Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File:                     Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier:          Kf1BP7jiKTmeu4ATJRSTkWt4F/5xgWAw6FY/gWh1Lpw=
Subject key identifier:   69:17:CE:FD:A0:6A:9C:EC:94:AB:99:6F:4B:38:EA:0F:82:75:DF:9D
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer:       /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial:       01A0024B0CC3781BB72DAEDF72353ADE7738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 22:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:07 +0000
Files and hashes:         1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: MG9TLcSAaZaTlbbEGP9CIT7uUGi38sDrLznAVXziV1E=)
                          2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:0c:c3:78:1b:b7:2d:ae:df:72:35:3a:de:77:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
        Validity
            Not Before: Aug 14 22:01:07 2026 GMT
            Not After : Aug 15 22:01:07 2026 GMT
        Subject: CN=6917cefda06a9cec94ab996f4b38ea0f8275df9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:cb:40:86:ee:da:89:c1:f0:09:95:0a:b4:
                    5d:99:83:33:a8:50:9b:90:b6:85:97:a0:7b:d9:42:
                    1a:d3:07:d6:79:00:f5:16:71:7d:ea:51:23:a2:be:
                    72:5b:13:34:32:c2:e0:66:2e:a5:b6:1f:69:9a:86:
                    b6:73:c8:ed:5e:ee:27:22:87:6d:5a:fc:e2:cf:a3:
                    37:87:2c:a7:81:bf:c9:91:d6:71:7b:1f:73:37:8d:
                    40:3a:5d:e3:11:93:e4:a7:54:e3:a5:4f:72:df:09:
                    75:ce:98:4c:99:05:10:cc:63:4e:eb:b3:76:57:53:
                    3b:f0:de:4d:d2:6f:b3:e9:2e:76:d9:02:15:30:5b:
                    d5:16:57:3e:25:8e:95:a7:94:70:38:19:f2:72:f3:
                    24:38:0e:37:6d:85:47:f7:11:89:12:11:12:fa:3d:
                    2c:da:b5:a7:20:a3:55:41:e3:ee:44:ca:3f:2e:47:
                    e1:26:c4:73:72:d4:37:4d:ce:a0:a6:a2:9d:86:60:
                    68:c3:c7:7f:c9:f2:40:ef:4b:48:8e:46:cf:67:cc:
                    33:84:57:85:c6:ab:1b:8b:96:54:a7:52:b9:39:32:
                    b1:55:24:2d:22:dd:44:18:b7:29:7b:52:a8:71:5e:
                    fc:31:22:46:86:46:a6:c5:15:3a:4d:ff:f5:19:78:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:17:CE:FD:A0:6A:9C:EC:94:AB:99:6F:4B:38:EA:0F:82:75:DF:9D
            X509v3 Authority Key Identifier:
                keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:35:98:d1:00:2d:e8:ce:6d:02:fb:90:59:f1:17:31:2d:
         c1:55:8c:6b:33:6b:40:cb:7d:79:20:0a:9d:90:c0:00:6b:f7:
         fe:b5:7e:17:ac:2a:7e:5d:5d:3f:91:b7:5c:9c:0a:a8:99:61:
         6f:0c:8d:31:9c:72:64:9d:f5:69:36:80:7e:9a:0a:9f:5a:f9:
         70:4a:81:9d:c4:fb:e0:26:3f:2c:fc:5b:be:0d:24:20:be:20:
         2a:fa:ac:09:e3:47:95:e2:25:e6:0f:0a:6a:99:dd:b5:1f:db:
         ff:b8:f5:e1:fa:92:86:0f:30:15:7a:e0:c5:2f:da:39:d6:dd:
         3d:1a:3d:4f:82:25:ea:55:5c:39:35:6a:0e:70:5d:be:38:9c:
         db:e3:39:e1:57:ca:d8:e1:38:d3:6f:b5:7f:f9:32:10:3d:9b:
         55:3e:a9:c8:ad:00:74:32:7a:53:1b:a5:f8:04:54:63:55:68:
         9a:50:9f:e2:ff:51:9b:e0:41:1e:e8:08:a5:ab:e2:36:3c:bd:
         f6:24:23:e6:50:28:3f:6d:2f:5f:de:56:c4:77:33:e3:76:d9:
         60:39:10:3d:98:e1:5a:1a:55:9c:92:80:5a:1f:72:dd:de:76:
         47:61:6e:ba:f8:ac:ec:f2:02:2b:e2:86:9b:f2:b0:17:73:da:
         9e:6a:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:37 2026 by rpki-client