Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File:                     U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier:          vsJdTN01R5TDs2vygLHho7ni2IwvT7WgS1CrM/v2AtM=
Subject key identifier:   80:2C:17:F0:67:22:1D:1E:FE:11:4A:DC:7F:77:3E:4D:FD:FF:4B:79
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer:       /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial:       01A0013840967315ACE73ADF50231EDC2251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number:          0E63
Signing time:             Fri 14 Aug 2026 17:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:58 +0000
Files and hashes:         1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: LwTYSTjXqCZjN2ctmIx7/07EX/ptg8/AKx7JcH8mdyE=)
                          2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:40:96:73:15:ac:e7:3a:df:50:23:1e:dc:22:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
        Validity
            Not Before: Aug 14 17:00:58 2026 GMT
            Not After : Aug 15 17:00:58 2026 GMT
        Subject: CN=802c17f067221d1efe114adc7f773e4dfdff4b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:53:7c:53:fc:24:79:8f:08:06:c2:74:85:
                    ed:f0:35:28:b6:6c:51:6f:88:34:bb:62:41:ac:5e:
                    fc:e9:e0:ab:f8:bd:16:29:07:7a:1a:cf:0d:58:88:
                    e3:19:40:23:eb:b3:e3:08:ad:6f:0d:f1:a9:da:30:
                    8e:15:cd:1d:73:37:49:29:a7:9d:a4:06:10:82:89:
                    9d:34:5f:7a:39:49:d8:52:2c:01:2d:24:36:02:eb:
                    68:e8:23:71:55:20:14:b4:9b:9c:dd:fe:88:ab:72:
                    47:b9:b5:b2:b0:4c:8b:71:45:b1:16:02:0c:09:a0:
                    78:b0:19:69:03:6b:da:88:fc:0f:54:54:d8:e7:9f:
                    4c:1c:01:51:30:de:ce:75:f5:77:39:4d:36:98:96:
                    14:e5:fe:8e:a0:b0:9c:78:08:db:eb:ec:ba:c2:56:
                    23:89:9c:fc:6c:59:2f:2c:db:44:3b:ed:61:18:29:
                    24:f5:60:fa:cf:68:95:42:cb:fc:40:91:f5:23:c4:
                    7b:b2:43:fe:94:d7:c1:33:b7:56:de:3e:04:f1:6f:
                    1c:db:71:5a:94:11:57:dd:3e:7e:1f:2f:f4:f3:6d:
                    18:87:03:48:de:1d:70:3c:07:75:15:dd:a7:e4:7b:
                    60:5e:0e:85:93:0d:05:2a:6c:0e:28:39:62:2c:0e:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:17:F0:67:22:1D:1E:FE:11:4A:DC:7F:77:3E:4D:FD:FF:4B:79
            X509v3 Authority Key Identifier:
                keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:6a:8d:1b:86:31:cb:62:ad:c7:1f:84:bb:16:84:89:ee:
         db:12:04:d2:5f:b5:72:33:75:09:2e:8b:b7:b1:95:25:5f:ab:
         42:89:dd:11:27:38:45:67:2a:4c:2f:cd:53:83:4e:59:ec:58:
         ad:43:f0:e9:ad:c5:60:64:87:6e:b0:23:bc:81:2d:b3:de:fd:
         8f:f8:ec:c2:0c:c6:d3:ce:9e:b3:b3:4c:b6:28:33:f5:1a:52:
         72:12:49:01:f2:f9:27:38:f9:f2:39:f8:f1:d2:ea:dc:d4:70:
         86:f2:12:29:56:06:c3:fc:68:f6:aa:b0:0b:b6:b8:8b:a1:30:
         83:97:c2:6f:ac:a0:b4:21:56:2d:00:ad:ea:5f:7e:50:82:8b:
         e5:b7:ad:4b:bc:74:41:fd:29:b6:e5:1a:ca:fd:75:0d:5a:23:
         0a:e7:70:16:02:e4:4e:38:71:ad:89:62:a0:02:fb:ab:0a:29:
         0b:9d:7f:94:3a:63:4a:6d:98:d2:e5:a5:dc:d5:3f:95:10:6b:
         a4:92:5c:d0:d3:c8:81:df:7e:0d:a6:c3:30:30:b4:c3:a6:1f:
         fc:29:9f:d9:32:68:d4:47:e7:5d:77:17:bf:b0:a8:66:d9:67:
         cf:89:cc:10:61:d9:2c:77:b2:e9:82:d9:36:2c:f2:87:e8:fa:
         a3:d8:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:37 2026 by rpki-client