Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File:                     1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier:          pP9S0rkNoFt8oFlIsLKOWX+D4GxfTxoigh6r57rMgIE=
Subject key identifier:   C4:CF:23:C4:13:A8:09:B4:95:B3:BE:A7:53:39:59:E0:7D:68:35:83
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer:       /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial:       01A001DD7CA1975876B8E8CCF29D6D1E1DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number:          11F6
Signing time:             Fri 14 Aug 2026 20:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:27 +0000
Files and hashes:         1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: pGq7kXFTAi4xNfCp29D1bvn9FuX5y/ujoNjHqsz+vSk=)
                          2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7c:a1:97:58:76:b8:e8:cc:f2:9d:6d:1e:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
        Validity
            Not Before: Aug 14 20:01:27 2026 GMT
            Not After : Aug 15 20:01:27 2026 GMT
        Subject: CN=c4cf23c413a809b495b3bea7533959e07d683583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:d6:5f:e9:28:d3:a2:ac:52:43:b5:fe:ad:
                    03:35:88:c1:be:f8:71:41:fd:99:bd:73:53:01:53:
                    e4:18:b4:5f:10:cb:83:56:23:18:26:6d:40:8c:2b:
                    f1:f6:da:46:d1:be:30:ce:e0:5f:4c:93:4a:a2:32:
                    16:bb:d1:89:41:29:d4:85:a7:3c:82:eb:38:3c:9b:
                    55:e8:92:b1:c9:0f:ae:9b:8c:98:52:f5:ce:ff:f2:
                    1e:35:36:94:90:57:e9:ca:85:4e:ca:5b:5f:13:92:
                    db:f9:f1:2f:6e:9f:8d:1b:2c:13:87:3c:65:90:40:
                    3c:05:09:ab:de:a6:bb:23:2d:da:3c:d2:ea:12:09:
                    0a:23:1b:e5:a6:68:b4:e9:c5:e9:2b:a0:91:f3:7d:
                    1e:7a:95:b6:06:ab:dc:40:0b:48:65:bd:24:36:ab:
                    81:c6:e4:18:a5:a3:41:5d:33:8d:ad:b1:75:3d:c6:
                    8d:c1:69:28:a2:df:14:06:63:ba:9f:53:63:08:53:
                    88:14:f8:c8:79:e7:3e:e7:5c:5d:1d:2f:0a:21:96:
                    3d:56:df:83:e6:f5:43:83:fa:9f:10:9d:c3:bb:47:
                    3f:18:70:57:94:5e:c8:30:f8:2e:6b:c9:4b:a0:2b:
                    6a:ea:61:86:75:88:8d:74:ec:84:8e:fd:3a:7e:2e:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:23:C4:13:A8:09:B4:95:B3:BE:A7:53:39:59:E0:7D:68:35:83
            X509v3 Authority Key Identifier:
                keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:6c:db:61:74:f2:95:05:7d:5e:11:2c:8f:6c:59:ff:de:
         d2:25:fe:35:44:fd:b2:2f:a0:ce:5a:38:13:4f:93:7a:cf:97:
         80:5f:dc:94:21:2a:3f:b5:b2:4a:3f:73:7c:4a:17:67:9d:3c:
         e5:75:2e:fb:a2:7d:43:e0:bb:81:c8:9f:21:5d:18:ad:9b:72:
         85:e5:25:e8:cd:e9:de:98:f7:41:60:de:b5:72:c8:34:5b:34:
         20:50:67:9d:95:d8:ec:c2:d3:e0:13:a4:d2:c1:4f:08:80:9f:
         15:32:fd:49:c2:e6:9e:8a:a8:df:f6:15:31:e4:02:86:45:ad:
         78:fb:44:3f:0e:4d:54:da:3a:7d:2c:ba:d6:47:96:33:ed:ca:
         1a:e1:c3:05:ea:13:76:34:8a:0a:48:00:a7:d0:fa:38:e8:ed:
         63:f6:a8:5b:1e:81:58:11:52:bd:85:67:4c:a2:ff:7d:04:46:
         93:23:7d:75:11:7f:77:fe:3f:e3:f5:14:5a:eb:d7:cc:8a:ba:
         33:85:4a:a1:d7:cb:7e:d0:b4:91:64:ae:aa:b4:2e:e3:3b:9c:
         3d:53:8b:44:8f:83:e6:55:10:d0:a7:1e:f8:f1:55:55:3f:76:
         d2:e6:f3:c6:e8:2c:9a:7a:c4:ac:ad:d0:31:be:2d:21:bd:17:
         95:12:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:52 2026 by rpki-client