Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          dFEVccLdCiIWRdhlA9sqVPhlwRN401STzLn/Kah8xMo=
Subject key identifier:   88:6E:76:99:9E:5E:7A:5F:A9:AC:B4:2F:4D:33:96:D5:01:3F:CB:5F
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       019FDC50768F5AF491A065B5E8853A21708D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          1A13
Signing time:             Fri 07 Aug 2026 13:01:28 +0000
Manifest this update:     Fri 07 Aug 2026 13:01:28 +0000
Manifest next update:     Sat 08 Aug 2026 13:01:28 +0000
Files and hashes:         1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
                          2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: XVfrObP/rZb4e4jJ+iO057xPagn6UiVhcbq+WoqRh0E=)
                          3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
                          4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
                          5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
                          6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
                          7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
                          8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
                          9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
                          10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
                          11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
                          12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:dc:50:76:8f:5a:f4:91:a0:65:b5:e8:85:3a:21:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Aug  7 13:01:28 2026 GMT
            Not After : Aug  8 13:01:28 2026 GMT
        Subject: CN=886e76999e5e7a5fa9acb42f4d3396d5013fcb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:25:aa:53:04:84:be:a2:12:6a:9a:36:0c:
                    e0:37:ac:14:ee:9d:e7:7f:7a:94:61:28:4c:08:d0:
                    c5:18:94:8b:5c:00:7b:13:1b:31:cb:b5:78:63:f3:
                    c8:8f:34:1f:72:e8:ac:1f:5c:90:2e:11:3e:03:b4:
                    bd:40:07:4f:8f:31:3f:44:bf:72:de:f6:c4:7e:b4:
                    82:6b:73:64:a1:63:c8:83:69:c2:34:22:f1:39:fd:
                    35:84:e0:eb:35:0b:6d:3c:89:4f:ad:19:7f:11:e3:
                    7c:2d:86:0b:97:c4:94:56:d1:04:6f:ad:3e:23:dd:
                    a1:03:51:5e:e1:74:42:64:b3:31:42:2d:e0:95:76:
                    3e:22:c6:d8:d7:a8:5e:db:1c:99:3e:19:15:e5:9a:
                    00:18:6f:55:3f:8f:90:38:75:0f:79:9a:55:20:25:
                    51:9b:c1:cd:03:b7:61:f1:ad:4c:62:a7:7b:30:3f:
                    07:0e:bb:c1:c9:32:53:4c:18:bd:66:08:76:fb:61:
                    57:b9:0d:1e:5c:f0:42:66:39:e8:4d:c0:32:a6:66:
                    5d:c7:be:90:be:be:18:93:84:a1:9e:54:62:e6:92:
                    1d:b0:26:61:f6:2a:12:2d:79:0d:5e:d0:82:1e:a5:
                    55:cb:67:76:12:31:6b:8a:01:9a:58:09:34:3a:c6:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:76:99:9E:5E:7A:5F:A9:AC:B4:2F:4D:33:96:D5:01:3F:CB:5F
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:d9:2a:a9:bc:57:d0:5c:fb:4a:e2:dd:3c:31:08:86:90:
         29:77:2b:fb:b9:c7:de:7b:f7:15:1a:ad:58:be:e7:08:25:e7:
         de:20:42:0b:7b:c4:36:e1:4b:38:c1:86:f0:55:da:cd:41:6a:
         61:cb:ba:62:4d:35:a5:2d:cb:c6:70:19:8a:cd:d8:f4:8b:b0:
         24:84:d4:0a:d8:3b:62:c4:60:e0:f5:d7:67:1f:c7:1e:69:b5:
         0d:ec:9e:8a:88:e6:00:30:92:a5:a7:17:34:e8:87:64:88:3b:
         2e:6c:d8:96:64:ff:32:f1:86:43:9d:b7:d9:71:63:21:f8:01:
         f3:1b:55:fc:1f:5d:b4:af:37:e3:a2:82:cd:ed:00:20:1d:b4:
         83:1c:86:50:1f:31:2e:8f:9a:d6:d8:19:92:37:98:6c:06:04:
         23:92:f0:42:6d:80:24:91:3c:d4:c1:1c:51:32:e4:00:a4:dd:
         49:3d:da:6b:8f:07:80:1c:d2:9f:a5:08:27:58:e4:fe:44:21:
         42:69:75:33:2f:47:97:ab:4d:01:29:19:8d:f5:12:ac:b2:ab:
         1f:3a:07:26:46:d2:ae:6b:7c:51:04:15:dc:9c:f0:b1:75:7c:
         00:43:18:f5:c3:2d:07:3b:c8:71:ca:15:04:01:6b:16:89:03:
         fd:5f:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:26:40 2026 by rpki-client