Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          jiLElcXzPFjRqvxNsrCQbQskCJ0fdxDaJWTL1Z3GfO8=
Subject key identifier:   C6:C1:2D:BB:7A:75:E0:D2:32:69:CD:02:16:30:14:47:FC:03:50:B9
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       01A000C9F2467C33B55B8AB03BC4B1EF3485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          1A08
Signing time:             Fri 14 Aug 2026 15:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:29 +0000
Files and hashes:         1: 6GPblw6DV3CHVZNWZ0QdaVy6klk.roa (hash: DqtHDBDEhiMvYHUrl8XYbcaTNh8BiLqth+UKaws4rT8=)
                          2: Bzo_d6zW3tj-cs4yT8d3sKOXlfg.roa (hash: sB4IjXQ2q1JliT65t5pMashaLGv9OdpiFjT65GllIOg=)
                          3: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: ZwkBltsCxmGb0MlkPQ6Eyd5nhQGqeXTdhbZM3BOAhxU=)
                          4: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (hash: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk=)
                          5: aUScLYE7hWlZLrttrbL09JUvQA0.roa (hash: x+eRx80jxSLOtFgW7pQIqcwn52mE8qpARjfDhLVRoV4=)
                          6: nW3IwE5roVsnBgu9z0_CgUuzIkE.roa (hash: W9YQgHEfBWzENVLpd45FQgo4EBkxudFGiV0/tWzb3uI=)
                          7: oJikVGeGH47Pi9ETf25ZC2y534A.roa (hash: O9mHTIlUIZNrSBo/sFV/Ngmx3bneDcEBab5/fbZjQkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:f2:46:7c:33:b5:5b:8a:b0:3b:c4:b1:ef:34:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Aug 14 15:00:29 2026 GMT
            Not After : Aug 15 15:00:29 2026 GMT
        Subject: CN=c6c12dbb7a75e0d23269cd0216301447fc0350b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:42:e5:84:3a:9c:d2:c5:90:d4:dc:7f:ad:ac:
                    b3:53:a1:55:91:09:20:a2:74:ae:6a:68:fe:87:0f:
                    ee:31:4d:fc:84:21:a8:20:b8:46:f5:1d:e7:ec:1e:
                    fa:e7:d3:95:10:00:a5:21:f4:f4:54:5d:3c:0b:81:
                    36:05:bd:44:39:58:cd:2a:b6:72:a0:a2:46:27:b2:
                    3c:96:bf:3d:3b:c5:46:e0:d4:2c:db:75:4f:ec:76:
                    38:1c:55:49:c3:74:68:8e:72:93:aa:bb:c3:df:5b:
                    30:c5:17:34:94:a9:1f:86:bb:a1:3f:84:d8:a2:bc:
                    5e:c5:b8:e9:34:eb:4a:66:9d:df:a2:e4:7b:6e:d9:
                    04:d6:17:da:77:92:d3:80:76:a3:b4:f5:92:0b:88:
                    c7:5d:ea:42:0a:3b:e6:2a:bc:3c:5c:4c:1d:03:06:
                    10:76:db:9f:11:b6:aa:0c:f3:7f:19:f2:ee:c7:ac:
                    9e:7a:56:1d:b4:77:dd:8d:1a:b5:71:61:16:31:75:
                    c1:75:05:14:ad:64:e1:49:71:38:40:0a:12:e6:88:
                    77:47:43:38:76:af:bf:83:74:dc:4f:e3:12:6b:c4:
                    24:0e:80:01:ae:4b:d3:a4:3f:54:3f:db:b2:74:17:
                    0b:69:2c:dc:91:b2:0b:06:0e:c8:86:29:eb:a8:e1:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:2D:BB:7A:75:E0:D2:32:69:CD:02:16:30:14:47:FC:03:50:B9
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:db:6a:ad:80:97:3a:f8:ad:b0:20:5e:3b:54:23:8b:22:
         38:dd:32:e8:16:51:aa:83:f8:ce:e4:b2:03:9a:a4:08:6f:ba:
         bb:3d:51:b5:42:2c:95:f0:2d:23:7f:c8:7e:dc:88:7c:f2:23:
         ea:2e:fe:e0:ba:47:7f:be:ff:71:41:19:fe:5d:bc:cd:49:e9:
         c3:28:30:e4:d2:c6:6b:4e:d8:59:ff:73:4e:d2:d9:92:97:45:
         c0:17:a2:0a:39:ea:70:73:c1:2d:10:69:c3:c7:67:16:a2:2f:
         ed:a6:13:eb:67:41:e8:5f:76:c8:43:34:db:26:dc:24:67:c7:
         45:19:e6:3f:be:e8:5e:25:6a:4a:a9:3e:21:f2:57:15:97:aa:
         f0:35:3f:93:b7:0e:eb:6f:dd:8c:5a:12:94:c6:24:49:f4:94:
         48:a1:5c:57:d4:5d:76:c5:06:66:f6:f1:f2:76:08:d6:fc:c8:
         f4:7d:65:7f:d6:08:2c:ba:d4:46:b3:61:96:c8:32:a2:a4:60:
         b4:80:03:49:f7:ba:a9:4d:79:3d:82:d3:2a:b4:50:fb:6a:3a:
         06:53:0f:58:17:36:3b:6e:40:8e:ae:87:df:ac:a7:f8:5e:26:
         5b:29:5d:e0:8b:e0:d4:02:ca:93:05:b7:97:58:c0:98:34:5f:
         c0:59:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:04 2026 by rpki-client