Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File:                     rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier:          jr93viStzBKgCeSMf+9WWXm7CHXD68hxcjPVDj3cdzE=
Subject key identifier:   1D:A1:F0:33:42:D1:CF:96:CC:9E:BF:0D:66:BE:E1:C7:C6:F5:4D:66
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer:       /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial:       01A0016F00B0C704B0D81D352FC56502F571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number:          0295
Signing time:             Fri 14 Aug 2026 18:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:46 +0000
Files and hashes:         1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
                          2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: NlCwf36J7Z+/wPM07no3oTvCLL9TAT+rXjRiONonF+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:00:b0:c7:04:b0:d8:1d:35:2f:c5:65:02:f5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
        Validity
            Not Before: Aug 14 18:00:46 2026 GMT
            Not After : Aug 15 18:00:46 2026 GMT
        Subject: CN=1da1f03342d1cf96cc9ebf0d66bee1c7c6f54d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:d5:4d:dc:81:d3:d1:5f:8c:22:76:8d:23:
                    ef:d7:21:c6:88:41:f2:07:f0:58:85:93:59:f3:c7:
                    cf:83:4a:26:29:cd:1f:d1:de:04:2d:8e:6f:70:ae:
                    f5:99:d9:1d:ef:36:66:e1:ab:a5:49:d0:e4:55:ca:
                    e7:2f:d1:8a:3f:e5:13:8c:fd:f3:4b:f9:1f:e6:f3:
                    16:9d:06:a3:8b:72:aa:25:b1:4a:51:59:fd:ed:39:
                    6c:58:69:6d:7c:2f:d4:44:44:9a:94:19:59:90:a4:
                    12:45:0c:ac:2b:c9:8b:79:75:a3:24:df:0f:54:be:
                    50:9c:8e:07:6f:f3:20:02:d8:2d:b5:d5:9e:6d:52:
                    2f:04:31:db:3c:22:76:cb:c4:c7:fd:59:7f:fa:26:
                    2e:2f:89:58:8c:40:95:66:8e:cf:59:e1:c6:26:be:
                    b6:b1:90:1b:8a:b1:5d:ba:80:87:ba:0c:44:68:01:
                    31:46:39:5f:9c:10:c0:80:7e:6c:79:19:42:7d:24:
                    1a:16:fa:51:a3:16:e1:b5:6f:69:06:29:da:0a:16:
                    1d:1b:d8:36:c1:1d:2e:0f:e6:7c:d0:04:62:5c:01:
                    cd:3a:9a:87:fd:9b:99:08:25:66:74:03:d0:d3:9e:
                    9c:d9:0c:9f:07:1e:df:34:82:8f:89:52:0f:7f:87:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A1:F0:33:42:D1:CF:96:CC:9E:BF:0D:66:BE:E1:C7:C6:F5:4D:66
            X509v3 Authority Key Identifier:
                keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:47:53:b6:4e:47:fe:3a:bc:f7:7b:f7:9d:36:51:95:c0:
         d4:9b:60:4d:96:b4:c3:a0:0e:bc:08:11:3c:44:ff:ae:86:69:
         05:a3:4f:f0:e2:0a:f6:94:e9:12:a0:69:43:d6:82:74:f4:b8:
         56:c0:df:3f:e4:c8:51:5f:84:20:e8:31:54:51:ba:8c:38:d1:
         7a:c5:bf:fa:4a:d2:75:ba:71:02:e7:70:4e:82:4b:30:76:f3:
         fb:03:1b:3a:2c:31:7d:99:12:2d:da:58:dd:08:ea:2d:cd:56:
         60:03:35:2b:fa:49:26:4a:85:c6:17:52:84:e7:69:a9:28:cd:
         0c:dc:38:b1:0b:a3:9a:f2:bb:57:a7:ea:5c:c0:e0:51:22:ea:
         c8:43:3f:45:6b:4e:41:92:15:aa:84:b9:69:b8:28:81:fb:62:
         0d:1d:63:eb:7c:86:36:be:35:64:37:3f:88:5f:f4:89:96:3d:
         e8:d7:72:40:f2:1c:31:de:f0:6c:14:5a:85:c8:1b:63:d6:48:
         67:1f:cd:23:92:93:e9:2d:35:9c:60:69:01:b9:7e:86:d3:8b:
         bc:e6:4a:5b:5a:4c:0c:c8:70:c5:2e:05:2f:c9:9c:88:88:70:
         fa:6f:f3:9a:7d:94:26:36:91:c4:cf:95:00:ca:35:4e:55:f2:
         81:f4:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:17 2026 by rpki-client