Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File:                     0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier:          eebylwh8dKz1D/Fbc5EijHQ82MWYUWx3dCK6ipjfh9E=
Subject key identifier:   81:FC:66:0E:AE:F6:DC:AE:2C:8B:E2:AD:16:0F:14:70:CF:F7:8D:BC
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer:       /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial:       01A001DD1BC7751B03E1C5725D9610BA4C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:02 +0000
Files and hashes:         1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: x16kOHDq0ptqpjRa8ivbEdlheBufjuhjN/33KHVWflo=)
                          2: oHmE_s2IgxzPCRH2-ThzQIvXCO0.roa (hash: sNd3D2Nl25u7Dz2DARN3+vH2eQ72TG1JHi7rWfuknfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:1b:c7:75:1b:03:e1:c5:72:5d:96:10:ba:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
        Validity
            Not Before: Aug 14 20:01:02 2026 GMT
            Not After : Aug 15 20:01:02 2026 GMT
        Subject: CN=81fc660eaef6dcae2c8be2ad160f1470cff78dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:7a:c8:3d:bd:8f:12:6b:58:51:26:26:3c:
                    52:67:ba:97:1d:9c:1b:bf:b4:72:1d:0a:e3:50:23:
                    18:d1:70:50:3c:fc:60:3e:b9:07:c1:ad:38:73:99:
                    03:12:b4:04:f8:b5:92:49:55:ec:ed:06:30:70:1b:
                    40:de:31:ce:b1:63:b6:ff:16:b9:a0:a6:cf:54:ee:
                    44:c6:2d:07:14:05:44:54:97:a5:d5:a9:ed:a3:bf:
                    14:92:67:e8:9e:a3:0b:ef:24:59:c7:c9:d6:98:bc:
                    67:1a:88:cd:81:4d:af:0a:86:c6:c7:03:21:80:9e:
                    f4:8d:a4:95:6f:b7:f2:65:b3:ef:a3:36:2f:28:62:
                    f9:0c:fe:3e:ef:fb:1b:c3:cb:e1:8c:2c:02:45:f8:
                    e9:0c:55:fd:51:cb:09:e7:52:e0:28:63:11:3b:26:
                    54:8b:33:56:df:37:b2:5b:5d:d4:59:b8:ba:a8:78:
                    b9:d1:82:fc:be:36:2a:a0:79:8c:4d:b6:2d:4d:ad:
                    1d:15:c0:13:db:07:db:16:60:e5:e8:d1:51:aa:a0:
                    57:d6:9a:ea:a0:a8:ab:c3:3e:75:a6:d5:f3:67:61:
                    32:8d:10:23:e5:bd:af:be:20:60:d0:89:e0:9a:7d:
                    79:34:3c:8d:58:7c:7e:07:15:0f:49:b1:fb:c6:a6:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FC:66:0E:AE:F6:DC:AE:2C:8B:E2:AD:16:0F:14:70:CF:F7:8D:BC
            X509v3 Authority Key Identifier:
                keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:4c:d7:62:1a:e0:67:94:3a:18:89:03:d5:e7:c8:22:e8:
         08:66:17:9c:2d:ad:c7:6a:bd:27:3d:a7:34:e5:2d:7a:99:a4:
         c5:a4:2f:2d:b2:92:5d:ee:db:81:2c:5a:cd:bb:27:7e:1f:bd:
         36:22:08:54:99:e1:72:64:e0:28:d0:62:04:11:d6:8a:31:55:
         ff:97:2a:19:21:bb:22:fa:ec:dc:4b:20:cd:b6:94:f5:19:fc:
         c4:ba:f6:d4:25:f7:15:21:03:92:53:9e:47:3c:73:e5:31:e9:
         c5:0f:1e:86:6a:c2:a6:22:0b:00:53:7f:69:e8:03:7b:fc:c6:
         0e:3b:65:65:d6:83:d6:34:f5:0f:7f:76:33:ba:aa:4a:be:1c:
         ac:51:b4:9d:d5:30:71:e3:28:15:0c:e9:d0:7d:21:e5:f0:f1:
         30:2b:73:67:87:ec:65:e9:60:e5:d0:9f:c2:0f:ef:93:ba:78:
         92:16:62:41:7b:80:4a:d1:90:17:ce:9e:ae:39:ac:a1:44:98:
         ca:86:58:c5:0c:3f:7b:01:9d:3e:40:bd:2d:cc:0b:fc:c9:76:
         52:44:32:f4:6b:d0:3f:69:31:0f:ec:c2:c0:9c:0f:49:4b:eb:
         ac:fd:95:67:49:89:c7:16:f8:8a:de:ee:c5:85:fe:2a:b4:5f:
         e2:4e:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:32 2026 by rpki-client