Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File:                     4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier:          M/IzaTUd9ci5acuCrt4REPAH7q9W+hBnLrzoYJ3BpU8=
Subject key identifier:   87:C4:B0:9A:77:26:83:21:32:91:B8:71:DE:93:A8:15:28:77:98:71
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer:       /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial:       01A001701AFD2BE6A0F7302349D83AB423C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number:          1181
Signing time:             Fri 14 Aug 2026 18:01:59 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:59 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:59 +0000
Files and hashes:         1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: esDro5kjQJG80N5Iqnm2fqmCqjx+5FvzyqPdzet3czY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:1a:fd:2b:e6:a0:f7:30:23:49:d8:3a:b4:23:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
        Validity
            Not Before: Aug 14 18:01:59 2026 GMT
            Not After : Aug 15 18:01:59 2026 GMT
        Subject: CN=87c4b09a772683213291b871de93a81528779871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:8a:cd:04:88:47:e5:ac:a0:b9:ed:3a:0f:
                    13:38:00:c9:e1:fd:a7:64:03:09:c8:ef:ba:8e:c5:
                    c3:a8:c0:88:32:b1:61:c3:20:99:97:04:d7:36:e1:
                    e9:7f:69:82:eb:c1:da:96:78:5d:02:71:6e:6f:3d:
                    33:a2:a7:89:c9:7c:85:3b:56:b4:8d:2b:de:ea:46:
                    34:72:bc:61:0b:6b:55:b0:42:4c:6f:c4:95:5c:ac:
                    8f:59:15:78:e1:d3:b6:da:90:d0:32:a7:3d:3d:77:
                    61:c1:84:06:a3:0f:06:ed:7b:c8:b9:9a:50:65:a7:
                    35:f8:92:b7:42:91:4d:9c:03:ba:05:34:0e:de:19:
                    3d:26:e5:15:04:5c:cb:2d:24:f2:ea:53:19:19:7a:
                    9f:53:ff:ad:1a:aa:a1:eb:cf:76:e4:2c:7b:3f:d6:
                    f0:e5:43:50:28:1e:1c:e5:72:bc:ba:b5:07:8d:81:
                    cd:93:36:d5:6f:36:b4:05:6e:55:3b:51:55:3c:fe:
                    ed:69:24:f5:08:f6:d4:5b:84:51:53:9e:c6:01:aa:
                    09:18:33:c2:21:72:f9:d2:d8:53:48:ca:4b:15:eb:
                    f5:f0:87:76:3a:27:5c:4a:b7:57:23:67:cf:7b:e5:
                    dc:f2:2d:a3:3f:2a:bc:15:34:75:94:6b:ea:da:5b:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:B0:9A:77:26:83:21:32:91:B8:71:DE:93:A8:15:28:77:98:71
            X509v3 Authority Key Identifier:
                keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:00:3a:7e:89:0b:73:5c:ba:c6:c2:47:cc:53:b7:8f:1c:7c:
         48:1d:40:2e:d1:69:23:9f:93:9a:0c:89:3b:29:62:55:67:0c:
         8f:ba:0e:0f:dc:8c:59:b6:e5:24:35:55:cc:72:e8:9c:f4:d3:
         01:17:ab:37:6e:05:c9:12:53:50:d6:3f:c3:e0:f1:b3:b8:58:
         4d:bd:23:5d:1c:34:09:7e:0b:c7:3d:a0:3a:44:de:f7:22:f6:
         71:a3:53:d0:1b:71:46:e6:5f:5c:1e:ee:61:3b:7c:dc:cc:02:
         71:e2:3d:94:94:81:14:f5:80:d4:fb:91:16:05:35:67:33:15:
         6a:f4:02:68:05:eb:8f:56:50:c6:90:e0:d3:17:e5:55:5a:5c:
         d5:68:44:08:f7:b3:ab:77:9b:de:59:6b:a9:a6:6e:2a:8d:fb:
         62:fe:d1:3f:84:40:45:04:0e:e9:6a:c2:ed:f4:23:04:7a:c4:
         f7:11:81:cf:a1:40:6d:20:59:b4:50:53:c9:68:11:99:d9:7f:
         a5:d6:40:62:a7:ca:19:a5:a5:83:bb:d6:5d:b6:2d:08:a4:4a:
         da:55:78:eb:f9:94:b0:43:b1:75:43:b6:ab:27:be:13:97:f6:
         c2:86:0c:8b:cd:1b:78:1c:60:ab:a4:74:67:ae:25:a1:8d:bf:
         c4:e8:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:01 2026 by rpki-client