Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
File:                     4XxkApvUiWrwp2rY2jPWtDTRDvs.mft (raw, json)
Hash identifier:          azUWpQ1OfsyZM/0KlV+vdKqtefvceNH+cm0C4C0pTqk=
Subject key identifier:   1B:C1:53:86:11:8B:DA:3A:9F:57:29:B8:C8:DB:83:EC:71:87:FB:97
Authority key identifier: E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
Certificate issuer:       /CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Certificate serial:       01A002F05BCFE2A19C18A841DA39D6202EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 01:01:41 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:41 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:41 +0000
Files and hashes:         1: 4XxkApvUiWrwp2rY2jPWtDTRDvs.crl (hash: NVbsx2rpwpd9HP5IUnZZgJvtbR/swATZuErQBilUS4c=)
                          2: FSSe1tEDCP5eij1O2L6qukAQDhc.roa (hash: xQCqNXwk7J8ALgUJnGIQA4t2bApXYtk3W+6tyFVQHYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:5b:cf:e2:a1:9c:18:a8:41:da:39:d6:20:2e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
        Validity
            Not Before: Aug 15 01:01:41 2026 GMT
            Not After : Aug 16 01:01:41 2026 GMT
        Subject: CN=1bc15386118bda3a9f5729b8c8db83ec7187fb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:a6:96:06:cf:e1:ca:78:6b:f6:19:91:15:
                    6b:91:c5:f4:3c:0a:81:b2:b0:40:5a:d9:2a:9a:2b:
                    1a:e7:16:12:e2:03:55:08:12:db:52:2e:a9:a7:9b:
                    c9:cf:17:99:a1:78:aa:f6:81:14:2c:02:0f:fb:55:
                    ac:5a:03:d1:6d:ee:c0:a9:0a:e9:f2:5a:b6:46:bd:
                    60:c8:61:93:f4:b8:b7:d4:2d:c1:27:7d:15:b4:94:
                    84:57:8c:9e:fb:4f:7e:61:a6:ba:59:8a:d4:c0:60:
                    e9:11:16:42:f6:9d:26:cd:ee:1a:fe:09:97:50:4f:
                    80:4f:8e:41:5b:29:5d:d0:09:39:f6:73:cd:44:1c:
                    ba:48:2f:aa:f2:82:12:23:c5:30:aa:c0:3e:c2:3f:
                    2a:58:2f:6c:9c:b9:c7:43:0c:64:86:1f:d8:9b:35:
                    bf:50:0f:68:44:b8:a5:b5:1f:b9:bd:1f:01:88:ce:
                    2f:c1:67:38:56:5f:0b:f7:73:a1:e7:0c:3d:3b:b7:
                    3b:f0:49:c5:30:96:84:6f:7b:3d:2c:b6:a2:66:04:
                    9e:7d:18:66:32:66:86:5a:5a:55:2d:7b:e7:d6:7b:
                    86:b9:47:1f:4b:47:b2:e5:f4:3d:56:a5:50:0e:c0:
                    e2:3d:6a:ff:94:34:be:91:ca:8b:62:f7:51:de:ac:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C1:53:86:11:8B:DA:3A:9F:57:29:B8:C8:DB:83:EC:71:87:FB:97
            X509v3 Authority Key Identifier:
                keyid:E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:30:af:5e:e9:6b:b7:c3:13:55:c3:4f:18:a5:7c:0c:00:
         05:6a:e4:f8:89:02:7e:9b:b6:b8:b2:39:d8:55:fc:0f:58:04:
         4b:d4:5e:fc:35:af:95:e5:1e:b5:d8:d1:ee:d0:66:2f:f0:fa:
         43:58:e7:f1:19:8f:0f:78:be:67:8d:53:c1:ce:be:8e:75:e2:
         7a:1f:99:59:7c:80:70:ec:93:09:6a:2d:0f:a3:22:21:90:7a:
         50:05:9d:0a:56:72:d8:51:72:e8:dc:70:ce:ce:b4:44:23:43:
         d0:23:b3:c6:6e:db:e2:f6:e5:84:96:e6:ac:3b:45:79:9f:41:
         02:49:40:a1:8b:4a:35:f6:4d:c1:91:98:2b:fd:58:14:4c:38:
         bf:e3:c1:e3:ac:bc:89:d1:d6:dc:bc:1c:8c:0d:c8:d9:05:5d:
         ca:1a:d2:2c:d6:2d:0a:7a:fc:8b:53:c6:ac:aa:84:cf:c2:a7:
         f5:9a:0d:0c:29:81:e7:03:04:bc:9e:b1:c8:f6:ad:e6:2c:d5:
         7f:62:7a:6f:83:6b:02:c9:12:a2:a3:65:ff:df:1b:7b:b0:a8:
         c2:df:50:4a:0a:8b:34:7b:fb:9e:37:9c:10:a7:4b:3c:e8:bf:
         b3:30:1b:c1:7b:5b:55:24:34:68:7d:d3:3e:ad:ef:a6:24:14:
         46:35:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:35:31 2026 by rpki-client