Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft
File:                     rA0wFTdh0H-kaUvsfrZ63E6blNY.mft (raw, json)
Hash identifier:          NtYOh+70hle9uvO15Zj3kb1PLq2o9rQDqbWBNffoH4E=
Subject key identifier:   E3:1F:7B:90:9F:90:DA:B7:4F:6F:08:B2:DE:04:60:BA:6C:25:53:61
Authority key identifier: AC:0D:30:15:37:61:D0:7F:A4:69:4B:EC:7E:B6:7A:DC:4E:9B:94:D6
Certificate issuer:       /CN=ac0d30153761d07fa4694bec7eb67adc4e9b94d6
Certificate serial:       01A0035E347E4494D862896422FD97FED1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:01:40 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:40 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:40 +0000
Files and hashes:         1: XIcCR0m8hHgSbXdHKBIWR4VF154.roa (hash: LCgknZyghVdfFGOs+KiwoRp1leyOAETCO2WsbEy0pJY=)
                          2: rA0wFTdh0H-kaUvsfrZ63E6blNY.crl (hash: c3fMTQucu2OiYhiygvMGAetQWQ0JTaT6Bd4KUgHvGg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:34:7e:44:94:d8:62:89:64:22:fd:97:fe:d1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0d30153761d07fa4694bec7eb67adc4e9b94d6
        Validity
            Not Before: Aug 15 03:01:40 2026 GMT
            Not After : Aug 16 03:01:40 2026 GMT
        Subject: CN=e31f7b909f90dab74f6f08b2de0460ba6c255361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:26:8a:a0:13:ea:d1:c0:d9:c5:92:8f:0f:
                    f6:50:4f:20:67:1d:db:d1:59:08:54:20:d4:a9:c5:
                    12:9c:44:25:ec:96:15:fe:37:6c:77:ce:ea:20:ee:
                    8f:dc:2f:e0:5d:0e:30:e4:38:0b:fa:9e:35:34:fa:
                    9e:f9:66:30:ff:26:f5:47:3e:b0:a6:3e:76:bc:18:
                    b6:e5:32:e6:33:af:f5:5f:8e:ca:47:f4:ee:cc:b5:
                    72:d9:90:97:4d:c8:e5:27:31:4e:a4:60:53:cc:d3:
                    79:ff:d6:10:51:b3:3d:5b:71:aa:7e:56:cc:5a:e5:
                    95:2f:02:b3:3f:e8:00:5d:77:e4:54:bc:69:7e:d9:
                    c2:78:d2:e0:a1:dd:40:3c:26:f7:c4:b7:aa:01:40:
                    f3:b0:35:ff:74:b0:c9:a9:ac:b9:d0:21:9d:ce:b8:
                    62:56:9a:4c:83:c0:04:ec:9a:d5:5c:d4:5c:8d:11:
                    17:1b:03:09:7e:07:05:f4:ed:b8:6b:84:d9:a6:c2:
                    df:76:cf:85:06:26:52:66:c1:f6:8b:09:08:eb:0a:
                    ae:bc:c7:f3:38:1d:52:25:38:45:fb:d5:86:4c:ec:
                    04:85:31:36:c2:2a:15:17:ae:a3:59:94:eb:63:82:
                    9c:d4:8c:07:2d:57:21:10:a5:c8:f1:62:a5:ef:5c:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:7B:90:9F:90:DA:B7:4F:6F:08:B2:DE:04:60:BA:6C:25:53:61
            X509v3 Authority Key Identifier:
                keyid:AC:0D:30:15:37:61:D0:7F:A4:69:4B:EC:7E:B6:7A:DC:4E:9B:94:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:60:b6:67:19:d4:00:bb:7b:a1:c1:86:e5:0d:5c:96:87:ac:
         37:8b:8d:d2:1c:9b:8f:6a:b1:35:b0:e2:dc:0d:a7:45:94:03:
         ee:7e:7e:92:ed:db:84:1a:91:66:62:5b:f5:23:3c:8f:9d:f7:
         8f:92:43:cb:b5:67:b3:b3:e2:60:e0:03:6c:ea:c6:70:16:ce:
         9d:17:92:b6:c0:3c:de:5a:65:93:fd:c6:09:b6:52:38:04:fb:
         42:c8:22:11:38:48:33:2e:a5:ac:c7:96:72:84:d9:a7:81:3f:
         d9:ae:08:b4:52:94:5e:34:e9:97:2b:aa:d7:ae:d4:c0:c1:38:
         20:b1:74:97:92:3d:af:c2:65:b4:e5:ac:dd:4f:ff:bd:a3:7c:
         2f:8e:a9:7c:5f:af:2a:6a:1a:a6:2b:00:0e:9a:51:3c:92:62:
         45:60:55:bb:3f:32:53:e2:f3:b5:7a:f0:fe:28:b3:34:0f:83:
         6c:bb:15:68:98:43:76:fa:26:c9:90:bc:3c:30:40:af:45:ad:
         c1:73:76:eb:c4:62:c6:cd:22:0b:b2:c8:ec:d6:e1:40:44:e4:
         66:dd:8c:5b:d2:30:b2:83:b6:d1:c8:80:fb:27:c3:35:55:25:
         f1:04:49:f7:86:6a:22:a7:4a:8c:51:3a:8e:cc:97:5d:7b:14:
         17:cb:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:52:42 2026 by rpki-client