Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          yOcX9Wt1RtwlGMg2ZZqkHF0R2uKHAKva7Rwj55pB4qA=
Subject key identifier:   CE:EB:43:B8:EA:C2:B6:E9:7A:24:C0:96:28:79:D9:4F:98:07:71:A8
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       01A00213F8E1C346515B96C34740E6940960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0EC1
Signing time:             Fri 14 Aug 2026 21:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:58 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: bFaE2GXkkh5yxDw/LEF0Dt281cegZDEXAZgwMcfaqUk=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:f8:e1:c3:46:51:5b:96:c3:47:40:e6:94:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Aug 14 21:00:58 2026 GMT
            Not After : Aug 15 21:00:58 2026 GMT
        Subject: CN=ceeb43b8eac2b6e97a24c0962879d94f980771a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:1b:53:ec:78:5d:ed:88:b6:e2:ba:0b:53:
                    c3:89:f9:ed:53:ff:87:70:81:04:cd:cf:9b:55:60:
                    7c:4b:c4:51:a4:3d:f3:e3:6c:ce:c5:48:58:f5:d9:
                    2c:61:40:45:e6:6e:d3:e1:6c:d0:5c:0a:15:ff:a8:
                    b1:42:18:5b:b1:37:cc:5d:76:bb:4a:cb:48:f0:85:
                    b3:09:3f:0d:13:02:22:73:a8:13:f0:f5:58:74:24:
                    bd:40:fb:4d:2a:d2:2b:5b:a8:5d:12:85:ea:84:cc:
                    f5:a3:6c:88:f0:27:02:f8:9a:09:f5:b4:f0:b5:db:
                    ac:86:ec:49:42:43:ae:ee:3b:e4:74:29:b3:e0:59:
                    bf:1d:60:5c:50:47:24:6b:3a:3b:43:a7:41:85:0f:
                    2d:3f:50:19:3c:d0:26:84:fb:84:ef:50:6d:c4:43:
                    80:d5:b8:e7:0c:09:fc:54:c9:67:b2:b5:c5:ce:fe:
                    62:a8:14:44:d1:32:ab:49:26:e8:84:ea:67:d2:20:
                    f5:ab:22:b9:1d:80:f4:84:0c:6b:bc:d8:08:75:d9:
                    99:c5:57:16:3c:6f:12:dc:26:6a:93:5e:1a:40:e4:
                    80:77:35:f7:3e:cf:8a:95:35:0a:01:91:46:62:54:
                    5f:5a:e6:42:7b:9c:91:fc:f5:93:14:67:44:71:d5:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:43:B8:EA:C2:B6:E9:7A:24:C0:96:28:79:D9:4F:98:07:71:A8
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:25:46:9e:e3:64:a4:63:fb:55:8c:73:26:6d:a4:68:48:35:
         39:12:20:bd:0b:0c:b8:f7:2d:5f:2c:71:02:5f:04:1e:a5:d3:
         05:83:6f:e8:c0:1c:db:2f:6b:36:ec:8f:d0:c3:2f:d9:52:21:
         5f:4e:5e:50:52:5a:63:ee:03:da:69:7b:a0:ff:e8:1e:17:85:
         c7:4d:71:0c:cf:8a:34:de:bc:40:9a:86:7c:2e:d1:b9:1a:d0:
         8b:d5:b8:14:d7:ff:96:bc:d3:0b:c4:ae:22:26:74:f7:a9:0b:
         c6:65:ef:4f:0e:c4:2c:79:2d:9c:8c:a4:17:a0:ea:83:f0:ae:
         44:5e:50:02:52:6a:51:cc:60:4f:65:8e:e6:4e:c0:10:89:71:
         f4:80:71:82:c2:43:8b:7b:44:52:7c:93:d4:ef:79:a4:7b:f5:
         f4:36:58:91:e9:ab:5b:e9:b0:fc:ae:84:19:e6:d1:3d:01:85:
         11:93:de:70:e7:29:94:67:79:7c:dc:95:74:3f:da:22:f8:93:
         f2:80:82:26:fd:bc:40:c7:f1:77:ee:dc:b2:d7:90:42:5f:3b:
         88:b7:df:be:75:d3:bb:01:7b:95:d9:1f:f0:7b:eb:d9:eb:88:
         7d:7e:5e:47:bf:b3:3c:ee:9e:d6:6c:ab:b5:1a:ae:42:fc:15:
         4e:bf:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:24 2026 by rpki-client