Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File:                     t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier:          GJvXwo12z/qjdaOr39LmzBLuqsAG3vyFTflkZLga8Bs=
Subject key identifier:   29:0F:D2:B6:E8:8A:A2:DF:D8:90:8C:8F:F0:E6:3B:F5:95:63:51:6E
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer:       /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial:       01A002B88CD185588157FA4087B135377F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number:          13CD
Signing time:             Sat 15 Aug 2026 00:00:44 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:44 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:44 +0000
Files and hashes:         1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
                          2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: i7cg0tVjc3lNWQdbBxfB7n09crD7r/Aosh5gQuuLHw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:8c:d1:85:58:81:57:fa:40:87:b1:35:37:7f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
        Validity
            Not Before: Aug 15 00:00:44 2026 GMT
            Not After : Aug 16 00:00:44 2026 GMT
        Subject: CN=290fd2b6e88aa2dfd8908c8ff0e63bf59563516e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:09:1c:ea:bf:42:99:a0:df:88:c3:4d:b4:
                    ed:cc:ee:4c:e5:87:f1:48:35:d6:26:d6:f8:93:ac:
                    57:bb:d0:51:87:cb:ba:5a:08:8c:11:d8:37:8c:de:
                    67:7c:d8:4f:fb:19:a1:6f:da:db:91:3b:e8:b7:50:
                    05:46:13:8d:2c:ba:ab:53:b2:72:1d:66:cc:4d:41:
                    e9:cc:44:d4:66:9c:b1:2a:fa:60:a2:cc:29:bc:b6:
                    58:31:7e:9d:c3:2b:ff:7f:6f:eb:3b:76:66:e3:c7:
                    78:86:41:78:b0:cb:8d:d7:75:91:3c:77:3b:7e:33:
                    3c:fe:df:84:46:eb:d1:e6:89:0b:62:e0:39:d5:f9:
                    0d:4a:7c:b8:33:db:89:b3:b3:b9:21:91:31:20:0a:
                    bb:12:8a:98:7d:da:30:24:cd:51:a1:46:9d:82:3b:
                    15:89:d9:d1:85:08:24:69:4b:dd:db:e8:ed:b4:d0:
                    d8:00:b4:cb:9c:3e:34:20:b9:7b:b4:7c:c9:af:38:
                    af:d3:ce:20:ce:6b:fd:d2:5f:12:01:09:ce:ce:20:
                    c0:80:94:12:9d:76:f7:1f:5e:79:e1:ea:07:bd:5c:
                    a8:d7:c2:e7:00:d9:89:2d:69:32:85:ac:13:c5:70:
                    c4:e4:dd:09:30:b8:99:09:42:63:8b:eb:7d:c5:5b:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0F:D2:B6:E8:8A:A2:DF:D8:90:8C:8F:F0:E6:3B:F5:95:63:51:6E
            X509v3 Authority Key Identifier:
                keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:3f:b3:9a:e1:12:94:79:7a:ff:fb:82:93:4f:8a:f6:94:
         c1:30:71:80:e1:f0:a4:89:45:ea:af:37:92:ef:f1:0a:03:48:
         d4:62:ca:eb:90:eb:1d:7e:bb:96:64:d1:2f:af:07:2e:8c:0c:
         ab:12:70:6d:ea:c7:cd:3a:3c:71:d5:4f:55:83:d3:46:2a:73:
         d5:76:34:27:3b:55:68:6e:6e:cf:9a:50:b0:e6:c6:96:bb:e5:
         c4:e6:11:d1:15:77:ed:c6:92:be:bc:51:36:ea:af:82:a6:ac:
         82:87:63:9a:52:5e:0f:78:9f:60:48:05:e4:cc:1c:8d:ae:4d:
         4e:49:75:8e:3d:02:b7:c6:93:1d:d4:0c:b7:42:df:af:17:5b:
         dc:3e:89:d0:e9:8c:37:02:51:6f:cb:77:54:59:51:bf:ed:71:
         14:ff:4d:55:a1:93:38:ae:e9:26:23:96:e9:af:7d:0b:95:3a:
         0e:52:3c:db:de:c7:08:df:0c:2f:f3:10:61:65:22:c6:4d:bc:
         bf:1b:33:9e:43:d0:bf:0e:84:c7:34:bb:6f:ab:3f:8f:a0:7d:
         c9:98:79:8d:cb:96:b9:49:00:d2:cb:59:81:52:82:dd:69:eb:
         0d:00:6b:8c:4a:80:75:bd:ab:f7:4b:1a:d9:1c:bc:52:e3:6e:
         9e:81:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:12 2026 by rpki-client