Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File:                     pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier:          TRnzlXrc9AQB3mrYZjFz7XAd057jbw3y/I5YMp/L9+w=
Subject key identifier:   4B:13:27:FB:F4:F1:6B:01:2F:04:28:8D:6F:6F:F2:75:82:62:79:CD
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer:       /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial:       019FCD81FA39A1795E7F836BE397A8826DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number:          0681
Signing time:             Tue 04 Aug 2026 16:01:15 +0000
Manifest this update:     Tue 04 Aug 2026 16:01:15 +0000
Manifest next update:     Wed 05 Aug 2026 16:01:15 +0000
Files and hashes:         1: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (hash: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc=)
                          2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: E8tIZWBKxsuw06PqWYtDUpe85oQ19fxQEG28tIUfE9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:81:fa:39:a1:79:5e:7f:83:6b:e3:97:a8:82:6d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
        Validity
            Not Before: Aug  4 16:01:15 2026 GMT
            Not After : Aug  5 16:01:15 2026 GMT
        Subject: CN=4b1327fbf4f16b012f04288d6f6ff275826279cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:87:13:a9:b2:1b:d6:d8:77:5d:fc:07:07:
                    d1:f4:1d:64:fa:22:ca:3e:20:0b:1d:88:3c:a4:76:
                    48:73:0b:a1:50:86:af:36:e3:fa:0b:a7:d2:e8:d0:
                    6e:d3:99:41:0b:c1:87:92:7f:a2:57:d1:82:23:d6:
                    62:28:11:e2:89:d0:51:4a:d3:7e:8a:a5:fc:38:a2:
                    32:02:22:f1:23:05:ee:bf:6e:29:e7:75:95:25:0f:
                    16:50:3a:b7:9f:d1:1a:05:6c:d7:7a:71:20:05:ab:
                    d2:f2:92:73:66:4d:ae:e0:03:ad:ee:66:cd:92:5e:
                    8d:05:f4:78:2f:2f:9e:3e:64:7a:dc:5b:82:2c:fe:
                    31:7c:39:27:41:7b:7d:47:3b:7d:f9:ae:26:88:1f:
                    5e:cc:1b:4e:a5:af:e3:73:3e:de:29:d6:89:c3:71:
                    e1:97:64:3e:9b:d8:ad:f0:42:5f:c1:5b:bd:0e:f9:
                    46:13:68:4e:43:74:f7:02:83:df:c9:6a:25:a5:7b:
                    46:e3:9b:5c:bc:63:5a:ff:e2:ce:23:bc:35:65:70:
                    c5:37:3d:29:07:d5:6b:44:ad:03:60:50:af:a3:01:
                    d3:65:ac:cf:76:dd:46:e7:86:f9:5e:b7:7a:3b:50:
                    e5:fd:1f:a8:f1:d8:97:f5:b2:9a:50:30:86:a0:c0:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:27:FB:F4:F1:6B:01:2F:04:28:8D:6F:6F:F2:75:82:62:79:CD
            X509v3 Authority Key Identifier:
                keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:71:a2:8f:24:86:db:dc:3c:f2:5f:53:ed:20:3a:80:cc:59:
         43:4a:92:7d:eb:d9:ec:07:85:11:d7:e5:ed:47:91:81:08:98:
         2b:f5:f8:eb:7e:38:03:1f:ea:74:d9:33:a4:0e:f3:ac:1b:0c:
         05:72:b2:23:33:cb:6c:36:36:f7:40:5e:32:72:7b:e1:3a:32:
         c5:7a:0f:e7:e3:6c:7b:5d:4c:1c:49:cd:51:08:63:48:b3:9e:
         ed:bf:16:a7:86:10:b4:f9:1b:bd:98:4e:7a:86:8e:bc:fc:e8:
         a7:28:97:f4:65:d3:ee:63:c2:13:86:c1:3d:10:fb:04:3f:d6:
         59:15:68:c6:16:e3:36:29:6f:d0:69:cf:0c:74:14:79:f6:97:
         0f:8d:71:3f:09:d6:e2:c2:b2:64:72:2f:76:e8:f8:dd:b2:09:
         52:39:34:f3:28:c5:36:d4:21:d8:c4:0c:90:bd:e3:f8:b8:af:
         93:23:d0:b0:7d:63:3f:3a:25:8e:b4:6c:6f:f6:c5:15:03:2a:
         f6:40:2e:0b:80:94:df:15:d7:53:0a:20:93:ec:5b:80:7a:fd:
         4a:34:97:90:ee:0d:ec:2f:be:c9:33:48:69:16:c2:af:7a:06:
         2a:8d:49:a1:e0:c1:ec:ec:f0:a4:1e:3d:9b:35:41:f9:84:37:
         3b:df:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:54:41 2026 by rpki-client