Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File:                     cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier:          J1orIsLvbZWs/IlC8I+HdeXyovvGmBbglA2uCW3ppQA=
Subject key identifier:   6B:F0:FF:8C:D4:E5:B4:F0:E3:FC:1F:F5:62:C2:11:4E:99:37:2F:8F
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer:       /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial:       01A02055DD8C1AEAF932B1013C2117D590B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number:          1729
Signing time:             Thu 20 Aug 2026 18:01:33 +0000
Manifest this update:     Thu 20 Aug 2026 18:01:33 +0000
Manifest next update:     Fri 21 Aug 2026 18:01:33 +0000
Files and hashes:         1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
                          2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
                          3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: qQQziSQ6kpLKmLyX0hmfHSA8AmdZPHCHjR9d0ssq/Ro=)
                          4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 18:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:55:dd:8c:1a:ea:f9:32:b1:01:3c:21:17:d5:90:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
        Validity
            Not Before: Aug 20 18:01:33 2026 GMT
            Not After : Aug 21 18:01:33 2026 GMT
        Subject: CN=6bf0ff8cd4e5b4f0e3fc1ff562c2114e99372f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:f2:60:8a:99:90:07:dc:d8:73:fc:f3:70:
                    c5:e1:69:34:f9:3c:03:0e:2e:60:7b:23:aa:2f:16:
                    50:59:56:d2:dd:6e:78:11:a8:9f:72:6c:30:8d:e3:
                    93:8a:58:a3:3d:e0:2a:86:49:f4:56:49:ec:f9:0a:
                    16:43:17:db:62:8b:b7:a4:80:fc:d1:af:c6:85:8b:
                    cd:58:a8:78:fc:32:71:c3:4f:fa:7a:46:bd:e8:51:
                    9b:10:ca:30:97:d8:0c:17:95:fb:61:fe:5e:9f:d1:
                    93:aa:6b:83:f1:4e:55:f1:63:9d:65:a7:40:2c:38:
                    5b:2e:fb:3b:b9:a6:bd:89:31:5a:0f:de:fb:48:01:
                    77:f2:05:57:7e:00:b4:ab:38:cd:49:c7:04:74:5f:
                    ec:aa:71:cd:09:6a:d8:7a:9b:55:00:a1:82:2e:3a:
                    b4:1a:d6:a6:21:4b:9d:d0:91:90:2b:cf:19:85:ab:
                    c9:33:73:ac:f7:75:82:a3:32:48:78:92:0d:e7:52:
                    fe:e4:26:18:e7:cc:cf:32:ef:a1:8e:2d:b2:fe:bd:
                    43:71:a4:cb:3f:fb:75:6d:6c:5e:38:65:23:19:f5:
                    6d:15:a4:cf:1c:25:37:3c:9c:a1:f8:2f:6c:73:be:
                    d8:e6:c2:df:25:d4:03:b7:38:c5:f1:b6:02:6f:b0:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F0:FF:8C:D4:E5:B4:F0:E3:FC:1F:F5:62:C2:11:4E:99:37:2F:8F
            X509v3 Authority Key Identifier:
                keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:19:e8:6c:48:cb:fb:44:04:08:0d:17:6d:ab:98:5c:65:c4:
         01:d4:66:41:36:b4:64:7e:94:82:f9:88:96:b5:8f:54:d5:63:
         15:77:f4:a3:6a:ab:b7:0a:37:29:c5:07:0c:36:58:c3:e7:ea:
         8c:c9:5f:c0:90:77:c6:ec:4c:c5:5a:f9:20:93:07:9b:ce:a5:
         14:d9:c5:c1:7d:77:d1:07:9d:1d:2b:08:de:15:9f:c8:bf:69:
         01:d8:c1:d9:0e:bb:42:b6:cd:57:f4:d2:d8:77:a2:65:f8:93:
         6a:17:64:3c:37:20:b7:f7:ee:db:52:cd:77:ab:d7:75:73:fe:
         40:6c:ef:e4:e9:42:41:c0:25:74:46:15:bc:f3:b3:35:b0:08:
         6e:05:e9:71:b3:4b:db:58:31:da:3f:27:3a:10:38:b5:be:d2:
         ab:ad:4f:e6:86:8b:64:50:01:31:6d:f5:ab:83:f0:2a:d4:44:
         b1:e8:33:ee:af:58:d0:d0:fd:52:68:62:e5:05:a4:4c:ea:97:
         61:c7:2f:7f:31:ff:1d:4c:c4:4b:40:ed:f1:42:fe:49:cd:6c:
         34:e7:b5:4b:6e:85:6b:9f:55:28:92:74:a3:23:81:77:50:76:
         46:82:d3:19:12:14:b4:97:93:67:44:cf:8c:74:b8:b0:57:cc:
         3f:3b:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:32 2026 by rpki-client