Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          JroFSof2rZJEVP5qjHJYEUzz4B7K1yezd7MhAIyKjMs=
Subject key identifier:   6E:62:26:13:77:D8:F3:55:1B:E0:8C:A6:40:87:94:9D:4A:15:AF:DE
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       01A0005C0F09DD5A2D666DF3AB117F10D90C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          061F
Signing time:             Fri 14 Aug 2026 13:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:28 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: BD/IIPIqF1Jt7/VBFo6gNeWMBRHLI+yBZbryasE5C8o=)
                          2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:0f:09:dd:5a:2d:66:6d:f3:ab:11:7f:10:d9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Aug 14 13:00:28 2026 GMT
            Not After : Aug 15 13:00:28 2026 GMT
        Subject: CN=6e62261377d8f3551be08ca64087949d4a15afde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:a1:fb:26:81:15:e8:df:a1:36:b2:77:5a:
                    58:20:a0:9f:81:05:2a:cc:85:df:51:f2:ce:76:84:
                    66:a4:f4:fb:08:ef:2e:a3:08:49:2a:11:ae:2f:3a:
                    08:57:0d:31:33:e5:3e:51:27:f5:0f:50:b5:73:8a:
                    f4:38:89:c0:19:1d:0a:0e:ee:26:ae:32:35:de:5b:
                    5a:df:53:b2:13:62:b4:51:c1:2e:de:8c:4c:ee:99:
                    08:4d:ec:9e:e6:3c:c4:00:fa:82:c1:ff:ae:92:7b:
                    19:81:f5:22:07:07:4e:e7:3a:74:66:94:d7:53:6f:
                    28:7a:0d:00:80:6a:7a:92:9f:27:2f:67:63:90:b6:
                    09:06:02:18:d1:1c:99:c4:c3:b3:c4:e9:72:5c:5d:
                    d1:f6:ef:5b:ee:a3:3d:f4:6b:80:c1:4b:f8:57:3d:
                    76:f8:66:1d:18:0c:7a:1d:1d:8d:68:0e:e4:e1:2b:
                    4d:5d:c0:89:54:25:d8:88:6c:bd:f4:8e:b0:cc:a2:
                    12:46:f2:2c:87:f6:85:a6:2a:9d:f6:bd:97:ce:38:
                    98:9b:fc:0f:5e:92:15:05:f5:2d:0c:a7:79:00:8e:
                    e5:be:0c:94:0c:27:f8:4f:1b:70:64:60:6d:f7:01:
                    6d:a2:5f:c8:7c:df:a1:c7:66:e7:b4:2d:5c:9f:ff:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:26:13:77:D8:F3:55:1B:E0:8C:A6:40:87:94:9D:4A:15:AF:DE
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:84:03:c8:b6:7d:93:1d:96:56:c9:4a:e4:16:6a:e4:af:28:
         5b:93:da:ea:9d:11:f5:30:be:a8:78:81:10:13:b4:6a:bb:23:
         0a:a2:77:24:eb:c8:6e:69:72:fb:c8:3f:8a:a5:aa:e8:32:21:
         ec:63:48:b4:2b:3f:48:a4:cc:a4:58:0b:06:0c:29:cc:cf:cf:
         99:f9:0d:60:a3:7a:44:af:3e:02:80:ae:bc:75:b9:a6:f9:9b:
         f2:e4:5a:6e:bb:b7:35:5c:32:fb:51:9f:4d:56:e0:d2:93:c0:
         24:55:dd:c5:e1:31:bd:f7:63:c3:d3:b3:63:ed:11:c5:a5:09:
         55:0a:3e:97:6a:66:a8:e4:ae:7b:db:d1:8d:06:41:48:7d:56:
         35:f5:70:ab:64:85:e8:3c:1f:ea:91:79:32:a1:35:bf:31:5f:
         1b:e5:22:c3:ac:6e:36:b8:a0:3e:d8:a3:8d:40:bc:69:84:43:
         d4:28:65:dd:97:e5:9e:10:b8:5b:49:11:7d:9f:8f:f9:06:eb:
         98:0f:5a:c2:44:a7:ba:e4:2f:db:e4:23:73:e8:fb:25:18:57:
         ad:d2:50:24:00:93:3a:6c:a9:09:34:d2:7d:3d:ed:dd:bf:14:
         11:5b:47:a0:3b:a2:f5:74:29:bc:3c:f5:0b:69:a2:97:4a:b1:
         d2:da:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:32 2026 by rpki-client