Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File:                     0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier:          vxo3y5+HVVX0q4Di3WBqUW+iGSNZP0ojqqXEgeVCOHs=
Subject key identifier:   39:69:84:CD:96:BF:4C:98:D7:9C:6B:0E:78:80:C6:9A:13:EB:FF:6C
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       01A03E28842B1FF2195FA2D76FED3B762FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number:          029B
Signing time:             Wed 26 Aug 2026 13:00:37 +0000
Manifest this update:     Wed 26 Aug 2026 13:00:37 +0000
Manifest next update:     Thu 27 Aug 2026 13:00:37 +0000
Files and hashes:         1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: kdjolWaHzw3v1u1jPPnZi/FWWczcZUDeidIpjcnZBrM=)
                          2: s1Jjt-tBcyKiknkMR9c7tqEPn8Q.asa (hash: /XbNiEDTN73gQoBflBgmdW5BP0chC8iUmBm5htzhbzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:28:84:2b:1f:f2:19:5f:a2:d7:6f:ed:3b:76:2f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Aug 26 13:00:37 2026 GMT
            Not After : Aug 27 13:00:37 2026 GMT
        Subject: CN=396984cd96bf4c98d79c6b0e7880c69a13ebff6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:ef:54:48:b7:51:76:c6:d4:40:96:61:7e:
                    e1:81:22:1d:db:73:5b:fe:0f:8b:3d:a3:2c:5c:ce:
                    5e:d5:b1:19:36:b2:da:2a:a9:75:7e:4b:3c:93:82:
                    f7:93:fd:05:0b:18:04:ea:35:1c:e0:63:61:8a:f7:
                    19:cd:88:f1:bc:12:71:63:3e:20:69:60:68:5b:99:
                    09:d4:7d:14:c4:2e:a2:52:f2:a0:55:cf:71:59:3e:
                    d1:f4:d8:15:0e:f8:7c:0a:96:a0:f1:c6:dd:d8:fc:
                    88:31:74:c9:ed:ce:19:d5:21:2b:72:ec:fd:5e:1c:
                    c7:fc:58:74:e8:2e:9d:40:76:a0:b4:8c:08:49:78:
                    8c:2f:fa:d8:eb:b5:0a:9e:57:cb:00:fc:2a:bf:33:
                    51:a1:c8:85:9b:24:81:c5:27:f1:8b:50:a0:3e:bb:
                    4f:ae:cb:6c:a3:24:04:2f:9c:8d:73:6b:4f:bd:fd:
                    ed:df:be:70:84:7d:99:bc:bf:9b:a0:fb:9b:f4:aa:
                    a0:28:b1:81:5d:2b:48:59:05:e8:d9:8c:7b:9b:7f:
                    4c:0c:b9:af:3c:11:d2:7b:49:48:3e:75:9c:9e:50:
                    5e:d3:d4:46:8f:e1:0c:e5:50:57:06:cf:dd:b0:55:
                    06:57:4b:7b:92:c0:d9:ed:7b:81:b7:e3:b6:d6:31:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:84:CD:96:BF:4C:98:D7:9C:6B:0E:78:80:C6:9A:13:EB:FF:6C
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:e2:24:56:f8:3e:14:c6:68:2d:86:71:99:ad:a1:32:83:
         0a:51:84:31:64:e4:ce:da:60:a0:8a:70:e7:ab:8e:23:19:31:
         71:a3:2c:78:0b:52:ea:f8:69:23:c6:3a:67:2d:f0:18:b8:a9:
         4a:44:a7:7f:6d:bf:ea:16:00:94:99:c4:7d:cd:b3:01:96:9f:
         77:54:27:08:58:ed:5a:59:f9:bd:0f:ac:79:8c:7e:7b:7a:88:
         b2:2b:21:8b:22:72:ee:c2:4d:dc:6b:9f:3e:83:7b:84:7a:e6:
         ee:f2:39:df:1f:3e:ff:01:6d:d3:28:24:7a:8f:55:a1:92:de:
         b2:4d:32:96:c8:41:8f:39:95:07:73:c9:b0:fe:cd:3a:3b:3e:
         44:58:cc:35:e0:18:8d:64:a1:23:10:11:3d:a4:00:57:89:6e:
         85:b4:e4:2e:09:6b:b1:66:89:4b:33:af:89:12:24:ac:43:db:
         c4:af:7e:64:28:43:aa:56:ca:bf:71:16:3d:59:05:3a:f4:97:
         4e:07:89:ce:4e:d8:68:3a:8f:ad:56:b9:b0:b1:27:d8:80:a6:
         fa:db:16:4f:fa:c1:18:de:30:fb:c6:bf:64:17:65:44:7d:4e:
         78:eb:87:2c:67:43:ae:0d:84:24:cf:8b:83:1a:c2:48:42:19:
         87:01:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:44 2026 by rpki-client