Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          hEOL6/wpT2CCxrSylYT3uE42Y1PJd1hzFB4gqLC3Ftg=
Subject key identifier:   1C:5C:AA:E3:32:21:B8:BE:C6:42:95:C9:43:BF:FD:2C:22:54:CC:00
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       01A0024B1B94CADA68314E3395691EB0857D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          11B5
Signing time:             Fri 14 Aug 2026 22:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:11 +0000
Files and hashes:         1: 0ZZBNy_4ZfeDGv0GZ4Y6WyBitiY.roa (hash: xrSAqsjvVj4VTaGXTAjpYZq+szPFsolHKq89Y8sv2SY=)
                          2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: HzMDG9KdhWquQrJEl1VhPG3rCm7uewylyXRYUX7GnsQ=)
                          3: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (hash: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=)
                          4: JB8yx2b88cSBO2zP8HmMFflCSbQ.roa (hash: ptfoSvZpsHgOB3p1UFy4y5riUES2ZHub67bxSsiN4pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:1b:94:ca:da:68:31:4e:33:95:69:1e:b0:85:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Aug 14 22:01:11 2026 GMT
            Not After : Aug 15 22:01:11 2026 GMT
        Subject: CN=1c5caae33221b8bec64295c943bffd2c2254cc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:0e:96:65:ce:64:57:76:48:70:f2:89:d7:
                    68:65:f9:5c:00:3d:a5:4d:bb:37:3a:94:2b:43:52:
                    46:23:af:9e:9b:3e:d7:b4:6b:54:b1:90:59:ac:42:
                    9e:79:fa:19:c3:90:37:cc:0d:55:0a:a9:e6:bc:a2:
                    fb:02:f4:55:24:06:60:0f:5e:af:09:d1:b2:06:12:
                    d7:c4:b9:fc:97:a2:cc:14:8f:0a:fe:3f:11:0b:7a:
                    90:49:85:95:5c:61:ad:a2:05:24:90:36:a1:3e:dc:
                    5a:42:da:0e:86:32:46:4f:1c:6a:61:f5:6b:74:4a:
                    a4:af:44:da:1f:9e:66:fb:73:c5:92:0e:c5:49:33:
                    97:d2:1e:a1:b3:6b:42:26:a2:d4:cc:d0:eb:64:2d:
                    3f:7d:73:36:b9:87:cb:4d:8b:0e:5c:6e:81:97:10:
                    56:e0:f6:3e:74:fc:35:a3:64:cb:b8:01:e7:50:58:
                    88:73:67:64:7f:92:63:7e:43:64:5d:82:74:d6:12:
                    48:ee:8d:9f:80:a4:af:83:40:25:2c:ee:a4:eb:fb:
                    ef:26:ca:aa:ac:7b:09:a4:e7:4c:c8:bd:f3:b7:8f:
                    a8:8f:2b:ee:ef:c0:f1:83:17:bf:38:37:8a:c8:4b:
                    b2:bb:6f:9c:9a:f7:48:9d:ba:bb:a8:62:d8:3f:00:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5C:AA:E3:32:21:B8:BE:C6:42:95:C9:43:BF:FD:2C:22:54:CC:00
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:06:1a:9f:72:4f:1a:9f:20:5d:22:18:89:b1:79:5b:77:a4:
         ff:6f:0f:42:b1:5d:77:91:53:38:67:37:4c:99:3f:15:f3:73:
         a5:02:fd:70:1b:6a:9f:30:47:fe:6d:a9:0e:c6:5a:1a:60:fc:
         9e:79:23:bc:48:db:1b:90:17:d3:5d:a9:be:c9:b7:98:ea:b6:
         eb:3f:f6:55:94:5d:ac:af:43:a6:aa:04:5b:7f:be:24:a6:05:
         e4:36:8e:9c:7d:73:73:15:25:c9:e0:0b:54:5e:93:95:28:9d:
         a6:89:f1:63:35:4f:8d:3e:4c:4f:d6:42:fb:8b:16:6e:9d:cc:
         b5:94:4d:6d:bc:fb:e6:ce:69:cb:33:2c:28:00:36:e5:6f:b6:
         09:eb:9d:cc:8b:97:2a:16:0f:8d:90:49:6a:85:ff:9c:77:5b:
         da:ab:6c:d2:a7:b5:aa:8e:b9:a6:02:7f:e0:28:0a:fb:30:b2:
         49:11:b4:0e:36:dc:7b:ff:ab:a7:ab:93:a7:b0:65:78:ce:f0:
         aa:8d:c7:5a:41:eb:c5:10:5a:ca:83:8d:2a:36:56:37:56:3c:
         ad:79:1c:8c:57:b8:50:ef:2c:31:5d:18:03:fd:b6:49:7e:08:
         78:21:17:6b:d3:4c:99:c3:84:c3:3a:26:ce:65:b7:fc:9e:b4:
         f3:af:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:19 2026 by rpki-client