Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
File:                     rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft (raw, json)
Hash identifier:          LdqgDqfsEOv7q8jNpXUJj5Dp8pPYjq4LoiBG+GfkY3w=
Subject key identifier:   5A:C4:FB:FD:E1:8A:06:26:1B:5C:AB:39:CD:2C:C5:B8:1D:E8:7C:91
Authority key identifier: AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
Certificate issuer:       /CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
Certificate serial:       01A0035DD8BAA7F070CBE60C6BF78CA3D35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:01:16 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:16 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:16 +0000
Files and hashes:         1: DgHq7702gPO0TTgEmkiefmf4EOU.roa (hash: V6OTSskB0p/4S0bZ6/704K0TtNz5fFItHvyb52CR0ks=)
                          2: rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl (hash: QoI/W0VrXpief5Z3n6gvU1sboxiuYIBUZf0ev8o/8qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:d8:ba:a7:f0:70:cb:e6:0c:6b:f7:8c:a3:d3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
        Validity
            Not Before: Aug 15 03:01:16 2026 GMT
            Not After : Aug 16 03:01:16 2026 GMT
        Subject: CN=5ac4fbfde18a06261b5cab39cd2cc5b81de87c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:d2:fc:80:44:bb:a3:db:d5:b7:02:73:9c:
                    8d:81:30:b9:b2:d2:02:14:da:95:10:3e:76:a6:b4:
                    05:21:59:1e:ef:c4:3d:7a:68:09:67:34:b2:22:db:
                    38:bf:33:86:3d:c3:94:a7:fd:14:5a:69:34:c1:9b:
                    bc:40:85:6d:95:99:98:07:57:f0:7e:30:fa:b9:2b:
                    36:83:0e:e5:af:05:b6:4f:1b:de:fd:ef:76:57:6e:
                    fe:c0:57:38:7d:77:ce:0d:17:b2:9f:7d:2a:02:a0:
                    9d:a2:b2:bb:c9:3f:e2:35:1a:63:cb:68:99:bb:9b:
                    fb:f0:5e:fb:21:87:5f:72:82:7e:26:aa:d3:fb:2b:
                    8b:68:03:9c:fe:10:a3:60:02:6e:be:79:e1:8f:dc:
                    06:85:fc:54:bc:e4:e6:d6:a2:c6:9d:12:95:ac:eb:
                    77:cb:a2:c4:3c:0a:14:bf:4a:82:36:d1:5a:38:e4:
                    ae:90:34:1a:4a:88:5d:79:ef:34:73:02:09:fc:43:
                    2d:3e:d2:e9:0d:c2:08:79:76:ae:7c:1c:15:54:68:
                    a9:67:64:50:e4:ff:88:94:12:f2:f8:42:92:c8:f2:
                    a4:12:4c:fe:8a:01:d3:ce:67:ba:4c:13:26:f2:7b:
                    00:5f:b2:94:eb:b2:11:ba:ca:46:e1:6e:43:01:cb:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C4:FB:FD:E1:8A:06:26:1B:5C:AB:39:CD:2C:C5:B8:1D:E8:7C:91
            X509v3 Authority Key Identifier:
                keyid:AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:e7:76:b0:15:5e:75:ce:35:5d:40:5e:3d:57:d0:13:47:
         f3:a9:37:a9:02:91:92:a2:c3:d0:2c:d5:9f:6b:a8:01:f5:3b:
         c9:5c:26:98:a6:35:04:ed:c9:8f:89:4b:98:f5:7a:d9:d0:33:
         e8:12:4d:d6:a2:f2:01:e8:61:ca:60:0b:66:f3:87:2e:c2:41:
         1c:91:34:a3:98:f8:90:e4:95:2a:dc:e6:e9:1a:7a:92:74:5a:
         ed:78:f9:4b:6e:ad:1b:30:d0:c7:83:e6:d6:32:c7:59:c9:53:
         58:19:76:e8:d2:ee:16:81:59:51:b5:f1:46:e7:e7:a2:46:10:
         bb:f5:04:77:64:2b:32:4e:17:29:ed:dd:42:ab:f6:0a:5e:2e:
         36:f7:33:3e:53:3b:3c:31:8d:e9:6c:22:7c:aa:aa:18:11:9a:
         8d:f4:ca:83:40:f2:14:be:56:07:85:ee:a7:34:32:92:77:c5:
         e8:bf:e5:24:b8:89:2b:42:82:34:73:95:bd:7b:63:dc:a1:9a:
         ae:8e:3f:cf:99:bf:87:bc:47:67:d9:41:8d:b3:6e:6b:9f:f2:
         ec:44:81:4a:65:3b:b5:aa:9f:e7:79:80:ef:fa:a7:14:62:f5:
         56:b1:7f:b6:d2:f3:96:64:6a:62:bb:ab:a2:ae:20:a5:c5:03:
         ae:7e:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:53 2026 by rpki-client