Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File:                     4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier:          WQzvNJuuvGivOmmcSgLG2Ka0+T90wuDcsCBoYFIk9/Y=
Subject key identifier:   F8:C8:11:A3:61:7C:24:75:BB:99:BA:77:53:80:8D:A6:E5:7E:44:B2
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer:       /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial:       01A0035E8A07BF40BF6B71C4901FCC6AB48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number:          1882
Signing time:             Sat 15 Aug 2026 03:02:02 +0000
Manifest this update:     Sat 15 Aug 2026 03:02:02 +0000
Manifest next update:     Sun 16 Aug 2026 03:02:02 +0000
Files and hashes:         1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: VZPQUq7zT6b+KB8OEjK8YPWcMGSSU/ncgH9KlHqpdzQ=)
                          2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:8a:07:bf:40:bf:6b:71:c4:90:1f:cc:6a:b4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
        Validity
            Not Before: Aug 15 03:02:02 2026 GMT
            Not After : Aug 16 03:02:02 2026 GMT
        Subject: CN=f8c811a3617c2475bb99ba7753808da6e57e44b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:fa:c5:9a:c9:8c:e1:72:b2:b3:95:2c:df:
                    ae:b7:b1:a6:bd:a4:83:d0:da:48:89:23:16:4b:ed:
                    f9:b4:e3:7a:36:b8:9a:fb:c8:28:b5:3a:0d:3a:2e:
                    47:47:33:b8:fa:aa:05:61:74:49:de:f7:e0:5b:10:
                    d4:70:30:16:08:19:3d:cf:0a:d1:02:3f:cb:3a:d1:
                    31:80:14:54:90:6f:f0:23:e0:c8:81:61:a3:aa:ad:
                    9b:0f:c1:8d:98:a6:01:bb:e1:57:ad:72:59:d8:74:
                    93:b5:6c:62:51:83:43:72:c0:63:bf:65:5b:8a:ea:
                    a1:c4:08:e2:62:b6:14:99:25:79:47:db:79:64:00:
                    42:cd:9c:67:35:7e:af:03:4e:bd:f6:29:61:79:cd:
                    0c:23:96:d2:c4:24:1e:21:a7:f2:a8:80:4f:e2:cb:
                    87:cc:8f:50:01:5c:5a:48:3e:a9:ad:70:8b:7a:a4:
                    0f:5a:20:20:91:7a:4e:5f:9b:8a:cd:04:62:9d:c2:
                    ac:a7:90:b4:00:8a:95:6d:a4:64:f2:81:fe:b6:a8:
                    e4:fd:4d:7a:09:7b:93:f9:b6:08:cd:5f:c2:6d:eb:
                    db:3a:61:65:c2:49:b9:ee:6f:d8:46:ae:85:e6:c8:
                    1b:2a:c3:84:68:c3:f9:08:9c:0c:de:69:d4:07:f8:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C8:11:A3:61:7C:24:75:BB:99:BA:77:53:80:8D:A6:E5:7E:44:B2
            X509v3 Authority Key Identifier:
                keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:a8:60:40:b3:b9:70:99:58:ca:00:a4:8d:52:4c:bc:57:
         7a:32:82:f9:7f:6b:45:0e:c0:1d:ab:2a:d2:13:a8:bb:26:38:
         ae:2c:38:8e:36:5c:15:f0:83:bd:4d:3e:68:e5:32:fd:d1:0f:
         47:cc:b2:56:ca:9c:05:71:97:d6:44:06:06:98:98:b2:f1:f0:
         fc:b5:63:43:45:af:a6:58:44:2c:9b:32:b2:d7:c5:bf:f1:14:
         7a:de:44:1c:76:a2:83:14:41:f6:4c:23:8e:ac:ff:0a:e0:a0:
         ea:16:a6:08:5c:3c:69:4d:f7:ff:05:d4:da:b2:01:91:d5:82:
         1d:3d:a4:86:92:39:43:ec:8e:56:bc:1e:e8:18:29:0c:7c:35:
         d0:8a:fd:d0:d2:cb:fc:eb:44:22:a8:8b:88:ce:5b:23:cf:14:
         54:35:5c:95:32:7a:1d:7d:ee:5d:be:44:f4:3c:15:86:61:95:
         a8:b1:b7:21:40:58:54:2e:f0:32:47:a8:7d:b7:a3:c8:d6:48:
         7e:30:d6:6f:66:91:c3:fe:4d:f5:21:8a:5b:77:33:85:37:e6:
         d3:a1:54:65:3b:b5:55:9b:40:21:9f:1c:e9:87:63:7b:f8:4a:
         a0:42:a3:6d:64:c3:1c:39:fb:7a:c9:1d:1a:30:cc:f5:55:2f:
         42:45:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:06:58 2026 by rpki-client