Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
File:                     xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft (raw, json)
Hash identifier:          QscZJXdzOdsLHiEnw6icmNCEvtT6xFiJJPbersX4z0E=
Subject key identifier:   20:85:52:77:2C:91:9C:5B:87:26:F0:55:27:2F:49:8E:F5:B9:A0:12
Authority key identifier: C6:A4:CE:AB:7B:D7:A4:E6:31:8E:85:64:BC:19:1F:EF:22:45:5D:DA
Certificate issuer:       /CN=c6a4ceab7bd7a4e6318e8564bc191fef22455dda
Certificate serial:       01A0035D5807F70F1CB12B551D918697F39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:00:44 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:44 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:44 +0000
Files and hashes:         1: ctAXjj0Li_yon5mxcrFJF9P0J9c.roa (hash: 61WBzGlddF31EQO7Rkzar1M7/fMyfdBYeN6+LONTBvs=)
                          2: xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl (hash: HMhMS9p93cYlH5vrUFwoZ6nGycLqak18yEaa88F6gMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:58:07:f7:0f:1c:b1:2b:55:1d:91:86:97:f3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a4ceab7bd7a4e6318e8564bc191fef22455dda
        Validity
            Not Before: Aug 15 03:00:44 2026 GMT
            Not After : Aug 16 03:00:44 2026 GMT
        Subject: CN=208552772c919c5b8726f055272f498ef5b9a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:c0:2e:35:5c:62:cd:87:45:56:02:c6:fa:
                    0d:ca:33:2c:f2:64:66:43:a2:a8:8c:61:0c:9b:22:
                    2c:54:88:2c:9c:31:7e:c8:26:90:0b:30:27:44:b4:
                    47:d7:37:3a:27:7d:a7:c9:b1:85:30:bd:f4:9a:1e:
                    79:3d:d6:ab:e0:7e:d4:1f:e6:2f:61:b0:9e:76:c8:
                    5c:9c:8c:67:75:43:67:c6:8d:22:8f:13:10:ec:0d:
                    ce:46:d1:b1:4e:6d:54:02:6a:47:c4:8b:1e:91:d2:
                    10:20:66:48:69:f8:87:9e:88:55:b3:d9:ff:88:02:
                    b6:dc:b5:5e:1e:6a:76:70:35:4a:50:01:87:7e:25:
                    aa:6f:8e:57:68:01:d3:37:b9:53:34:32:84:47:09:
                    89:da:db:2a:4d:3a:3d:27:0b:db:da:9e:dc:40:2e:
                    a9:96:59:1c:ed:0b:92:5f:40:ee:71:9a:2a:66:73:
                    6c:ff:28:02:92:9f:4c:81:62:b0:7f:6f:01:48:4c:
                    e5:cc:b4:ce:e1:1c:03:b5:75:4f:77:97:1b:e6:09:
                    9c:25:c6:1c:1f:4b:a3:80:19:b2:d4:e5:f1:48:ef:
                    2f:bc:b0:5d:b7:bd:a8:be:49:1b:2b:af:27:f9:5b:
                    b7:09:9a:aa:1f:f1:d4:7d:81:b4:e4:0c:e5:61:76:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:52:77:2C:91:9C:5B:87:26:F0:55:27:2F:49:8E:F5:B9:A0:12
            X509v3 Authority Key Identifier:
                keyid:C6:A4:CE:AB:7B:D7:A4:E6:31:8E:85:64:BC:19:1F:EF:22:45:5D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8b:a4:ac:b0:59:b9:16:2d:26:cb:18:5a:16:39:8e:6e:d8:
         e2:01:a0:8b:9d:71:01:93:fe:48:7f:66:79:d5:8c:8f:34:95:
         e5:95:63:b0:58:a5:73:7a:5a:f0:22:91:95:78:6e:c8:6a:1e:
         d8:75:d4:fd:33:89:56:f2:ac:d7:bd:88:09:88:3f:bd:6d:ad:
         27:c1:3d:8c:50:bb:fc:e4:a6:f5:b9:05:42:37:90:05:26:52:
         b6:43:3d:16:60:44:80:b5:15:6f:07:27:53:c3:12:9d:77:fa:
         22:c8:0a:7e:1e:7b:90:96:65:d9:45:72:02:88:1a:d6:ca:2b:
         84:88:3d:dd:b1:a3:94:88:62:5e:f4:81:2f:16:7e:52:e3:a8:
         c0:88:26:3f:56:ca:32:db:03:f5:97:40:7d:22:b6:07:d1:73:
         19:a6:ff:1e:00:57:0f:44:d3:80:13:58:a8:5f:ff:56:9c:4b:
         8f:78:7b:8b:6e:a7:01:46:e6:b3:de:83:af:1a:9c:fe:1f:3b:
         28:e4:9f:20:ae:54:01:a4:d7:78:c4:4e:56:b5:da:62:d0:8e:
         9a:c5:1c:60:e3:27:ce:c0:1d:04:95:45:38:e8:b9:ba:86:e2:
         b3:cc:a8:84:8d:2d:55:cc:5e:aa:f7:a2:5c:d7:d3:cf:67:15:
         6c:25:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:51:38 2026 by rpki-client