Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File:                     kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier:          LuJBDLwGyHbYduSxsfY075CmQNaD89wM5KMfnKDPFic=
Subject key identifier:   86:A6:E2:A0:EF:20:6F:8C:80:8C:CF:69:E1:BE:E2:A4:6F:BB:88:36
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer:       /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial:       01A002142724987D6048A8EBC14FD4933824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number:          1A11
Signing time:             Fri 14 Aug 2026 21:01:10 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:10 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:10 +0000
Files and hashes:         1: 1-AOMCdmeoYbt2ya7aina0jr4jtY.asa (hash: xTwHqHanvk0kgMpXCUgJVeavuxMbD2EF+e+t7yaNRxM=)
                          2: 3W7usHsAz5z3pRj0N-iDHGm2czc.roa (hash: E4GnjrWRndz3AnBRx+9OaWV9XAb0zCBKRFe07lFMNTM=)
                          3: F_BgJOvocs04aWFuQm0POmDC4qk.asa (hash: 8pzNWyrC83klHScR8mmfAawPECea/FNnp40sU7XiI9U=)
                          4: GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa (hash: 3Lkr3jjmSNfu4xmvpJepQZV62v8KdzELhqGFYD46GB4=)
                          5: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: OkfIh7IG7OdXVEwpLWRCWBz9g4mACyosrSFMls66TXM=)
                          6: m0G5GX11-PLi8Cf5dbRKsch6VxU.roa (hash: B5VOYp4J4pteli5ym2in+54bvDMlgr4itugyDjzngoo=)
                          7: o1nw85DsZ7czict7FbvJ_kQ779I.roa (hash: SMVCZ8WXzySWtmomiDw5Tx85wLb4riJVskzdAhjKnkA=)
                          8: s8RwLaAcYW-FcVFkTHdO592EBJw.roa (hash: 23Vx3ChhQtBmCL55miGjdzYucRN+3e2NsCi7uSICISw=)
                          9: x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa (hash: WjqVws7+vV9QS4+QUh1ff5JcBRwxUgUec5H+AxoP0GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:27:24:98:7d:60:48:a8:eb:c1:4f:d4:93:38:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
        Validity
            Not Before: Aug 14 21:01:10 2026 GMT
            Not After : Aug 15 21:01:10 2026 GMT
        Subject: CN=86a6e2a0ef206f8c808ccf69e1bee2a46fbb8836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:51:dc:83:c8:cc:9a:64:11:73:78:0d:25:
                    c7:db:4e:58:fc:91:83:28:12:b9:19:e6:0e:39:67:
                    3b:62:37:2d:92:59:3c:fa:d1:07:2e:42:a2:f3:4a:
                    d1:00:e8:08:db:72:3c:cf:4e:9a:f3:33:58:f0:8d:
                    2b:35:ce:5f:df:15:a6:b6:19:37:d6:13:93:92:d9:
                    4a:59:fa:b1:fe:99:f8:02:64:7e:7e:f5:76:c0:ac:
                    95:78:74:34:c9:c3:f6:b3:3f:f6:8b:42:4e:fa:7d:
                    b1:84:b1:09:f9:59:98:23:e7:08:7d:2b:d0:64:c2:
                    b8:5d:d9:3e:74:9d:a6:72:20:11:37:92:00:35:9a:
                    50:20:c8:29:77:de:e8:6e:c2:2a:05:50:c5:ab:2d:
                    f0:85:c3:75:1d:fa:92:f1:5c:86:ca:99:95:d3:45:
                    ba:37:87:67:96:14:ae:48:51:ce:48:d6:48:09:af:
                    57:19:36:f8:9c:a3:3b:e1:23:65:61:5a:5f:5e:39:
                    88:e4:da:d5:76:18:05:18:44:75:8d:1e:b8:e3:f2:
                    7a:53:85:dd:2f:5c:12:6d:8b:be:0a:b9:d3:d1:b7:
                    df:9b:54:af:b8:32:ca:7e:99:cd:a8:15:91:06:01:
                    4f:c6:42:53:1f:96:82:9a:4b:cd:2c:0c:58:8d:ea:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A6:E2:A0:EF:20:6F:8C:80:8C:CF:69:E1:BE:E2:A4:6F:BB:88:36
            X509v3 Authority Key Identifier:
                keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:c1:3d:45:60:e6:0e:47:61:b3:7e:ba:fb:91:62:2b:9c:
         a8:18:3b:cd:92:d3:94:95:5b:76:f0:c2:bb:a7:45:be:ea:26:
         86:d5:6a:82:74:ba:5a:25:2e:35:c2:8e:ed:bf:ed:b6:7c:b7:
         44:6f:93:91:65:1f:72:7c:0e:ed:67:d2:8c:25:7c:c8:8a:88:
         1e:bd:8c:6c:81:a8:aa:30:a2:91:60:ab:e8:c2:40:22:b2:7d:
         fb:11:8d:0c:dc:33:66:3e:c3:93:4a:97:2d:70:be:a6:d0:19:
         3c:0f:65:24:69:20:11:14:3b:f4:91:dc:0a:33:97:67:df:f9:
         e0:eb:a3:31:9d:8d:c0:10:68:7f:2b:c2:b7:52:c4:f7:a3:c9:
         75:8d:05:41:5b:ad:7e:36:66:af:c3:9c:b1:d8:9e:ce:c3:5a:
         7a:97:7a:f3:14:0a:ef:66:4d:0e:6f:3e:89:fc:1e:51:85:9f:
         a2:87:33:b4:72:dc:3f:5c:e7:b7:37:18:cf:96:4d:b0:8c:d8:
         0e:5a:70:d4:3f:6a:8c:d2:28:b5:ca:dd:f2:a0:c1:5d:52:d6:
         40:7c:75:9d:4d:61:60:a2:cd:fe:da:97:73:d1:05:9e:9f:88:
         48:a0:8f:24:e4:e6:82:04:b3:a9:15:3f:bd:3e:73:2d:6c:52:
         2b:c2:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:45:38 2026 by rpki-client