Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          2+ark/+IGU0bI0/6VPHLacgltblKXPydldNKi3GAds8=
Subject key identifier:   07:18:10:8A:AE:63:3C:67:B9:78:E5:98:9A:9B:2A:92:13:38:A6:0B
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       01A00093D6528185B2EE0DECF0A4625BC4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          1A43
Signing time:             Fri 14 Aug 2026 14:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:23 +0000
Files and hashes:         1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
                          2: 7aqK71miTASMwabVtsHzpubRHDs.roa (hash: yhSFNY/JY9jo3EQSKl2NTB5DScn6tJax7Q4YrTEPg7Y=)
                          3: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: /UuxXkjsmRBsLwhaqQqDUuTHMizk/E+D45cuY1yM3uM=)
                          4: Ja_i6Nl_QEf84Cv0hTASmUfByDk.roa (hash: PR6zLbEuwP/MFZVDvzI0MjSOqX30Bqi1dOI8MRuCOng=)
                          5: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
                          6: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:d6:52:81:85:b2:ee:0d:ec:f0:a4:62:5b:c4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Aug 14 14:01:23 2026 GMT
            Not After : Aug 15 14:01:23 2026 GMT
        Subject: CN=0718108aae633c67b978e5989a9b2a921338a60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:fc:ba:7a:0b:47:00:4b:bc:8c:69:96:50:
                    41:d4:de:71:30:9c:38:1a:c0:50:71:3b:c5:02:5e:
                    1c:e2:0b:83:80:85:5c:5a:c4:a8:3a:5e:9e:1b:7d:
                    ed:99:61:a7:58:24:14:d9:50:e1:f5:75:6c:f6:20:
                    53:9d:8c:fb:68:ae:77:21:48:f6:26:b9:be:02:69:
                    74:dd:0b:c4:d1:24:f2:52:e7:bd:5f:4a:11:0d:82:
                    72:e6:e6:29:e5:6f:51:f5:57:6c:fe:89:cb:84:9d:
                    98:cc:ea:87:64:05:cf:38:a0:49:24:a4:b2:f7:05:
                    be:44:c3:0b:7d:95:8c:0a:d5:e3:a0:1d:cf:4d:fc:
                    78:48:7a:d9:83:f9:ee:7d:28:61:14:49:f9:ad:b3:
                    e6:66:c4:88:94:57:87:ea:7e:2d:ab:f9:51:dd:0a:
                    ff:a8:76:dd:a8:48:d1:91:d9:89:d4:24:89:5a:fb:
                    06:46:d5:fb:2a:e6:6e:8b:6f:8d:76:c8:07:92:e4:
                    77:fa:78:c2:77:c1:96:50:23:fb:70:14:23:6d:31:
                    c4:d1:73:09:e4:cf:d0:83:41:d8:e6:3e:db:68:59:
                    18:40:87:84:d8:ff:60:04:a9:12:ee:26:01:a0:21:
                    b2:63:ec:41:93:23:05:e6:66:60:95:76:00:51:bd:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:18:10:8A:AE:63:3C:67:B9:78:E5:98:9A:9B:2A:92:13:38:A6:0B
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:dd:f0:4f:4a:5a:c8:d7:1c:66:43:70:e0:f1:92:b1:29:
         95:db:70:9f:2f:6c:fd:a5:d0:6e:8c:af:e4:d6:96:68:de:d3:
         16:e4:f0:0e:c2:67:57:2b:89:06:4e:a9:15:db:73:43:b8:f5:
         b2:4c:34:a2:e8:a9:6b:61:b6:44:6b:c2:ee:c3:2e:58:4a:1b:
         d8:37:82:29:33:53:b7:8a:ca:b0:c5:e1:9b:01:26:e3:38:f4:
         97:d3:8f:3c:fd:65:2d:b6:40:75:fa:58:85:ab:00:bf:7b:35:
         8d:8d:70:c7:b9:83:93:60:57:da:f6:56:b8:0d:0e:09:41:0a:
         b2:c7:82:b2:9d:6d:1e:52:e8:19:55:e8:fc:61:dc:ac:9a:21:
         de:e3:ee:5e:20:e2:47:90:f6:25:00:2c:73:9a:e6:ed:1c:d4:
         c2:bc:92:b1:b6:49:65:0b:8c:70:78:bf:d8:e9:96:c1:8c:15:
         68:e5:e7:4b:6f:d0:d5:e3:21:c3:27:53:df:b4:5e:6f:17:31:
         63:08:86:50:8d:d1:eb:89:14:03:15:52:ef:5b:eb:e4:a0:82:
         16:69:be:ea:2a:11:5e:b2:cf:82:11:fa:b7:b1:eb:fb:ff:f6:
         a9:fb:02:78:c4:95:d0:8c:4c:1d:52:97:11:2b:44:b8:50:a6:
         a8:83:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:34 2026 by rpki-client