Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          S90vlRPJ5y3z12wyRwPrh7s+yk95BwrlziiWLasbIeo=
Subject key identifier:   C1:A3:E5:32:19:68:46:AE:49:39:50:EA:4D:CB:A9:78:60:82:C1:7C
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       01A0024B5C50BE71890D1E86C66B03F8217F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          15F6
Signing time:             Fri 14 Aug 2026 22:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:27 +0000
Files and hashes:         1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: ZWiquzXx0S6v8eVMfXOnosCsx4w0ArIPxT/BvIoaTiU=)
                          2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:5c:50:be:71:89:0d:1e:86:c6:6b:03:f8:21:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: Aug 14 22:01:27 2026 GMT
            Not After : Aug 15 22:01:27 2026 GMT
        Subject: CN=c1a3e532196846ae493950ea4dcba9786082c17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:1d:ac:33:f3:93:14:31:1d:87:65:3d:57:
                    a2:af:c7:48:00:58:9d:35:26:3c:1c:d6:f1:7d:31:
                    08:38:2d:ea:48:3c:e3:4d:46:84:ec:81:bf:65:c8:
                    cc:b2:14:5a:37:54:4d:b4:5c:40:1c:3a:ff:4e:98:
                    5b:bb:0a:9d:d0:ab:56:1d:42:ac:9a:d2:47:07:05:
                    7d:19:10:b9:8f:d5:78:20:df:49:ec:22:e3:7d:2c:
                    7f:bc:39:e9:19:cd:dd:49:b6:22:4f:e7:7d:b3:56:
                    8c:14:39:3d:21:65:26:8f:96:83:23:d3:92:a4:13:
                    6f:9b:18:3e:94:12:74:3b:f3:12:8b:7b:2b:77:47:
                    c1:9c:91:9d:9a:9a:58:26:71:f1:1e:04:f1:cc:91:
                    60:bf:78:f1:51:84:a3:e9:6a:f2:d1:07:23:28:49:
                    17:91:36:1f:7b:5d:f8:5b:b3:07:f3:a9:34:b2:60:
                    bf:7b:76:d4:d6:22:4e:27:40:2d:ec:5f:14:52:eb:
                    9b:0b:67:5a:8a:77:15:45:6f:9c:93:ec:ad:09:5e:
                    77:d5:b5:84:75:61:46:5e:41:ea:91:94:4a:e4:2e:
                    25:20:cb:ae:51:94:22:39:e0:34:ca:07:a8:c6:33:
                    54:bf:e5:33:d2:be:85:e7:e3:24:8a:6e:04:f1:3e:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A3:E5:32:19:68:46:AE:49:39:50:EA:4D:CB:A9:78:60:82:C1:7C
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b0:00:c6:55:f4:d3:8b:4c:f2:14:1f:af:fb:7e:89:92:a8:
         5d:0a:6f:41:d5:f3:6e:0c:1f:06:9f:14:37:79:9f:54:4a:02:
         00:d4:c2:3c:b9:37:13:64:ba:29:23:4f:24:67:0a:28:7d:5f:
         de:fc:63:0d:7c:2c:e7:6e:12:cd:b6:de:73:21:f1:e7:dd:12:
         6d:4c:8e:9c:bd:13:de:1f:f7:7d:c2:b0:59:b1:b1:63:a8:b8:
         f5:f1:48:38:95:2f:8c:a5:d0:cf:e4:e7:ec:1f:7d:a7:e1:0f:
         3c:54:fc:8f:f9:fe:be:23:63:b4:18:7a:ff:0a:52:a7:7a:64:
         0c:18:2c:54:7c:4f:b0:64:95:eb:a3:4e:d2:9f:50:dc:60:ed:
         78:90:94:85:f8:b8:1d:00:65:a0:70:b8:7e:7a:60:00:e9:b2:
         30:71:35:3e:a5:e7:87:16:95:3c:42:de:85:fa:4e:d2:6d:9e:
         f5:9d:8e:e4:36:8a:65:c1:14:eb:c6:ee:cb:31:a9:25:54:92:
         9c:a6:e9:8a:2f:84:c9:8d:fc:95:df:98:d3:a6:50:78:da:7f:
         5c:7f:e4:a6:50:48:a3:f0:29:d6:06:f7:8e:bb:e3:3a:7a:60:
         22:15:a2:30:fb:de:34:c3:23:ce:ce:27:9d:a3:8d:b7:2e:13:
         41:7c:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:05:54 2026 by rpki-client