Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
File:                     s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft (raw, json)
Hash identifier:          ZlesMIYuTWWqQiUXBaLcq/tm162EMmcdgVdrjbFoLKA=
Subject key identifier:   43:08:B7:FB:57:78:31:F7:1A:48:40:F5:6F:B4:96:AA:D9:E6:CB:94
Authority key identifier: B3:94:42:F6:5A:A0:11:5E:B6:13:AB:38:2C:7E:48:73:F0:94:F4:A8
Certificate issuer:       /CN=b39442f65aa0115eb613ab382c7e4873f094f4a8
Certificate serial:       01A0024A85BF0B87387345C021D0EE02EC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
Manifest number:          7B
Signing time:             Fri 14 Aug 2026 22:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:33 +0000
Files and hashes:         1: Zx7ta9FTjec_p2jtXFF25Klln9I.roa (hash: U3Gh0cqZqaCBOfUs4nY1MHFOyoBpx1SuOO2bjlOIHvQ=)
                          2: s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl (hash: ce/a+C1htAzIgIa/iBHF0twWKiO5FwX2IRP/dgqk7Ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:85:bf:0b:87:38:73:45:c0:21:d0:ee:02:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39442f65aa0115eb613ab382c7e4873f094f4a8
        Validity
            Not Before: Aug 14 22:00:33 2026 GMT
            Not After : Aug 15 22:00:33 2026 GMT
        Subject: CN=4308b7fb577831f71a4840f56fb496aad9e6cb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:45:a7:d8:45:75:c5:ff:d8:b6:fa:5f:8d:
                    1e:f0:7f:4c:ca:e2:b6:1e:7b:8e:5a:7b:5b:91:31:
                    f3:3c:26:1f:70:fb:a6:34:50:22:cd:3e:3a:40:e2:
                    fe:64:98:e3:a3:c5:a1:85:ec:eb:d3:61:d2:ef:00:
                    a0:63:c8:e2:36:22:5d:2b:a3:be:26:ce:1c:39:37:
                    ab:d6:4b:24:18:4b:ff:a6:a3:f5:42:b4:3a:01:30:
                    0d:7a:4d:e7:14:84:6e:04:40:c6:42:4d:9f:fd:a9:
                    2a:5f:df:08:f8:ef:c6:e0:03:76:5c:01:f0:79:12:
                    be:5e:35:a6:84:a1:53:17:c6:e5:78:28:ab:e7:27:
                    d6:ac:c3:49:9b:12:ca:96:65:bb:b3:a5:0b:61:2a:
                    f9:e4:42:06:d3:2a:ea:fe:82:53:49:93:e6:07:ff:
                    9e:28:30:7e:f6:53:5c:78:a8:2e:97:fe:cf:c6:45:
                    c0:e0:b3:95:d3:f3:b3:2f:de:50:75:98:2b:19:ac:
                    87:5d:a7:c5:b8:16:14:fe:25:28:2f:b9:6a:13:d6:
                    28:c6:37:f9:f3:92:eb:c4:8b:11:33:f3:af:dd:24:
                    25:c1:ef:28:b1:c5:ba:dd:7f:cf:c5:62:53:0e:25:
                    7d:1c:63:29:2b:71:8e:f8:4c:93:db:b7:c3:b9:62:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:08:B7:FB:57:78:31:F7:1A:48:40:F5:6F:B4:96:AA:D9:E6:CB:94
            X509v3 Authority Key Identifier:
                keyid:B3:94:42:F6:5A:A0:11:5E:B6:13:AB:38:2C:7E:48:73:F0:94:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fd:4e:6f:ea:65:71:79:1c:f6:04:05:1c:51:ef:5b:78:81:
         09:fc:98:38:df:59:f6:88:d0:44:d7:3d:ae:c7:c5:3a:c2:87:
         a4:b5:a1:7e:8c:fa:aa:8c:56:0b:ee:2d:3c:1d:d3:39:3e:24:
         86:26:02:93:17:49:f5:86:ca:61:16:66:2f:11:f5:90:cf:7b:
         4d:81:ab:62:d0:ea:c4:88:13:32:52:38:b4:f4:3e:92:6d:9c:
         4a:47:06:c6:cb:70:f9:52:3e:66:5d:ca:6e:c7:13:7d:82:d7:
         f5:ca:2f:b9:0b:92:0a:17:ab:e4:35:d3:2c:f5:19:8c:a5:70:
         75:43:6b:0e:af:eb:4f:9a:6b:fb:49:0e:56:ce:ff:fb:3c:f9:
         a6:41:24:97:9b:89:bb:3f:73:f4:4f:99:7b:44:6b:ec:b7:0b:
         78:be:d9:e4:c9:f0:e8:ad:87:04:42:1b:5c:32:fc:4e:9f:be:
         26:01:af:c1:16:b9:b8:00:38:f3:6a:73:02:d8:68:7a:a3:de:
         41:b8:11:06:00:f7:41:24:32:c9:e6:ec:76:e3:c1:f6:4d:2b:
         77:b1:3c:52:a1:c7:d2:29:82:cb:0c:59:cf:13:c8:20:49:b0:
         a8:25:ad:c9:5e:a8:49:6b:b2:a5:42:8a:f8:3c:a9:d3:05:dc:
         a9:03:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:11 2026 by rpki-client