Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          R/bSQzlRCRedhluB7ZVz6hND7q30Ycbe5akapBCeyNo=
Subject key identifier:   15:F2:10:B8:41:9F:64:49:9B:D0:55:0B:72:97:D0:D4:51:86:96:C1
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       01A001DD125B667E892A6D47AF120E878F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          10C1
Signing time:             Fri 14 Aug 2026 20:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:00 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: BCcRWNQbcgAPhlRi587aXxiHJbaJdz2aFwfvCfUNYzY=)
                          2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:12:5b:66:7e:89:2a:6d:47:af:12:0e:87:8f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Aug 14 20:01:00 2026 GMT
            Not After : Aug 15 20:01:00 2026 GMT
        Subject: CN=15f210b8419f64499bd0550b7297d0d4518696c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:ae:a1:69:35:4a:47:a1:dc:a6:3d:f0:f1:
                    97:a1:84:b4:1d:a0:ca:28:37:27:1c:bf:df:f6:10:
                    3a:0f:3d:3b:d9:6c:e7:c4:3c:90:1a:27:81:2c:e5:
                    04:c8:e9:e2:7a:e0:b1:a5:3b:4a:e1:99:c7:28:31:
                    dd:da:bf:95:dd:94:65:44:e8:9d:79:3a:60:00:07:
                    a6:5d:b9:ab:32:20:4c:75:2a:9c:71:27:c2:ec:fa:
                    48:de:af:11:5e:ea:59:37:17:b8:89:86:ce:1e:c5:
                    4c:e6:23:2a:1f:5d:b0:6f:ca:23:2a:7e:a8:cb:22:
                    71:0b:d6:35:fb:13:71:17:71:af:a2:5e:d2:7b:c1:
                    62:55:75:91:76:58:7e:00:1a:e6:f3:0b:2f:a4:ea:
                    97:e6:9f:04:01:29:9e:71:65:86:8b:9b:b4:b1:bc:
                    7b:76:0d:73:db:43:be:6d:94:86:c5:50:ea:41:cc:
                    b8:cd:78:bc:b9:46:1b:67:14:82:2e:1a:d8:b1:29:
                    15:35:7c:89:75:82:65:0e:69:4c:36:4b:f7:c7:63:
                    21:ad:8e:79:bd:29:23:d7:70:21:83:7e:8e:1a:44:
                    b1:bd:3c:19:6a:9f:c7:a5:b6:f5:69:fc:b0:5d:a0:
                    24:94:34:47:21:59:20:51:24:52:96:a4:c1:c3:ae:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F2:10:B8:41:9F:64:49:9B:D0:55:0B:72:97:D0:D4:51:86:96:C1
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:70:a7:b6:d8:bc:84:2b:83:57:73:db:81:d7:84:ee:81:b8:
         48:72:2e:1b:fc:46:50:22:d7:e6:d4:2b:eb:bf:cd:a1:45:28:
         9c:5c:29:68:5f:18:3a:8f:3d:c9:49:f1:8e:dc:c5:d7:df:40:
         14:44:3c:5c:f9:84:63:ff:9a:85:55:63:ad:03:85:c5:0d:f3:
         43:8c:16:b6:f7:84:f2:86:6f:5b:b6:10:16:95:f6:26:6d:c6:
         b7:95:db:96:76:b6:67:31:f5:54:26:03:ba:04:ba:e5:bd:8f:
         ea:5e:fb:25:85:a1:a8:e4:29:94:fe:fd:d4:8f:3b:f5:92:34:
         09:27:62:0c:1a:6f:87:b7:04:96:2d:72:e5:67:6a:36:06:ef:
         55:66:d5:57:bd:4f:3a:cf:f2:e6:4d:ca:01:56:d1:02:e0:fb:
         9b:35:71:12:1a:3a:78:2f:18:7e:a2:a5:0d:b8:d1:7e:61:5a:
         9d:cc:3b:f1:5a:0c:b7:17:3a:1e:a6:1f:fb:a2:34:0a:67:76:
         cd:ea:07:2b:f3:07:b0:49:0f:4f:4f:26:2b:10:78:3a:8d:fa:
         cb:82:64:25:38:76:5d:35:0d:ab:5b:33:2f:6c:f8:eb:3b:23:
         39:15:08:62:b2:82:e3:aa:0f:1e:88:fe:d8:c7:23:a7:af:09:
         8b:30:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:40 2026 by rpki-client