Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          va8sDXms1M8UvgVXTBScnnJzn1MdZMV1RxTlwQxgOPM=
Subject key identifier:   E3:26:89:1A:1B:0E:25:08:77:F4:13:C8:1E:21:F7:79:CD:80:56:75
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       01A026C5A219B55D1B88516511799B44BC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          1A15
Signing time:             Sat 22 Aug 2026 00:01:21 +0000
Manifest this update:     Sat 22 Aug 2026 00:01:21 +0000
Manifest next update:     Sun 23 Aug 2026 00:01:21 +0000
Files and hashes:         1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
                          2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
                          3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
                          4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
                          5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: n/IQRxSDuhWd8NbBs7iC0n/YiRYdiiKjTY2I1JCHyj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:c5:a2:19:b5:5d:1b:88:51:65:11:79:9b:44:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Aug 22 00:01:21 2026 GMT
            Not After : Aug 23 00:01:21 2026 GMT
        Subject: CN=e326891a1b0e250877f413c81e21f779cd805675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:4d:93:3c:00:c9:06:34:7d:c9:64:77:65:
                    e3:a9:c7:e5:fa:7c:01:58:b2:c9:71:61:04:45:ac:
                    f6:f1:f0:4e:46:14:16:66:f2:98:29:d0:d3:c7:4a:
                    4f:d8:2d:eb:35:af:55:c2:e8:3f:2c:d9:76:79:43:
                    f9:6c:75:f5:9f:7c:a2:a5:bf:ec:7a:d3:a8:ff:8b:
                    ab:e2:b3:53:3d:00:80:18:bb:61:74:45:9e:19:2c:
                    43:ab:5e:b8:fb:01:a2:0f:98:ed:01:00:c2:9f:f0:
                    3b:b4:bd:b2:6a:32:f0:77:51:4f:b5:04:e4:3f:4a:
                    79:29:d6:07:d1:5f:81:bf:f6:60:57:24:71:d7:38:
                    c9:e2:1a:36:dc:79:d6:03:10:d2:6f:0f:42:d8:bf:
                    fd:39:dc:44:3b:d7:1b:9a:51:af:8b:a6:6f:0f:78:
                    25:bc:64:a5:a9:a2:3f:d9:0d:a0:f7:16:06:4f:1d:
                    ff:f0:54:72:f2:d4:a9:3c:56:fc:f7:94:bb:6f:33:
                    f9:59:bd:4d:fb:cf:1e:89:4c:43:b4:6d:92:06:ac:
                    95:38:7f:36:4d:7f:16:69:a0:73:7b:5f:72:06:ce:
                    8b:de:23:b1:b4:e2:63:ad:ae:c5:fc:bc:5b:4a:a0:
                    03:42:1e:cc:25:b7:60:97:f3:74:a4:98:b2:7e:07:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:89:1A:1B:0E:25:08:77:F4:13:C8:1E:21:F7:79:CD:80:56:75
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:c4:80:8c:3a:f0:9a:60:2c:b5:4a:12:0b:8d:fd:62:e5:
         35:31:cd:f4:60:e1:98:17:04:53:e2:05:99:7b:b0:9a:09:71:
         b8:41:2e:44:5f:cb:7a:85:49:e9:1f:89:5d:fa:35:fb:5a:08:
         8f:9d:9c:35:59:cf:b3:27:13:cd:0c:0a:5f:8d:fa:fc:09:78:
         aa:e3:5f:a5:9a:c1:e6:07:bd:af:c1:31:7b:f3:ab:3f:20:a7:
         dd:fe:b9:37:ab:67:3f:68:3e:64:e4:58:c7:5c:c9:86:1e:17:
         ea:ee:07:47:38:15:fc:fb:86:ee:b9:e1:23:65:f4:41:cd:66:
         8b:45:c3:2d:e4:e5:40:c0:67:43:ee:6b:11:ae:f6:a7:c6:72:
         48:dc:83:5e:87:73:fa:e0:95:2b:c4:24:10:5d:e6:a4:ba:86:
         6c:f3:c2:f3:b9:98:6a:35:bc:82:21:94:b6:9c:cc:3f:86:e7:
         d9:f3:29:45:f6:4c:57:91:a6:e6:11:0a:7f:31:83:21:24:0f:
         7f:0d:02:ec:81:10:da:8f:c0:42:cd:43:11:59:6c:63:df:d1:
         b3:41:c7:eb:1e:6b:e3:7f:8d:7e:67:63:97:40:36:1d:cd:17:
         89:52:67:99:36:a3:ab:eb:1e:34:6e:25:84:7a:33:0f:41:fc:
         02:4a:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:56:29 2026 by rpki-client