Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File:                     4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier:          NSxSNoWH9lN31B8I27pWbtF5BOR0h/YjLwjf6sJgjx8=
Subject key identifier:   EF:69:EA:B7:04:9A:E4:DA:B4:BA:C1:F6:A9:71:DA:4C:78:43:77:DE
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer:       /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial:       01A0016F50612B9CEC8FC2447EB5C95B6F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number:          0CD8
Signing time:             Fri 14 Aug 2026 18:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:07 +0000
Files and hashes:         1: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: iuAijAyeumG1iEntVaMce2ppDp8DUi1c0GFH+vx6AOs=)
                          2: uZAkdvgnla4W0XfXq_LcU0XnYDc.roa (hash: yjPqez282iszAcd+/RqL31Peh6NQ/8RPBG85snT1+sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:50:61:2b:9c:ec:8f:c2:44:7e:b5:c9:5b:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
        Validity
            Not Before: Aug 14 18:01:07 2026 GMT
            Not After : Aug 15 18:01:07 2026 GMT
        Subject: CN=ef69eab7049ae4dab4bac1f6a971da4c784377de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:48:fb:85:74:44:4c:cf:9d:f9:09:7a:b6:
                    e3:de:cc:02:48:19:05:9b:16:66:12:7d:64:68:84:
                    3c:e1:6d:16:16:3b:89:43:f4:25:e7:5a:7d:29:08:
                    34:c1:eb:b4:79:dc:18:53:e5:02:76:74:dd:bb:ea:
                    4b:40:63:9b:ae:e3:ba:91:a1:74:51:a6:e4:82:c3:
                    17:b2:83:93:3a:cb:5d:2c:79:a1:7d:7f:b5:65:ad:
                    8d:1b:1f:68:72:59:1a:c4:93:68:51:76:bb:2a:2f:
                    a3:25:e8:ff:6a:5f:ce:42:a4:26:bf:6c:61:ef:cb:
                    79:20:d4:f3:a1:36:36:b5:c0:42:f7:20:12:4c:64:
                    d5:e6:9a:80:7a:43:7e:da:79:3c:8f:65:82:a3:3e:
                    f3:9e:f1:fd:a4:84:4d:94:50:58:5e:31:97:6c:3d:
                    34:80:3a:e5:db:f1:90:6a:74:8a:a7:61:67:13:66:
                    ea:80:98:40:e4:38:50:a2:63:c0:30:e4:44:c5:00:
                    42:0a:55:e5:27:b2:ac:11:96:4d:d0:d5:a2:6f:70:
                    e1:17:80:a8:92:4a:c7:dd:66:fd:be:cb:61:72:0a:
                    07:96:5b:67:64:06:89:8b:2a:e8:be:d7:69:91:a7:
                    30:52:9f:9d:87:b6:72:e5:fe:92:e9:5d:a6:a0:d6:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:69:EA:B7:04:9A:E4:DA:B4:BA:C1:F6:A9:71:DA:4C:78:43:77:DE
            X509v3 Authority Key Identifier:
                keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:b1:5c:8c:64:48:ee:8c:fa:07:e3:51:3b:9b:21:7d:79:
         f4:dd:c8:1d:85:a7:0b:a7:a7:4a:2d:8f:74:4f:85:97:fc:a2:
         c0:cc:db:58:43:0c:11:3b:05:96:49:f4:61:c2:86:e5:aa:55:
         2b:9d:bc:bb:72:f4:3f:a7:0e:81:e1:f0:b4:d5:19:0e:9b:16:
         c1:c9:bf:00:df:34:71:96:fe:fd:7a:92:4d:aa:20:c9:29:ac:
         7a:f0:b3:05:76:b3:af:0f:ac:0a:79:a9:cc:06:08:b1:38:42:
         cc:47:78:25:5e:9d:ae:03:7b:ae:8f:69:36:e7:b7:8e:85:d5:
         ba:e2:06:a6:a7:e8:74:18:43:45:1c:df:87:e4:b4:86:98:de:
         d5:65:48:bc:0d:be:43:ef:3e:ae:79:00:2e:26:9f:e6:99:5c:
         dc:93:47:05:bc:dc:f9:63:f0:93:54:3f:1d:07:71:c7:b2:4d:
         ef:7e:91:a4:a9:d8:c4:27:b3:89:17:fc:3c:2e:01:15:6e:c8:
         db:1c:4f:cb:da:8b:69:8c:22:31:2d:d6:ff:48:67:9f:0b:d9:
         d6:09:37:97:ed:e1:d8:39:6e:5d:70:76:94:f8:77:eb:c3:db:
         14:6b:04:f4:f2:f8:72:90:42:23:9a:83:20:56:2a:e1:a1:12:
         4e:00:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client