Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File:                     0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier:          34wtGjXVR5g2NRA1W/ruBtkSlRMeJ5/cOQ2EnHPt7Tg=
Subject key identifier:   02:F4:C1:3B:09:C4:6F:1D:FD:0C:17:F7:96:AB:A6:8A:C2:B8:D1:62
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer:       /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial:       01A000CA6CB0065798B80AA5381D9E77C0FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 15:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:01 +0000
Files and hashes:         1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: 5K4aqALCH6iRutbnSNIrNzcUB8PwUsK5+CezKTwETg4=)
                          2: wsFDs0k_i43xFHAOdnBr2BMkzX0.roa (hash: TtkJrd9Ep6l68yC5CkOYpRhWIjpFiNmgnjq9PKBAW0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:6c:b0:06:57:98:b8:0a:a5:38:1d:9e:77:c0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
        Validity
            Not Before: Aug 14 15:01:01 2026 GMT
            Not After : Aug 15 15:01:01 2026 GMT
        Subject: CN=02f4c13b09c46f1dfd0c17f796aba68ac2b8d162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:a2:67:07:7f:f8:8f:7d:97:74:97:05:a9:
                    e4:4c:a3:4b:44:3d:f7:b8:00:cc:52:9a:0f:9e:d0:
                    1d:f4:ef:45:c2:7b:85:00:f1:a8:7d:6e:d9:b0:bd:
                    c1:12:35:9e:63:ab:ea:0b:9e:9e:5e:e0:49:31:2d:
                    e4:79:7d:fb:65:7e:b3:98:17:0d:ec:98:e4:0d:1b:
                    b6:bc:3a:25:fb:0b:52:ee:f8:22:67:2c:3d:96:a5:
                    42:ad:41:e4:bb:f8:61:b9:95:63:a8:c7:8f:9d:45:
                    47:55:e3:6c:fb:a6:46:18:4a:00:c1:6d:e2:c8:24:
                    01:52:b9:f5:9e:e2:62:fe:ac:70:5f:f5:8c:80:cb:
                    e6:36:bb:c8:30:69:6d:71:20:0c:ac:29:75:ae:27:
                    d3:73:71:62:6e:f9:5a:af:53:15:d1:b1:33:cf:39:
                    f9:4e:ea:a4:d8:6a:17:34:b2:52:06:1b:d6:16:1e:
                    27:e0:d4:8f:96:f3:c3:22:73:1a:f8:f7:b6:23:a5:
                    5c:99:8c:4a:2d:f3:bb:2f:83:5b:af:e2:ce:43:c4:
                    77:da:25:a5:88:7d:fb:fc:41:0d:56:61:93:5d:7a:
                    58:ac:b7:73:41:75:3c:7e:f4:ca:85:f7:7f:e2:2c:
                    9b:5f:9a:b8:31:2a:6f:a8:6c:2d:65:05:60:a7:c7:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F4:C1:3B:09:C4:6F:1D:FD:0C:17:F7:96:AB:A6:8A:C2:B8:D1:62
            X509v3 Authority Key Identifier:
                keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:b3:9f:be:db:4f:c7:41:ae:0f:05:aa:17:16:b6:c4:d9:
         34:ec:04:6e:6f:c7:fc:a7:8c:8b:69:3e:ac:36:37:f2:30:97:
         a1:54:bb:09:b4:f7:b0:13:59:a1:c3:55:16:0a:45:e4:53:9e:
         08:ac:e7:7c:30:75:36:b5:9b:84:7e:4e:53:8d:6b:36:ee:b9:
         0a:70:37:25:82:5f:73:43:58:22:33:74:b2:21:cc:5f:c7:79:
         ab:a1:38:96:e4:09:a6:67:b9:90:38:28:d7:90:63:6f:06:c2:
         cb:94:bd:29:ec:7c:f9:45:6a:fc:b4:bb:53:5b:d0:fe:b7:4c:
         33:28:ee:f0:c3:79:06:6b:0b:41:96:fa:24:a5:12:54:88:57:
         9d:2f:a3:78:13:a2:4e:e3:96:5c:2b:66:73:54:6e:37:e4:eb:
         ed:62:a9:b4:e2:14:6d:8c:1d:9b:1d:f7:51:f5:a5:c3:21:29:
         1c:03:e4:2b:31:ba:f7:ba:07:97:f5:da:7a:6c:86:e5:73:37:
         43:3e:58:de:84:23:f6:49:4f:87:45:6c:de:a7:ae:c7:ea:56:
         b8:8d:a6:7e:53:18:6a:97:e2:54:2c:de:42:99:3d:c9:42:88:
         df:cb:3d:e3:0e:c3:cd:13:94:c0:7f:dc:bf:00:2a:a7:f8:5b:
         2d:5d:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:10 2026 by rpki-client