Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File:                     70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier:          VTRfIB3lKu/O9GAmLbxIbPgfsYBiX2Mb2Tyzn01wjKM=
Subject key identifier:   2D:43:E0:A3:9C:BD:F2:F7:2E:63:BF:1F:2E:96:AE:49:74:F9:07:7A
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer:       /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial:       01A00093E2F5A96C549AADC8FD69867849DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number:          0E29
Signing time:             Fri 14 Aug 2026 14:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:26 +0000
Files and hashes:         1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: ji1Zba0Idz07Tk0MIOCkOC9Z4iEzgvUKFbZqlx1icV4=)
                          2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:e2:f5:a9:6c:54:9a:ad:c8:fd:69:86:78:49:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
        Validity
            Not Before: Aug 14 14:01:26 2026 GMT
            Not After : Aug 15 14:01:26 2026 GMT
        Subject: CN=2d43e0a39cbdf2f72e63bf1f2e96ae4974f9077a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:b4:6e:3a:dc:11:6c:8e:93:46:38:e3:22:
                    f4:86:a6:ee:b3:c8:9c:64:9a:ba:f5:37:64:e0:1e:
                    45:38:b7:94:29:95:c7:cd:52:24:11:93:6c:f8:2e:
                    75:87:58:58:0a:29:e2:55:79:dc:c1:bc:d5:9c:55:
                    94:93:f0:0e:98:20:82:b7:0f:bd:85:3d:29:f6:1e:
                    56:07:0d:67:aa:2e:c4:0b:77:e5:d2:52:1f:f7:b9:
                    de:8c:a7:95:5a:ec:87:8e:6d:ab:f2:a2:ed:2f:e9:
                    85:72:24:fb:4a:0b:b0:f9:be:5b:54:81:ef:2b:a5:
                    53:64:b2:c0:b7:65:06:e0:77:69:23:ed:be:f2:03:
                    f8:e5:dd:f6:37:9b:2c:c4:5c:b2:e6:c7:4f:9a:f6:
                    da:f8:cb:91:c3:f3:d3:35:31:60:37:73:e8:2b:ea:
                    ba:52:48:08:bc:bd:c7:8f:d7:5f:3b:6e:18:4e:77:
                    95:f0:21:37:35:0f:a8:ff:ce:b1:a4:23:9e:97:09:
                    6f:fc:84:88:d2:43:d5:b4:0b:a9:57:2a:9f:42:d7:
                    c7:56:f6:8f:da:df:e1:b1:b0:a7:cf:69:dd:ba:db:
                    6a:dd:b1:f1:97:97:5b:5c:c4:75:99:e7:73:b3:54:
                    d9:21:70:96:41:c3:03:76:0b:0a:32:12:c2:e1:4c:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:E0:A3:9C:BD:F2:F7:2E:63:BF:1F:2E:96:AE:49:74:F9:07:7A
            X509v3 Authority Key Identifier:
                keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:76:bf:20:f9:ee:9d:5a:7d:fe:1d:de:d9:1e:12:98:a8:13:
         a6:7c:53:42:0d:72:1a:1f:33:b7:d6:8d:2e:6d:21:e8:4f:ff:
         32:17:2b:e7:dd:8f:20:3f:82:b6:58:93:96:a1:85:72:cf:e0:
         51:ed:ee:03:a7:67:ae:07:6c:cf:60:c9:20:04:53:4c:63:3f:
         8e:80:28:9d:50:6f:2d:51:7f:95:48:83:97:0d:92:7a:23:96:
         f6:f8:2f:99:f0:37:e3:1c:7d:bc:bc:43:7d:79:fe:d9:74:73:
         46:87:34:61:59:89:47:cc:5f:b3:fd:36:0b:db:2b:ea:30:13:
         20:1f:62:8f:45:fe:ed:15:99:80:70:78:da:85:59:69:83:4a:
         59:8f:84:a9:06:e9:93:24:d9:46:3d:b8:90:5f:d2:05:4a:94:
         65:35:3a:e5:d5:49:a6:e3:85:e0:9c:6b:94:70:ed:7d:84:e9:
         65:e1:a4:2c:8c:5f:3e:6c:ac:93:bc:2f:c4:b8:11:c1:76:41:
         60:d6:b6:27:cb:9f:88:3b:16:1c:ef:6f:3e:6a:49:14:a6:1b:
         26:36:17:c3:52:ad:5b:bf:52:2b:56:d8:8b:a5:0b:be:f6:fc:
         9d:0b:43:35:0e:2d:f3:f6:d8:9b:ce:97:09:23:d4:5f:41:ac:
         00:b4:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:08 2026 by rpki-client