Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File:                     RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier:          JRgeJ6fMKhZxOgcUWIS5GXbDeBQSthwg/RT48ePYrIE=
Subject key identifier:   63:D6:AE:3D:21:BB:B0:ED:A4:50:FF:D2:7B:0F:A8:5A:0A:B9:82:20
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer:       /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial:       01A0024AF11F0003161982398EBE52FF8766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number:          033F
Signing time:             Fri 14 Aug 2026 22:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:00 +0000
Files and hashes:         1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: m4tPxLZf07NGacdw6kF/60WcSoZYuxvBA9oah8CI4Lk=)
                          2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:f1:1f:00:03:16:19:82:39:8e:be:52:ff:87:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
        Validity
            Not Before: Aug 14 22:01:00 2026 GMT
            Not After : Aug 15 22:01:00 2026 GMT
        Subject: CN=63d6ae3d21bbb0eda450ffd27b0fa85a0ab98220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:ce:08:6b:1e:03:88:d0:17:77:58:4c:62:
                    9c:58:5d:86:87:18:aa:56:72:fe:74:a1:8a:33:31:
                    c8:68:02:40:d6:ad:29:25:68:6b:00:d9:48:38:dc:
                    46:56:b4:c6:b5:c9:14:0b:a1:42:c3:d5:3a:8b:fc:
                    c8:80:07:89:d1:69:8d:22:33:0b:ce:23:49:95:cf:
                    d9:9d:23:b6:f7:15:71:21:9f:5a:5b:3d:26:3e:19:
                    a5:a4:65:c4:9c:b0:64:a1:b4:1e:c7:36:ca:8e:0a:
                    d3:84:1d:55:3a:80:15:3c:b5:1e:70:e5:cd:be:22:
                    93:9b:f6:00:ca:5f:df:7e:9f:59:14:e4:9f:03:d6:
                    41:4e:48:1d:48:e4:b3:b8:3e:c4:11:08:10:09:98:
                    48:dc:46:34:70:71:aa:e1:8f:39:62:c6:f4:d1:93:
                    0a:9d:82:c8:d3:d1:96:82:72:ec:d3:db:13:2f:1d:
                    7f:f0:fd:0f:bf:c6:79:5e:a8:96:ff:b2:4d:53:84:
                    09:7b:3f:8e:77:05:d1:0b:8b:d4:85:a1:32:52:a1:
                    39:ed:90:56:cc:98:5a:81:ca:9a:03:81:7d:5a:a6:
                    99:b3:ab:35:49:47:b6:df:3f:e7:47:b7:70:02:6e:
                    fc:b7:60:e5:6c:70:d3:f9:5b:bd:fc:4e:26:25:ca:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:AE:3D:21:BB:B0:ED:A4:50:FF:D2:7B:0F:A8:5A:0A:B9:82:20
            X509v3 Authority Key Identifier:
                keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:88:f9:bc:1a:ff:52:70:35:d1:04:7c:77:9b:c5:fb:e8:69:
         bc:0f:f2:aa:d5:eb:90:12:1b:d1:16:c5:65:af:93:ee:83:69:
         c5:a4:2c:c3:97:b7:e4:4f:09:64:98:ba:7f:fe:92:55:49:ae:
         a1:f5:97:33:db:e2:f5:67:bf:85:18:e3:b0:f5:42:99:ee:e2:
         ac:b5:25:80:6f:7d:df:7f:16:e3:c6:78:c0:d3:d6:29:77:20:
         98:fd:7a:98:02:d9:c8:7b:8c:35:42:cb:16:95:e2:5a:f1:b8:
         4b:e0:21:a5:7d:41:d5:6c:1a:30:87:b8:b4:13:e6:f2:2f:ee:
         40:78:1e:5e:f2:62:21:bd:78:56:eb:3c:a5:20:e2:6b:f6:8f:
         05:84:37:cb:3f:97:7e:ee:6e:7e:6f:b3:b9:fb:e0:c5:70:2b:
         27:41:4a:4c:79:29:05:38:56:cd:8a:9d:d0:b3:48:9b:91:4a:
         3d:28:00:57:0d:09:2c:8b:26:2b:d1:e7:3b:c6:7b:f3:4c:65:
         81:04:44:62:b0:ca:86:0e:f4:12:f8:ed:84:41:62:72:e4:a1:
         a3:1f:8c:15:ca:e3:4e:5a:6d:79:1a:6c:7d:15:98:29:29:61:
         25:34:af:71:03:fe:a6:0d:2d:57:28:5a:9a:06:f7:b7:b0:5d:
         26:a8:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:27:46 2026 by rpki-client