Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          l6i0iOT/CN8EWmpL9yhXHxxl4b/vGPFRQ+0jOCzKSlg=
Subject key identifier:   17:A9:E0:62:B0:52:DA:52:3C:11:B2:70:5F:0B:53:80:86:CB:3D:5A
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       01A001A67316C9BA633F9369594EF04AF30E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0E75
Signing time:             Fri 14 Aug 2026 19:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:20 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: sgEYO+JKShhQD8hPI71pdDYxbeAmqHgLlx19Uj/9lNY=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:73:16:c9:ba:63:3f:93:69:59:4e:f0:4a:f3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Aug 14 19:01:20 2026 GMT
            Not After : Aug 15 19:01:20 2026 GMT
        Subject: CN=17a9e062b052da523c11b2705f0b538086cb3d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:81:35:77:1b:33:19:95:21:3f:e3:d2:20:
                    ad:06:15:67:6b:85:2e:eb:ca:e5:0d:20:d3:c1:1c:
                    29:1e:4e:0c:b4:66:d9:ee:38:1c:28:7f:50:6b:1b:
                    e8:1c:f3:68:44:61:c8:39:3e:41:0b:07:90:29:1a:
                    41:15:ea:00:8f:fe:f4:7e:00:3e:ae:52:e2:25:60:
                    36:06:64:ac:2f:27:92:56:6c:5b:eb:26:0d:26:e2:
                    d5:91:45:23:ff:63:a0:ac:49:d0:fd:c1:1b:0c:0b:
                    f4:99:e8:e7:7d:5a:85:44:14:fd:52:54:d6:e4:88:
                    d2:6c:cc:47:42:71:7b:dd:4d:90:33:c9:44:2a:3c:
                    0c:b8:ce:d6:e8:0f:94:eb:bc:d8:51:c0:e3:a0:a6:
                    1e:c5:e8:70:f9:34:ba:af:1c:23:16:35:53:79:1e:
                    a1:0c:fd:16:83:24:97:3e:b1:72:04:6c:77:5c:0f:
                    04:e1:05:d2:0e:d5:63:e8:fb:21:15:17:b7:c0:bd:
                    16:93:ab:8f:04:66:15:07:eb:fc:08:df:26:da:12:
                    dc:04:e7:02:58:ce:c5:56:fa:75:e6:3e:92:38:36:
                    1f:42:78:63:b7:13:cf:bb:59:78:17:2e:55:7a:91:
                    ce:ba:36:b9:56:2a:3d:91:8d:d2:de:cb:57:04:30:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:E0:62:B0:52:DA:52:3C:11:B2:70:5F:0B:53:80:86:CB:3D:5A
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:d7:fe:6b:c6:74:dd:1d:96:03:27:6e:59:50:c6:71:e0:
         15:16:46:23:0d:f4:f6:df:fa:53:5b:b1:35:b6:78:68:db:d2:
         c5:68:45:fe:22:38:8b:55:fb:d6:23:b8:9d:5b:18:e4:59:0c:
         40:6e:8d:fd:07:34:79:d6:14:9e:04:e0:2d:a3:5b:86:5b:da:
         f6:c0:2d:f9:04:b5:34:89:02:ef:59:37:fa:27:74:2e:ba:05:
         e9:ff:da:06:75:86:24:3c:6e:36:19:e6:c2:ab:a1:28:a0:76:
         41:c1:7c:53:50:9a:93:eb:43:58:db:60:5b:00:34:91:75:fa:
         75:ef:ba:bf:02:35:f5:48:d9:ba:49:b5:f3:fe:60:bf:34:ba:
         e3:c6:c7:12:a7:f9:a2:98:6b:ba:60:d1:ff:de:4f:6e:ce:e5:
         42:f2:9e:56:c6:2c:ff:cc:ce:37:79:25:ce:65:0b:0b:18:f2:
         c7:0e:92:77:a9:23:ee:52:a2:d5:17:95:ad:8a:21:be:99:e4:
         ee:88:96:23:f6:f6:ab:c5:1d:2a:71:a2:ee:6f:57:56:41:f1:
         8e:d4:3a:fe:61:47:41:e3:3f:8e:04:d3:8e:59:6b:50:0e:86:
         a9:4b:a0:87:a3:7b:80:37:62:7c:88:04:93:24:17:3a:55:b5:
         58:20:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:54 2026 by rpki-client