Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File:                     7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier:          gVOGhxTrnsvSgTj2YLQOpw5gqlhJC9dKnqhqJzoSSIM=
Subject key identifier:   5C:6B:EB:DB:2B:6D:E0:12:C1:2C:78:B5:5C:CC:5A:33:82:9F:91:34
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer:       /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial:       01A00137CE8A72D4A6FE556805775F60B967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number:          148C
Signing time:             Fri 14 Aug 2026 17:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:29 +0000
Files and hashes:         1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: z4H6sYZkUskAAquBzVOq6z5dTnVVSl8PtnbrsyGzOds=)
                          2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:ce:8a:72:d4:a6:fe:55:68:05:77:5f:60:b9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
        Validity
            Not Before: Aug 14 17:00:29 2026 GMT
            Not After : Aug 15 17:00:29 2026 GMT
        Subject: CN=5c6bebdb2b6de012c12c78b55ccc5a33829f9134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:88:f7:38:28:e9:72:1c:8f:fa:62:f3:83:
                    5f:62:e0:fb:25:77:91:c9:36:35:1d:90:87:dc:27:
                    05:ff:24:23:74:23:c7:0c:f5:9a:84:5d:76:cf:d0:
                    92:1a:5b:0f:af:e9:e7:45:62:f4:60:56:44:03:37:
                    7c:68:f5:53:4e:a9:23:93:06:23:71:7a:68:c7:f9:
                    01:73:24:2c:2e:56:f5:4f:fa:61:b0:9f:8e:fc:54:
                    d7:dc:41:6b:c7:76:d7:ab:04:d0:2a:15:c6:24:c6:
                    f0:8c:7e:28:e6:5b:1d:7d:3f:33:29:dd:cd:cd:24:
                    25:19:43:ad:54:aa:3f:d9:67:29:7f:84:57:95:a1:
                    fe:54:fd:a6:30:38:95:72:e2:d4:3f:43:5a:a5:6d:
                    e6:0d:ad:b3:1f:43:9d:5f:84:9c:97:50:17:d2:a7:
                    89:cf:94:d8:cc:5c:d7:8e:05:ad:55:6a:c5:e1:2f:
                    fd:e9:f8:63:d2:a8:6a:89:4d:d0:01:97:f3:ac:27:
                    e9:ce:9a:2f:9d:20:f0:8a:0d:2d:10:74:87:24:e2:
                    ad:8c:d7:87:e4:98:0f:37:f7:b0:0a:f7:25:2b:80:
                    04:b3:d1:0d:3c:20:76:f5:c0:5e:3a:8f:30:83:bf:
                    b9:74:ed:37:04:01:40:4f:49:31:1e:97:06:ad:42:
                    59:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6B:EB:DB:2B:6D:E0:12:C1:2C:78:B5:5C:CC:5A:33:82:9F:91:34
            X509v3 Authority Key Identifier:
                keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:bd:d9:67:a9:57:53:eb:9c:30:85:cd:a2:5a:3f:da:70:
         ec:bf:b4:b7:0b:1c:32:12:20:53:85:00:a0:b4:7e:8a:48:91:
         1e:0a:ac:6f:e8:3e:1f:7b:8b:93:61:72:95:a1:6a:0f:ac:31:
         59:5f:0a:bb:79:0e:f6:05:c6:86:0d:eb:6e:0c:65:a3:ce:bf:
         a1:b1:9a:26:a9:77:5e:91:1d:21:16:a9:9e:ca:2a:d9:23:4c:
         0d:63:07:58:35:ce:90:de:f6:71:71:2c:ac:94:65:37:6b:e2:
         63:b2:8e:2a:9f:ba:db:51:28:e3:91:a6:29:7e:67:3d:51:86:
         cc:89:ad:e1:9b:91:10:ed:90:20:a8:7f:a0:e4:07:84:39:35:
         4f:08:e9:9e:79:4e:37:2b:f7:d0:df:a0:06:c2:56:ab:bb:1a:
         ff:46:6a:5e:16:5d:05:2b:60:ef:1c:7d:fa:16:ca:fe:de:0b:
         6b:d0:34:01:e8:7a:5b:57:41:2c:90:a7:6b:8c:54:ff:a0:b6:
         f9:56:eb:7f:41:17:1c:5d:b4:67:26:7d:9c:7b:cd:21:db:56:
         d8:3e:e6:1f:1b:f6:1d:c3:fe:05:41:d1:e3:60:5f:4c:05:3e:
         d1:ba:39:fd:d3:00:07:ea:9a:44:85:d5:c3:46:d5:d3:08:6c:
         f3:ac:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:27 2026 by rpki-client