Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File:                     pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier:          EX/TdpVQhXk3XjQ3puol0Ul1paXQMZQZdP2ftmDf+0A=
Subject key identifier:   95:59:3E:FF:89:69:84:C1:8D:08:29:51:68:DC:5B:C3:52:D5:19:71
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer:       /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial:       01A020F9B47B314F578D6524B72C64CBEC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number:          043B
Signing time:             Thu 20 Aug 2026 21:00:30 +0000
Manifest this update:     Thu 20 Aug 2026 21:00:30 +0000
Manifest next update:     Fri 21 Aug 2026 21:00:30 +0000
Files and hashes:         1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
                          2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: XueLS6/tSWZGKRWSecp4ZGV3uAB8CraPRcAXjtQ80UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:f9:b4:7b:31:4f:57:8d:65:24:b7:2c:64:cb:ec:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
        Validity
            Not Before: Aug 20 21:00:30 2026 GMT
            Not After : Aug 21 21:00:30 2026 GMT
        Subject: CN=95593eff896984c18d08295168dc5bc352d51971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:81:94:bc:7b:19:67:85:e2:7d:37:d2:1e:
                    47:49:39:27:bf:ef:bf:9b:21:4f:d8:e0:95:aa:ff:
                    95:d9:11:c0:2d:06:cc:4b:cc:7d:a3:67:52:73:5f:
                    22:dd:b4:59:2a:a4:e8:d9:b3:0f:a6:0f:94:f5:a5:
                    46:4b:24:c3:1b:0a:ac:07:7a:d7:85:b4:9f:43:e6:
                    84:35:7d:cb:36:c2:86:f0:f0:46:7e:63:f7:85:68:
                    54:79:09:19:6f:d3:fc:e3:e2:13:10:4a:db:c4:27:
                    40:ec:44:6e:9b:05:39:bb:ef:c8:0e:61:3c:51:4e:
                    b8:bd:d2:e4:17:ca:dd:9e:22:ef:88:10:2b:c4:b2:
                    78:f0:e4:43:1f:fa:c0:3e:6f:f9:ad:ee:52:82:d3:
                    fe:af:b0:1f:3d:15:50:b2:a9:c1:55:44:77:fc:26:
                    19:b4:d3:30:05:18:af:fc:1d:8e:7a:ac:db:8f:44:
                    6f:41:51:3a:ec:77:b1:1d:a7:a8:a5:00:d3:b6:a2:
                    f6:70:48:71:9a:19:6f:e4:db:12:f2:cf:96:37:eb:
                    13:ab:9f:2f:1b:a7:31:6f:94:df:93:3c:36:39:ef:
                    e3:97:2d:f9:c8:27:e5:cc:52:62:87:b2:1d:7b:89:
                    e1:c2:ba:11:61:39:c4:f8:11:60:0c:0d:f1:be:2f:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:3E:FF:89:69:84:C1:8D:08:29:51:68:DC:5B:C3:52:D5:19:71
            X509v3 Authority Key Identifier:
                keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:c3:fc:92:79:38:e6:31:26:e7:01:6f:44:c6:28:69:24:
         3a:bc:da:72:4c:d8:63:44:c0:46:c6:4c:01:d6:42:e9:79:b1:
         cd:91:4d:7c:95:9f:ae:eb:30:f0:c9:43:f0:3f:46:26:8b:2d:
         06:8d:7b:24:3d:ce:a9:79:fb:21:53:58:82:39:b2:e6:b3:bb:
         4f:97:17:ba:eb:3b:f4:5a:b8:d2:1d:a1:45:1d:a4:5b:8c:8e:
         f5:70:84:c8:d8:55:a6:7e:bd:28:b4:a6:bd:0f:79:5e:15:2d:
         82:ad:f6:1a:22:b4:bb:80:5c:b0:b7:9b:25:f3:af:27:c3:81:
         81:25:7d:b5:39:5b:d8:b7:e2:00:2b:e0:97:44:ce:d2:1c:00:
         e5:75:1c:3a:5d:7b:64:54:29:2c:05:3c:8d:ba:68:d0:84:30:
         76:b2:ed:99:41:56:35:b5:ac:e9:52:f5:1e:6a:32:1b:3e:18:
         8a:77:c9:07:58:28:32:b9:23:0e:05:4a:ee:69:e4:d7:13:4c:
         fa:11:90:15:57:2a:02:8d:f5:7d:b6:21:39:c8:74:ca:af:f0:
         06:85:e5:1c:76:50:f8:52:d8:60:9e:8b:75:c4:7b:df:cc:8e:
         1c:c0:09:07:d8:0e:4e:9a:c1:b6:70:fb:4b:db:05:34:b3:85:
         33:c5:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:06:58 2026 by rpki-client