Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File:                     SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier:          DPS/o16v91CavrBoZHeXg8cPzTgSL58j9e99ZWHXINM=
Subject key identifier:   59:44:F1:6B:83:87:70:F8:47:DE:A1:03:02:82:EC:21:78:39:FC:6F
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer:       /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial:       019FF97ED84C253B718C3AE88F2C7056573D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number:          01C6
Signing time:             Thu 13 Aug 2026 05:01:07 +0000
Manifest this update:     Thu 13 Aug 2026 05:01:07 +0000
Manifest next update:     Fri 14 Aug 2026 05:01:07 +0000
Files and hashes:         1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
                          2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
                          3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: qM/WLWL5jCE4V2349kfSFY5Ubl/m+iJQd984Q23myZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:7e:d8:4c:25:3b:71:8c:3a:e8:8f:2c:70:56:57:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
        Validity
            Not Before: Aug 13 05:01:07 2026 GMT
            Not After : Aug 14 05:01:07 2026 GMT
        Subject: CN=5944f16b838770f847dea1030282ec217839fc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:bf:9b:25:d2:a2:8f:34:01:68:26:78:f6:
                    de:a4:08:5a:77:5b:cd:61:eb:a8:00:73:f4:49:38:
                    fc:c4:e4:37:b7:5d:73:44:2c:07:df:e1:d0:ec:12:
                    ee:66:03:00:c7:0f:76:a9:5e:43:ab:3b:f6:d1:49:
                    68:67:6c:da:a4:9a:36:80:8e:23:79:f4:9f:b6:eb:
                    1d:27:de:d4:3f:26:af:63:8d:66:18:5b:c4:51:de:
                    c8:da:e0:f0:a9:13:f9:33:df:f3:1f:f8:0e:55:d0:
                    74:ea:84:4c:63:75:7d:0e:bf:8c:cf:a7:75:54:49:
                    3b:15:43:ea:7a:3d:dd:69:40:a7:a1:e4:27:fc:23:
                    ad:0e:6c:19:47:e3:07:2c:97:be:d2:18:e4:4d:00:
                    ac:0d:aa:52:06:28:a7:9e:49:13:17:1b:4d:33:37:
                    1a:d4:4e:c9:7d:24:6d:88:cc:5d:e5:b0:72:f7:94:
                    74:65:b8:55:15:fa:1a:8b:bd:9b:4d:2a:a4:63:03:
                    aa:40:5c:a5:9d:22:34:3f:2f:40:a2:7a:98:e2:03:
                    90:b4:10:30:2c:1c:75:79:39:6b:88:c5:fd:a0:d8:
                    5e:ea:52:b4:9c:a0:0f:01:a4:5c:a1:94:68:24:0e:
                    df:07:bd:65:93:bc:d8:51:5e:90:c3:dc:a4:c9:7b:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:F1:6B:83:87:70:F8:47:DE:A1:03:02:82:EC:21:78:39:FC:6F
            X509v3 Authority Key Identifier:
                keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:19:a6:ca:33:aa:19:ef:93:80:28:04:2c:d0:02:40:86:33:
         6b:91:a0:a8:7b:df:4e:26:0e:a8:ce:02:4a:36:85:9e:40:04:
         80:1d:cf:88:43:0d:d6:fc:0e:82:3b:74:76:5c:e4:f9:07:cb:
         b0:92:79:88:f6:14:82:68:5f:e7:41:15:89:09:97:f0:33:26:
         f2:c6:9e:7d:f3:cf:94:2c:1a:33:3b:cb:ea:47:68:79:20:55:
         8e:e2:83:8d:f9:ca:62:76:7c:f9:d4:1c:7e:ad:1d:56:bd:07:
         15:bc:80:a3:e7:c1:68:11:4f:6e:74:54:55:72:ce:3b:d7:1b:
         83:74:aa:4a:b0:e2:d6:e9:78:f5:41:79:da:df:19:ed:a2:d3:
         4a:dc:2c:89:f4:c4:d2:d7:51:06:6b:bc:78:45:6b:b7:32:8a:
         c2:d4:d5:e5:5a:5e:c8:39:fa:17:a0:dd:93:7b:ab:43:8e:99:
         22:8a:58:e7:9b:b5:fb:6a:e2:8b:f1:de:a5:2d:69:15:9d:7c:
         dd:ff:4a:5c:28:32:5b:50:56:5d:d0:fd:dd:97:17:31:2e:ba:
         36:59:06:75:7d:25:bc:c0:f8:27:73:fc:67:49:7f:ba:08:73:
         fd:b7:9a:f8:41:1a:b2:54:33:2f:1e:83:ec:5f:bc:20:46:44:
         04:87:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:07 2026 by rpki-client