Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          0LL1XvL3dJSvv8hCsKsF9rjS27MCTDZJlMnU1hQANwo=
Subject key identifier:   AE:7E:9E:69:BE:87:93:33:A8:F0:44:AF:11:3F:60:F9:32:59:12:FC
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       01A000CA869D6AA8B9A445D80484487E7C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          09AA
Signing time:             Fri 14 Aug 2026 15:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:07 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: ZAgNsW0AgX3FW7wXjx3BnSC66B9XEri/WsJ3UlNe6Rk=)
                          2: 5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa (hash: 9owh74vfAaCJ/1OVELmifFfpJ8uxpYLTHNGPMitNfLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:86:9d:6a:a8:b9:a4:45:d8:04:84:48:7e:7c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Aug 14 15:01:07 2026 GMT
            Not After : Aug 15 15:01:07 2026 GMT
        Subject: CN=ae7e9e69be879333a8f044af113f60f9325912fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:11:b3:b8:0f:83:3c:aa:75:ff:a9:a4:88:
                    c5:ca:ea:c0:42:df:2c:bb:18:4a:21:a9:90:7f:df:
                    b1:0c:06:f1:62:38:c0:21:18:c1:b6:a9:96:ca:a9:
                    2f:2e:4c:23:1a:d1:2f:42:2f:38:61:d5:97:69:f7:
                    a5:5e:06:5f:fe:b6:ad:d5:4b:54:3d:11:10:0a:d8:
                    b4:0a:d2:db:b2:c5:6f:82:70:4e:68:de:1a:c0:49:
                    4d:d4:6e:25:d8:be:59:bd:96:60:a8:f8:7a:06:60:
                    03:33:06:7d:53:cd:ef:8f:9d:c5:35:36:4b:47:bf:
                    2d:fb:90:eb:ab:32:d2:14:ad:c5:23:26:58:59:d5:
                    da:ad:5c:f8:0a:b2:0d:20:98:5c:76:9b:cf:5d:cf:
                    77:51:02:2a:7a:45:a8:a9:85:df:50:24:db:76:d1:
                    8c:a9:6f:fb:91:5b:0c:7c:7a:79:40:46:41:a7:26:
                    65:ad:6b:20:06:2a:8f:d8:84:2f:a7:a3:86:4f:6f:
                    ae:e3:46:0f:a5:cb:e2:bc:14:f2:11:a9:a6:ff:41:
                    1e:f9:3b:79:55:c6:fc:05:a4:5b:4d:09:57:65:3f:
                    01:88:2a:0b:cb:b1:c1:72:0d:24:6a:84:d1:df:72:
                    55:61:3b:5b:5b:b1:07:d1:b6:71:e9:b4:ed:45:f4:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:9E:69:BE:87:93:33:A8:F0:44:AF:11:3F:60:F9:32:59:12:FC
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:0c:9a:dc:cc:08:09:be:4e:23:53:51:82:93:68:85:ed:
         89:e7:f2:4b:e9:e9:33:a5:56:cb:18:a4:e1:5f:d3:ee:b7:e7:
         89:b4:45:27:3e:5e:96:6b:0f:51:63:1d:d1:8e:60:34:0f:f6:
         27:64:80:86:ec:70:7b:84:f5:93:0b:d6:ce:f5:ac:62:d0:82:
         64:89:90:ad:e5:00:a3:ad:5f:da:11:0d:32:68:12:8e:17:4c:
         54:83:29:3f:f8:df:35:74:7e:79:c4:c5:83:cf:9c:73:1d:3b:
         a8:ad:ac:60:fe:32:72:3e:2c:0a:e5:c5:60:3b:f6:87:ff:01:
         c5:2d:72:da:e0:d0:00:6d:6c:53:f0:a7:8c:36:75:30:6a:5f:
         43:43:0d:ef:3a:ea:96:b6:27:4a:21:64:73:3b:ce:43:f3:c1:
         f9:18:46:70:99:f3:a7:05:7c:74:b9:eb:b2:14:e3:78:1c:fc:
         9e:32:dc:e9:00:e0:9a:79:2e:a9:99:aa:e4:36:7b:7c:8c:78:
         7e:79:95:b5:d4:1a:b0:6b:f0:9b:8b:39:c5:86:20:58:f1:0e:
         22:1d:40:7b:87:a2:6e:2c:8a:aa:9a:23:80:72:e6:d7:4d:9a:
         bd:69:2c:ab:92:c9:9e:30:6f:13:23:f1:46:20:57:10:16:36:
         c3:7c:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:54 2026 by rpki-client