Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File:                     rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier:          u1DEAlDSIkTieyLub/I1Iswixlgx+G97wczr+4ifFa0=
Subject key identifier:   FE:99:EC:01:66:26:4C:DE:D1:E1:38:10:31:1F:79:59:A4:B3:49:C7
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer:       /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial:       01A002F048E5EA2C3CF4A1190C935B004969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number:          13FF
Signing time:             Sat 15 Aug 2026 01:01:36 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:36 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:36 +0000
Files and hashes:         1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
                          2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
                          3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: LLDdQFajsGB1vMHbvbg2gpggTapHyQm6cbDqlH2ionc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:48:e5:ea:2c:3c:f4:a1:19:0c:93:5b:00:49:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
        Validity
            Not Before: Aug 15 01:01:36 2026 GMT
            Not After : Aug 16 01:01:36 2026 GMT
        Subject: CN=fe99ec0166264cded1e13810311f7959a4b349c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:e3:57:e5:8f:4f:23:39:f1:72:04:a9:e4:
                    ee:db:34:ba:78:62:b5:d6:34:ce:65:a4:fc:ee:c0:
                    24:66:c7:56:09:89:31:d0:3d:2e:8d:c2:7d:80:b2:
                    5c:4b:ce:08:35:86:c2:37:14:db:33:fb:6f:0c:e1:
                    c1:6d:89:6d:ca:f7:e4:be:e9:44:e6:1b:22:37:d9:
                    be:9b:42:63:11:d1:54:be:d7:9c:84:3c:a5:23:bc:
                    d2:2d:d5:57:ec:3e:ad:d5:1c:fe:fb:b5:37:1b:55:
                    6e:7d:3a:98:c1:fa:fa:c0:a8:ca:21:a0:a3:2c:95:
                    c0:f0:da:ef:2f:12:bf:47:96:48:6a:8a:42:00:f6:
                    a5:b9:54:0c:bb:2d:e6:b8:15:e2:bc:89:f0:b0:45:
                    2b:31:ed:0c:c1:8c:10:a4:4c:c3:9e:87:78:37:3f:
                    e0:c2:d5:dc:a9:5b:aa:d8:da:37:27:d0:af:b1:8f:
                    96:83:8c:82:17:f2:8e:31:9c:96:5e:7f:ef:59:fd:
                    d0:a5:c6:5b:4e:22:23:27:57:54:a3:6b:54:2c:20:
                    e7:76:e7:3a:4f:30:cf:43:b1:8e:91:79:59:71:d9:
                    7f:b1:f1:8e:46:ad:dc:0d:62:e6:af:7d:eb:83:ea:
                    94:4a:46:b9:e2:aa:06:2d:70:ff:5c:32:11:03:2f:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:99:EC:01:66:26:4C:DE:D1:E1:38:10:31:1F:79:59:A4:B3:49:C7
            X509v3 Authority Key Identifier:
                keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4a:9a:ce:7b:a9:64:44:de:25:7d:7d:df:4b:95:87:d4:54:
         70:2a:2f:8a:0f:b4:b4:a4:f5:0f:98:f8:e5:7a:fb:85:b1:fc:
         cf:95:93:18:a0:6b:b7:e3:bb:b1:fe:ba:fa:e5:5f:8b:df:0c:
         02:24:37:b2:d8:31:8a:7f:28:50:20:7b:62:f9:f5:97:a1:9a:
         5a:2d:8e:ff:00:e8:3c:57:18:d4:c6:40:29:13:14:a7:d1:ef:
         81:80:4f:ea:7c:50:79:5d:a5:be:32:c9:ca:2b:59:e7:e8:fc:
         61:4e:b2:f6:a8:ac:dd:55:e9:75:e0:7d:69:15:67:63:d3:20:
         44:c0:f0:81:bb:d7:75:bc:81:ee:ce:c9:63:52:ad:26:83:20:
         ad:4d:cb:ab:3c:14:37:9b:b0:0d:c3:18:cd:d1:64:32:ce:4b:
         de:79:a0:bd:38:2c:02:a0:ba:5a:56:db:38:cd:b1:93:0d:fe:
         e1:7c:3e:10:a0:98:b0:8b:5e:81:ff:f8:98:90:e1:42:b7:87:
         08:f5:ff:92:4c:c3:d4:89:09:5c:77:ac:f0:5a:20:02:b1:11:
         5a:49:0a:2f:28:b6:8b:87:e4:14:dc:16:bd:4e:b9:38:d1:38:
         68:18:63:0b:95:2b:fc:fe:3a:e2:fb:61:cb:04:97:98:d6:12:
         40:12:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:49 2026 by rpki-client