Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          2ecPDtyreRhs2MKGGSQytwLog3wa6yLoXuGyB3t4kBU=
Subject key identifier:   72:8D:3B:3D:31:1D:46:C0:DB:D4:3E:F6:70:FA:A5:52:AA:C5:11:35
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       01A0005CDC5D669E77CBE5D736D36FA0BB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          12C1
Signing time:             Fri 14 Aug 2026 13:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:20 +0000
Files and hashes:         1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
                          2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
                          3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: OYr1cEFb0Ff7lkLQby1SKo/4I2wd93X/bXbzh374rxM=)
                          4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:dc:5d:66:9e:77:cb:e5:d7:36:d3:6f:a0:bb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Aug 14 13:01:20 2026 GMT
            Not After : Aug 15 13:01:20 2026 GMT
        Subject: CN=728d3b3d311d46c0dbd43ef670faa552aac51135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4d:b7:c8:06:b0:f0:35:74:28:9e:b6:92:23:
                    25:2d:0d:2b:fa:f7:3e:b6:06:56:4d:c5:65:ec:44:
                    8e:3f:bc:a8:9a:5c:cf:b5:ac:65:47:c5:59:f5:a5:
                    5f:f3:3e:f0:51:4e:ca:ec:61:a5:4e:e2:dc:fa:fe:
                    bb:68:ae:f1:72:76:0c:03:51:fb:17:61:8f:96:bb:
                    b0:b9:b2:23:20:88:b5:13:15:da:50:d4:28:dd:7d:
                    aa:3d:c1:38:b4:15:f6:77:9d:da:24:37:4c:c2:98:
                    4a:d3:62:6f:3a:d8:d2:89:d8:93:da:09:b2:9b:a8:
                    1f:a4:8a:84:53:86:cf:71:89:86:db:9a:99:fb:3d:
                    63:a7:14:4d:11:15:96:73:93:5a:04:32:93:ed:95:
                    7b:a0:ce:af:29:c4:57:11:19:aa:4e:03:fe:a1:60:
                    93:89:4e:47:ae:06:c0:af:ef:91:cc:f9:02:77:79:
                    dc:4f:03:6d:d8:c7:2b:a2:4c:9b:64:99:8d:f0:f1:
                    4d:c2:da:2a:7b:30:3f:82:3b:5e:3f:f7:04:aa:a8:
                    da:02:22:b8:d3:72:2a:3b:68:7e:e0:1d:1b:3e:1a:
                    f2:2a:7e:ec:24:17:e7:c0:43:8b:cb:ac:a8:8e:83:
                    36:e7:fd:55:dd:68:6b:b8:c4:9a:30:b0:ff:62:5e:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:3B:3D:31:1D:46:C0:DB:D4:3E:F6:70:FA:A5:52:AA:C5:11:35
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:62:59:98:81:a6:a1:1d:e3:65:97:84:74:6a:a6:c0:17:d1:
         7c:47:2c:78:60:df:e2:95:b9:1a:68:8f:0d:3a:19:ad:85:7a:
         70:f7:50:2b:12:89:f6:7c:cc:3f:a1:81:91:7e:03:f1:a1:a5:
         58:e8:29:86:d2:2d:08:ff:bf:0c:e4:62:53:9e:4d:08:96:ef:
         59:49:94:de:18:4e:05:6f:64:62:dc:71:ad:b4:4f:a9:b6:fb:
         cc:22:e7:4a:24:9b:01:73:5e:ba:e8:a8:0b:e1:30:8d:e6:8e:
         59:e6:81:83:16:2c:f3:0e:8f:4f:8b:3b:ab:78:95:dd:79:01:
         0e:70:06:32:0d:84:a9:86:ae:ae:60:09:d4:44:f7:f0:51:3d:
         f6:ba:54:43:a0:63:65:2c:66:12:c0:57:e0:0e:ea:3e:fc:5b:
         ac:c8:47:cc:5c:a6:a2:e7:5f:1c:bc:9b:d7:96:94:e8:2e:56:
         14:1e:5c:6b:6e:0d:c0:96:97:c5:27:0c:c2:be:d7:04:25:65:
         fe:b3:b8:4f:73:a7:cf:c7:7a:7c:00:36:0c:70:b4:0d:72:1f:
         9d:26:3a:b9:7e:86:78:17:52:20:98:cc:94:25:44:84:a9:48:
         a4:fc:e8:19:d0:eb:58:2e:cb:17:44:d8:f7:d9:de:b7:c2:41:
         28:9b:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:23 2026 by rpki-client