Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
File:                     RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft (raw, json)
Hash identifier:          TDccxA87iF0vkmwthZSjzQtUlnAls3nKCwefOVMhZrQ=
Subject key identifier:   27:C2:8F:F2:AB:B8:1E:B1:89:54:6A:79:C6:9F:45:80:5F:06:37:33
Authority key identifier: 46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
Certificate issuer:       /CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Certificate serial:       01A0016EC42A617654EF24C001FE17D07171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:31 +0000
Files and hashes:         1: A3vyQNFZmIIiVEvn821V3LPNqkc.roa (hash: 0mBujLmZOmOPTcByzEM0WftntYdLFr6SGaantjpe9Ko=)
                          2: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl (hash: jw1IPCdWEPWvkk4r5kiZlAyqG/t/fT3Z3QKU1e97fyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:c4:2a:61:76:54:ef:24:c0:01:fe:17:d0:71:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
        Validity
            Not Before: Aug 14 18:00:31 2026 GMT
            Not After : Aug 15 18:00:31 2026 GMT
        Subject: CN=27c28ff2abb81eb189546a79c69f45805f063733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:3a:9c:64:f5:5e:83:8a:44:04:f3:44:a4:
                    1a:d4:32:f3:a7:16:cf:d1:09:71:4f:0e:f9:5e:4a:
                    f7:e7:5e:f4:ec:4e:65:23:7f:45:fc:c5:b3:bb:e3:
                    ba:44:a7:9f:5c:0b:98:10:0c:56:d8:bc:91:2b:6f:
                    e5:ad:ea:13:58:15:47:03:f7:fe:12:a6:56:f6:de:
                    c5:df:d4:a3:46:61:e5:20:5d:60:c3:ed:bc:b0:c2:
                    4e:23:43:b6:04:49:64:60:fe:aa:29:91:21:4c:af:
                    00:e0:d2:ad:be:28:cf:57:9b:99:88:e5:87:20:ea:
                    41:32:ee:b0:ab:ec:1a:02:54:71:57:bb:bf:b2:eb:
                    ac:47:04:36:54:82:30:93:26:82:9e:60:2c:67:6b:
                    73:44:7b:20:ab:cb:32:b3:2f:5c:d2:ba:13:7b:73:
                    24:53:ec:46:83:ad:03:e5:8a:01:0b:58:86:a4:bd:
                    37:35:c3:99:4a:f4:00:3c:b1:18:23:81:3f:29:66:
                    53:b7:f3:4d:c1:0b:87:c3:f8:4a:f2:ff:9b:6f:17:
                    3d:35:7b:60:0b:78:a9:32:93:9c:b6:50:c3:e1:3e:
                    ec:8d:bd:32:00:d2:e6:e7:ab:ba:38:27:5c:80:90:
                    59:0e:7b:b3:ef:68:a8:cb:a0:bb:0e:4b:58:3a:d0:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:8F:F2:AB:B8:1E:B1:89:54:6A:79:C6:9F:45:80:5F:06:37:33
            X509v3 Authority Key Identifier:
                keyid:46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:57:66:56:a7:62:3f:b0:26:c2:92:c1:96:c4:de:8b:2c:
         4a:4f:5f:30:d5:57:5b:60:76:4f:d2:82:04:6b:21:45:9f:20:
         58:1e:cb:e4:f8:46:96:a3:2b:d6:4d:48:fe:bf:6f:14:b2:3f:
         3f:80:4c:fe:e2:ba:71:c6:19:6a:aa:cb:80:96:0a:bf:bb:c1:
         1a:c1:08:b1:44:ab:c0:7e:d2:58:e4:b9:6f:fa:ee:ed:55:b6:
         2b:91:9a:8d:ed:21:87:04:37:98:60:b4:c4:fc:60:52:73:b8:
         f0:9f:29:5e:9d:e0:99:6c:1e:25:11:82:26:c2:fa:7e:ef:03:
         9b:4a:4d:9a:1d:a8:85:29:64:22:b0:e4:c2:95:9e:05:8a:52:
         b7:01:91:2b:61:fb:37:1e:d1:3a:d6:42:56:3d:d3:d3:34:61:
         79:fe:42:f7:81:06:85:e9:d1:1c:51:b1:4e:81:a5:ef:5f:3b:
         2a:fd:fd:76:ab:39:03:2f:eb:15:05:c3:67:48:df:c0:09:e4:
         e4:b0:5f:c0:43:be:4e:ab:4d:1c:ca:ff:01:37:72:cc:1b:27:
         39:2b:3d:1d:5c:c8:b9:a6:16:46:38:a2:54:cd:a2:32:60:5c:
         5f:57:17:48:09:e2:d8:53:68:a9:b6:eb:77:70:3b:89:27:f8:
         96:ae:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:22 2026 by rpki-client