Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
File:                     9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json)
Hash identifier:          eF+JbbEcxmv2uloxbO1G/K+9+s7Q1clf6COB5CplfvU=
Subject key identifier:   C7:60:B9:D0:B7:CE:A7:33:DC:FE:D1:44:43:29:26:C5:1C:20:61:CC
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Certificate issuer:       /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial:       01A0404DE54F303E23EAD02D2D0D99B6EBE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
Manifest number:          0335
Signing time:             Wed 26 Aug 2026 23:00:41 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:41 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:41 +0000
Files and hashes:         1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: 27Palr+/lTgKJiQWv8dbSROfvEDq0sidW0bbfIN/LNo=)
                          2: ZW4Y1TGuNOmvztoKC-GttBiocmk.roa (hash: Pc22uXR6lgCrGRVc00EDjUUEOpeb78zqYMkdzAmaFbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4d:e5:4f:30:3e:23:ea:d0:2d:2d:0d:99:b6:eb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
        Validity
            Not Before: Aug 26 23:00:41 2026 GMT
            Not After : Aug 27 23:00:41 2026 GMT
        Subject: CN=c760b9d0b7cea733dcfed144432926c51c2061cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:e8:42:78:f4:2f:26:32:f5:d9:01:5d:28:
                    5d:42:a7:d0:48:6e:8e:74:32:d8:6e:7b:fd:bb:78:
                    10:84:07:8b:09:83:2c:a9:25:59:b9:59:70:0a:81:
                    32:6a:92:3f:e7:e1:a2:86:bf:fb:2c:09:9f:17:82:
                    20:25:f7:75:72:04:ba:29:d8:09:ab:18:42:49:a6:
                    65:02:fa:55:72:e3:db:d0:5c:b2:7f:93:61:1d:a0:
                    e1:c6:46:4b:bd:17:7a:a7:f0:db:f0:87:e6:a3:2a:
                    36:72:c2:01:a2:6f:60:d6:a4:23:30:3c:b8:09:de:
                    ca:e6:c6:7a:8b:95:62:0b:82:36:56:85:6f:86:91:
                    90:4a:d3:f1:66:2f:45:27:da:79:49:3c:a7:51:eb:
                    98:d2:97:f2:0a:54:b9:7c:e1:70:ff:4f:47:c6:a9:
                    c6:13:ea:26:d6:39:fa:40:c8:2e:e1:3c:93:f8:cd:
                    40:5b:15:04:6b:a8:15:a8:90:53:a1:c4:64:c0:98:
                    d4:ca:ef:ee:79:f4:36:be:5e:9d:09:bd:5a:0c:85:
                    cc:8e:dd:5a:c6:ff:d9:3d:52:22:f8:84:6b:33:2d:
                    90:58:a1:6e:9a:03:d4:2e:65:01:9d:bd:35:b5:3a:
                    2e:89:22:ef:2d:a8:16:13:c4:e1:40:ec:b7:84:a8:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:B9:D0:B7:CE:A7:33:DC:FE:D1:44:43:29:26:C5:1C:20:61:CC
            X509v3 Authority Key Identifier:
                keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:2b:ed:1e:b2:77:a4:e2:71:75:83:8e:eb:65:b0:b7:20:
         6a:a6:f2:c8:3d:17:95:46:86:9c:84:66:fd:8f:74:fa:7a:73:
         b7:5c:d9:55:55:d8:80:90:b0:ba:1f:41:0d:b8:7f:1d:4d:aa:
         fa:24:79:9d:09:49:04:03:00:ef:56:9a:f9:0e:87:46:b4:cf:
         25:fe:07:13:f9:f5:11:3d:96:51:56:88:ff:cb:2a:bf:45:9a:
         0e:4f:3a:c1:d8:45:cf:51:d4:d4:ee:21:fa:65:34:a4:f4:3f:
         21:91:7f:8a:cd:58:10:7a:fa:6d:03:99:38:9f:1a:1f:26:f8:
         73:e4:02:f4:36:a8:aa:3b:81:d2:25:9d:d6:c2:3e:2d:9d:00:
         d4:c9:a6:3d:bc:ec:c6:80:c1:38:17:ca:0a:4f:21:1b:20:ae:
         51:0c:b5:be:9c:5d:4e:fd:d2:68:63:7d:0b:d8:c7:22:27:fb:
         af:61:4f:e1:e5:2a:62:6a:e9:b9:10:ef:35:35:e9:4a:ee:90:
         d3:38:6b:90:58:2e:e1:de:f3:ba:9b:96:55:ad:cf:fb:4c:6d:
         b8:5a:ff:24:e9:ee:a0:4e:09:d8:5b:56:a3:f8:3f:24:51:71:
         e4:54:08:9b:8a:66:18:18:8a:d1:68:62:39:2f:d0:4f:35:1d:
         9b:4d:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:16 2026 by rpki-client