Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File:                     cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier:          xGC22vVXt/nH0DJfO0eNtXA8kMHiy/qM1zwMRQVErJI=
Subject key identifier:   42:94:57:57:60:BB:E3:D8:9C:1D:C1:45:17:06:8B:E4:C3:9F:08:94
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer:       /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial:       01A004020E3EBCFA76F1A1973FD063924FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number:          0970
Signing time:             Sat 15 Aug 2026 06:00:38 +0000
Manifest this update:     Sat 15 Aug 2026 06:00:38 +0000
Manifest next update:     Sun 16 Aug 2026 06:00:38 +0000
Files and hashes:         1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: ebRlk/1NOU072vbvugX7OERKbWWPN5D+8b3NaubJ7rU=)
                          2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:02:0e:3e:bc:fa:76:f1:a1:97:3f:d0:63:92:4f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
        Validity
            Not Before: Aug 15 06:00:38 2026 GMT
            Not After : Aug 16 06:00:38 2026 GMT
        Subject: CN=4294575760bbe3d89c1dc14517068be4c39f0894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:ed:28:6b:dd:67:59:6a:e2:2b:af:02:00:
                    47:12:7e:53:d8:08:4e:2c:85:be:ee:5b:2c:59:77:
                    cb:c7:83:7e:2e:9b:3c:86:de:29:b5:b7:ed:66:6c:
                    16:fa:c9:96:1f:d0:b3:64:8a:98:de:98:36:af:88:
                    47:29:8b:e5:5d:df:4e:db:7c:9b:46:c3:b6:23:83:
                    8b:7a:62:f4:21:26:70:63:85:da:19:0c:c0:e9:4c:
                    99:bb:d3:01:63:47:5a:ab:67:e0:ea:31:fd:48:03:
                    0b:b6:9e:1b:49:b3:1b:76:70:31:34:6c:03:54:45:
                    23:b6:b9:64:63:a4:3a:bd:2d:f8:66:b0:bb:26:91:
                    1a:3d:0b:bd:d9:1d:3d:06:b2:90:02:7c:56:5a:ef:
                    cd:19:a1:d5:50:22:7f:28:88:f1:2c:ff:1b:af:17:
                    87:06:e9:0e:b6:3d:1c:24:32:cc:04:23:d2:8b:cc:
                    7d:33:2b:85:e4:9f:ba:b2:09:6c:0a:d4:1c:80:9c:
                    55:95:01:3b:1f:5a:7d:a9:c4:9f:90:b0:4b:0d:d5:
                    33:82:ca:78:a9:e9:9b:d5:a5:cb:e2:5f:a7:c6:e6:
                    a1:38:b0:21:4c:a0:f1:bc:d4:d6:5e:10:7c:70:65:
                    8d:3f:9d:ae:4c:56:e1:99:5b:33:14:b1:03:44:c1:
                    da:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:94:57:57:60:BB:E3:D8:9C:1D:C1:45:17:06:8B:E4:C3:9F:08:94
            X509v3 Authority Key Identifier:
                keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:08:af:80:3a:60:f6:59:46:b7:38:8f:d0:50:79:f6:43:06:
         3e:4b:6c:fa:00:c4:44:77:86:00:35:ba:e1:2c:95:b3:23:01:
         73:d6:00:d7:39:79:93:c8:ff:4c:14:b7:52:7f:5d:77:39:fc:
         18:2b:4f:d3:fd:4d:62:a0:6b:32:d3:a8:87:2c:87:a9:e4:7c:
         20:a3:63:d8:6c:7f:e5:2b:34:33:18:03:e9:63:6e:b1:3a:29:
         b2:d0:9b:c9:b7:5b:c9:40:0d:f5:71:d5:56:15:b6:6f:fe:2f:
         3c:24:68:81:84:94:ae:51:1c:c4:17:5d:29:4f:d1:b1:b6:e4:
         67:92:c3:d0:c9:c8:52:ab:1f:12:ea:79:85:f2:18:a5:6b:09:
         2a:0f:f4:0a:eb:64:29:74:da:2a:94:bf:eb:96:a0:4f:fd:93:
         ad:e9:41:9d:2f:c1:56:54:f5:1e:26:c9:48:56:88:fc:d3:3f:
         f2:07:f2:35:f0:13:72:ca:2a:49:c0:cd:e5:ee:78:d7:fc:27:
         0c:6f:71:b5:02:14:56:0d:0c:e3:ad:a1:49:1a:b3:0b:f4:e7:
         07:a2:0d:c4:b1:e6:8e:86:87:b7:7f:a2:8b:84:d2:01:ae:c4:
         a1:38:92:63:29:42:2c:af:0a:cc:92:eb:5d:29:dd:a7:b3:99:
         7f:2e:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:04:01 2026 by rpki-client