Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File:                     A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier:          CFeEc8I4Ga3jm3lMBUsl3yj7wxf0FAV2fKw1jEh+3rQ=
Subject key identifier:   38:1E:F0:33:10:A6:30:48:2A:94:05:4E:1C:90:24:4E:8C:FA:36:B5
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer:       /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial:       01A001013D0F3671B97B2037816D5F4DAD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number:          0F75
Signing time:             Fri 14 Aug 2026 16:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:53 +0000
Files and hashes:         1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: HVplk6i9bR+elQqyI9KqNbnt/JsTUpZkuHZfFZa+L70=)
                          2: C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (hash: A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:3d:0f:36:71:b9:7b:20:37:81:6d:5f:4d:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
        Validity
            Not Before: Aug 14 16:00:53 2026 GMT
            Not After : Aug 15 16:00:53 2026 GMT
        Subject: CN=381ef03310a630482a94054e1c90244e8cfa36b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:4a:73:6f:42:cc:12:e6:1f:5a:5b:12:35:
                    e7:a8:04:d3:f8:a4:0b:11:d7:13:dd:04:38:b6:a3:
                    8d:82:6c:0c:5c:c3:39:61:7b:1a:aa:c0:27:22:a4:
                    7d:d4:ed:9a:fb:e2:fc:bf:0e:e3:13:56:51:f2:92:
                    50:49:27:e2:00:49:68:72:4f:07:63:9e:4b:92:82:
                    50:12:34:48:ac:d2:bc:7b:fd:2d:92:78:39:fa:f1:
                    76:80:fb:62:be:c5:02:39:21:44:e7:b3:38:3f:4d:
                    32:ea:52:0d:07:6e:75:69:d6:32:60:bb:62:2a:bd:
                    50:98:a6:10:23:54:42:a4:28:ff:7f:a4:bd:d2:9a:
                    53:c7:f6:a1:48:6a:64:24:a5:8d:be:37:07:5e:e6:
                    e1:77:e8:d6:84:bf:05:59:b0:ae:e5:03:eb:8b:cd:
                    d1:8c:11:e2:a3:95:e1:86:33:4e:ee:61:98:58:d2:
                    55:61:ed:ec:32:c0:78:94:a0:de:f5:0f:f2:20:7c:
                    67:ae:08:68:2a:76:01:32:9b:fe:06:e8:bd:ee:0f:
                    b0:b7:f8:b3:ca:cd:59:e8:46:71:ec:b7:4c:c2:24:
                    03:8b:9b:cc:be:23:bf:58:66:34:5e:e2:2d:9d:4d:
                    96:48:4f:79:f6:65:31:2f:9b:56:b0:4f:61:bb:cf:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1E:F0:33:10:A6:30:48:2A:94:05:4E:1C:90:24:4E:8C:FA:36:B5
            X509v3 Authority Key Identifier:
                keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:e9:9c:bf:59:e3:11:27:bd:8f:bf:4d:2a:7b:8e:8f:71:
         ab:b0:6f:c4:4f:1e:d2:cd:5e:81:3a:3a:54:ac:21:e4:cb:5c:
         9a:4d:7a:f1:3c:2b:78:6a:99:40:8b:38:d0:ab:28:32:4c:6d:
         76:55:ec:9c:a4:18:a7:b9:c2:5c:85:e8:2a:03:ea:f9:72:70:
         e2:7d:bc:50:4c:6b:9b:0c:d1:7f:ca:59:bd:e8:f7:ce:47:cf:
         30:32:0e:d5:21:2b:4e:5d:b2:b3:f7:a0:25:b3:34:ea:10:32:
         24:91:88:93:f8:9d:aa:95:14:1b:84:61:5d:90:81:92:45:fb:
         b6:40:f5:76:92:dd:9f:0f:cd:c7:8d:56:cb:15:da:11:c6:dc:
         1b:2e:9d:12:59:36:22:24:65:ad:9f:95:49:77:35:78:a4:6b:
         b8:f5:12:28:0e:71:da:a9:f2:c6:36:af:fa:40:3d:70:08:75:
         85:4f:d1:05:37:c8:9c:3e:d9:c1:4c:4c:da:7b:5f:74:99:f1:
         db:e1:e1:ca:e9:4c:06:09:ff:ec:76:fa:41:cc:de:4e:35:c2:
         94:a7:9f:d0:ec:a8:83:88:28:fd:dc:60:30:9d:15:00:17:91:
         e1:9b:40:ea:54:ec:db:b6:ac:39:9d:40:ef:15:0c:9a:89:37:
         fc:17:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:57 2026 by rpki-client