58:4C:6A:23:AE:2D:2B:88:3F:DC:B0:EE
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer:       /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial:       01A001DC937D2FBA33EA00AAFB4B102A8873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:00:27 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:27 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:27 +0000
Files and hashes:         1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: l8GDu8+NVjkCZKeWPJJIl949rMW+GaMeDiJzK4l1aTM=)
                          2: A0zEfLP6aje6siYVgtOIFTUv-gA.roa (hash: U3yH+f7j1agPNZjyy4FkXU1kfVyaRAeAIT0ypJqPwSA=)
                          3: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:93:7d:2f:ba:33:ea:00:aa:fb:4b:10:2a:88:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
        Validity
            Not Before: Aug 14 20:00:27 2026 GMT
            Not After : Aug 15 20:00:27 2026 GMT
        Subject: CN=7d0e35cca2a68a07584c6a23ae2d2b883fdcb0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:ec:a1:d0:fb:f5:ac:be:c2:9d:f3:25:ac:
                    8f:41:e5:41:d5:3a:9d:dc:fd:e3:60:dc:6b:16:78:
                    a5:d9:6a:c8:c7:6d:31:1d:61:bc:d6:c1:66:dd:07:
                    29:33:60:bf:0c:01:2e:9a:96:39:68:fc:c0:10:72:
                    4c:48:8a:1f:af:55:30:d0:55:e6:90:b4:99:71:c2:
                    f4:f4:2a:8d:fd:12:5e:39:7e:0f:32:dc:d6:d7:a5:
                    a9:53:5f:e1:11:62:c8:14:1e:70:ab:4c:97:b6:f8:
                    f0:22:9f:a4:a0:40:98:90:b8:e8:d6:21:21:12:62:
                    3d:21:4e:44:50:80:72:7e:f0:e6:d2:52:2a:d7:66:
                    0b:d2:0a:e8:53:45:ee:d2:14:69:e2:a5:46:94:b5:
                    fe:69:de:09:fe:f0:9b:04:d3:77:6a:73:20:5b:47:
                    ad:9b:63:fa:22:4e:4a:e4:bc:c2:bd:f2:d4:b4:7f:
                    05:e7:65:69:a6:f5:d7:8c:13:56:c9:33:27:2e:9b:
                    f3:d5:3a:c8:ae:1a:af:01:8f:e0:11:0e:69:fd:26:
                    5f:f6:1e:e5:0d:13:29:5b:69:0a:31:46:37:04:68:
                    bc:9d:1f:b0:08:82:16:1b:d9:f2:83:53:99:bb:c9:
                    5d:6f:ea:41:43:82:e0:19:d6:a3:a4:c0:cc:4d:59:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0E:35:CC:A2:A6:8A:07:58:4C:6A:23:AE:2D:2B:88:3F:DC:B0:EE
            X509v3 Authority Key Identifier:
                keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:90:12:f5:eb:8b:cb:62:d1:ff:0b:6d:7b:70:e1:ed:9d:95:
         1b:40:8b:44:71:c4:ca:06:f4:76:51:77:2d:13:fb:ee:b5:9c:
         09:63:96:bc:df:b4:f1:ab:7c:a0:60:9c:28:1d:2e:ff:b0:40:
         c0:e3:bd:50:f1:1b:7b:a8:c4:1e:a5:56:8c:f4:da:f5:71:7d:
         c2:d0:df:79:61:e0:42:12:c1:e2:e3:da:b9:e5:1d:02:5d:4f:
         e2:84:ff:56:e4:21:42:cf:c9:70:3f:f9:2e:f8:5a:2c:89:47:
         bc:4d:4b:ec:b5:62:a4:be:f1:9b:d0:a3:c6:d4:c3:a6:1c:2a:
         05:a7:cd:be:da:83:16:3b:68:22:6e:9d:e7:7f:18:ae:47:4f:
         d2:5e:bb:4b:57:6c:7c:bb:16:d6:75:88:ab:54:9f:4f:9c:11:
         22:68:74:0e:37:86:b8:51:87:84:13:b0:67:d1:ed:49:f2:a1:
         62:16:4b:0c:9b:11:d8:15:73:07:01:b5:a2:14:0f:f9:4d:a8:
         53:62:e3:9f:dd:8f:f2:ba:19:69:2d:14:cf:4e:38:2a:66:86:
         b4:8e:b1:95:ab:e5:d7:f0:ad:c6:ff:46:72:94:9e:88:ba:e5:
         a9:22:5f:4f:c7:f3:63:f9:f7:31:cf:0e:00:7b:27:77:4b:27:
         36:7e:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:38:46 2026 by rpki-client