Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File:                     1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier:          UiNt2g9Y1LjMQAwjpzQoA7Dnvx4Va3sBafEQ47V1c9U=
Subject key identifier:   3E:2B:51:57:8E:23:51:74:F3:9D:7C:63:68:A8:99:99:1D:8B:F2:BD
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer:       /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial:       01A0005D3A9217F2A3DAA28F28F70DDD864A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number:          13FB
Signing time:             Fri 14 Aug 2026 13:01:44 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:44 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:44 +0000
Files and hashes:         1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: 3f6v7KKvcn8NCOpHUzmXxyWG3NKGkkc7vagY4YwLXzI=)
                          2: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (hash: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs=)
                          3: eNxkL16VsfbxNpT4qIe7Vwh1riY.asa (hash: ZmJ1Py74vcSNkNeWOaFBer3G+b9/WXs2+n2RLvj/wcM=)
                          4: mJoDlO3NR5D8OqKGLKWGSnN77Dc.roa (hash: 5iVJo/pmU4tCOmzWx6Yvb+04DOT0wTAh7Zm7gKM4+zQ=)
                          5: prY-rLIal9gwsZUoWucK1yyF1hs.asa (hash: NDjhtGqZMT7ro6hNfoHbI/n8/Z/kEUq2p2BLNvKXvjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:3a:92:17:f2:a3:da:a2:8f:28:f7:0d:dd:86:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
        Validity
            Not Before: Aug 14 13:01:44 2026 GMT
            Not After : Aug 15 13:01:44 2026 GMT
        Subject: CN=3e2b51578e235174f39d7c6368a899991d8bf2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:20:72:bb:b7:7d:12:78:00:41:1d:e5:e0:
                    be:7b:a8:8d:99:fd:84:f8:97:1d:54:08:da:d4:f8:
                    9f:94:ca:49:3c:8a:20:ea:6f:24:4e:d2:55:69:09:
                    b1:d6:c2:ec:70:46:bc:3f:f2:e0:ac:5c:46:ff:b3:
                    c0:5f:55:2c:2f:ca:ac:6b:82:76:22:5e:a2:42:a1:
                    79:c0:b4:7e:17:43:42:1d:be:ca:ac:62:1d:40:4c:
                    f0:91:3a:9f:f4:c2:7c:f8:1a:2a:5c:82:7d:ec:45:
                    8d:e5:3c:5f:4a:f0:91:3a:d1:b5:31:6a:82:21:e4:
                    39:f1:7c:82:1c:8c:c6:f6:25:8c:db:47:47:bc:5b:
                    a3:44:d1:8f:18:60:66:28:dc:20:92:d9:f6:95:00:
                    e9:e8:4b:3f:cf:ad:3f:21:4a:12:11:d8:5d:eb:71:
                    86:0f:ec:10:7a:18:f5:75:96:ba:56:16:09:42:8b:
                    1c:49:f7:f3:8a:b0:52:4a:73:64:57:10:12:d4:a4:
                    56:de:f0:a6:50:e0:fc:0c:2b:66:79:73:ef:73:1a:
                    03:13:37:6a:e7:6d:c1:32:5a:3a:b1:3e:7d:de:22:
                    0b:be:99:46:9b:b9:2e:4e:63:26:a3:07:35:78:34:
                    51:30:c5:d8:8c:1d:67:6c:a0:a2:0b:34:1c:9b:27:
                    52:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2B:51:57:8E:23:51:74:F3:9D:7C:63:68:A8:99:99:1D:8B:F2:BD
            X509v3 Authority Key Identifier:
                keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:63:60:66:79:b0:5b:6a:a1:59:8e:0b:5f:02:a4:02:b9:d8:
         27:70:95:a6:02:42:fc:5a:fc:de:c8:a4:9f:0d:4c:4f:0f:4e:
         42:48:2c:8d:3d:08:46:26:5a:17:fe:26:60:0e:a5:1c:e5:b3:
         8b:ca:0f:0b:96:2a:1f:fa:08:81:f2:2f:49:d9:f3:e5:99:3a:
         a0:88:7b:da:b9:f5:21:a1:1c:db:2b:e7:86:6c:d1:6a:92:3b:
         3f:73:87:eb:91:63:f8:9f:f0:74:de:e6:39:ed:8b:df:ed:55:
         f7:bb:fe:86:cb:56:78:09:5d:43:a7:84:d6:82:bd:a8:0a:98:
         42:38:0e:ec:9b:ce:e9:82:67:e7:2d:3d:72:63:8e:71:bd:cc:
         d7:80:03:b2:66:37:58:cb:48:1b:ae:86:5b:aa:f6:6b:23:f2:
         bc:19:16:32:b7:14:7e:b6:e0:91:44:fd:7a:95:23:a9:85:2b:
         78:05:41:2f:22:06:1b:b7:35:f4:b8:51:78:36:1f:cc:c9:5e:
         a5:4c:86:6c:86:55:d3:0a:7e:86:9f:e4:2c:81:98:81:37:d2:
         18:d8:ca:2a:e7:95:1e:b0:55:8a:4d:e5:d1:58:ed:ef:a1:96:
         24:ff:9d:67:fd:06:a0:7d:f9:3c:56:79:46:b9:88:de:24:72:
         1e:59:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:47 2026 by rpki-client