Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          GHfiXaOjPdi1/MT7DSCd43BefGlALAveJxzJibhMbbM=
Subject key identifier:   28:BE:77:B2:CF:D2:70:43:EC:32:F7:03:2E:4B:8A:ED:D0:C6:F5:6B
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       01A00101C34100386155410FE075B9222580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0F30
Signing time:             Fri 14 Aug 2026 16:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:27 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: BsQ/UXIyhicJxjGyZHQ/8ix0zDlpFvd3uFDYX/ip2YI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:c3:41:00:38:61:55:41:0f:e0:75:b9:22:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: Aug 14 16:01:27 2026 GMT
            Not After : Aug 15 16:01:27 2026 GMT
        Subject: CN=28be77b2cfd27043ec32f7032e4b8aedd0c6f56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:e8:92:0b:43:0a:7f:38:8c:4e:0d:d7:40:
                    f7:65:22:6b:e6:49:62:18:6c:da:f8:3f:85:06:5b:
                    3a:67:48:4e:dd:c0:05:83:7b:5c:e7:6d:b2:c5:5b:
                    a4:66:0f:a6:30:34:1f:e8:d9:6e:c7:c4:a1:ff:f9:
                    d4:2d:4c:7d:62:05:5a:47:93:6d:da:49:e4:4b:2c:
                    1b:fb:4d:9c:1b:ce:a6:58:ea:56:0b:17:cc:63:d5:
                    55:62:e0:00:d4:1c:30:d2:f1:cb:d8:c3:cd:a2:2e:
                    d7:2d:b2:37:e0:58:cb:ea:63:3a:4a:cb:b7:65:86:
                    af:fb:85:9c:b2:9d:85:26:70:ad:2f:43:81:45:01:
                    6d:56:7a:93:9a:a0:82:fd:27:a8:94:eb:6d:23:8f:
                    b3:80:98:7e:a9:db:03:b3:56:53:1e:22:6d:0f:89:
                    98:0b:8f:8b:59:8f:ec:fa:7c:63:1b:ae:3a:ce:70:
                    ce:e7:a4:93:f4:1e:d9:31:4c:84:ae:16:d1:c1:ea:
                    23:20:f0:64:1b:70:57:b3:75:60:98:21:f3:e2:f6:
                    ae:7c:36:c1:96:08:ef:df:06:b7:e1:cd:01:23:d7:
                    1b:85:1b:8e:55:4d:4c:79:4e:c8:98:7a:1c:1e:d2:
                    19:c7:2a:23:f8:f8:4b:05:f1:aa:b4:ec:ad:cf:51:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:77:B2:CF:D2:70:43:EC:32:F7:03:2E:4B:8A:ED:D0:C6:F5:6B
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:60:24:c1:ee:0e:3f:76:7b:f2:b3:0b:29:09:8a:9c:74:
         c4:11:60:03:9b:ec:7e:bc:8a:fa:27:c3:af:68:92:30:dc:ff:
         0b:bc:d6:e1:03:7e:17:d8:e7:8c:d6:9c:c0:2f:0c:29:5e:74:
         3b:cb:88:2e:af:af:4c:4b:fc:36:f1:4c:61:d6:38:0f:d2:b4:
         db:0d:ce:b7:0f:79:7c:6d:2f:57:2b:d8:68:af:37:86:ad:57:
         03:9a:01:ac:5b:7b:91:1c:37:d3:23:40:51:b3:4e:8d:f8:00:
         72:7f:d0:7a:dc:d8:b9:56:20:ca:68:76:9b:cd:55:85:9e:4d:
         db:8e:ca:80:d7:41:31:83:f7:68:ae:0e:47:41:34:13:51:c9:
         b3:7b:22:8c:c7:e8:1a:40:c9:05:ae:c4:31:77:1a:b3:3d:96:
         19:f9:95:a2:82:97:7f:94:bc:38:46:ce:9c:30:6a:6c:8c:ac:
         1e:f9:ae:5a:13:a9:ec:b3:76:b1:02:50:09:01:d4:09:ef:e2:
         3b:f8:5c:0c:7a:8d:0c:e8:8d:f4:b8:75:0e:1c:49:15:1c:dc:
         76:a8:a6:b9:37:30:bd:70:cb:fd:0c:ed:2e:40:1c:ba:f4:52:
         75:38:e4:11:ac:ea:dd:68:9f:72:58:54:12:8e:1c:21:8d:ee:
         d6:83:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:00 2026 by rpki-client