Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File:                     a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier:          wX/ub1gkAkfzp42xrsJD/mp6y2PGOVj3f+oCRUb8ykc=
Subject key identifier:   5A:69:E4:59:F8:2F:00:F2:82:AF:CA:69:71:FE:A5:58:B1:E5:CE:F2
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer:       /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial:       019FA1F2650361E0F0287300577E1202BF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number:          0815
Signing time:             Mon 27 Jul 2026 05:00:45 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:45 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:45 +0000
Files and hashes:         1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
                          2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: Uh5AcXMaS7/EUVXy1JADygLW6EAjBjfFJl83MyaFVbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:65:03:61:e0:f0:28:73:00:57:7e:12:02:bf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
        Validity
            Not Before: Jul 27 05:00:45 2026 GMT
            Not After : Jul 28 05:00:45 2026 GMT
        Subject: CN=5a69e459f82f00f282afca6971fea558b1e5cef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:15:2a:ee:03:88:cb:83:00:20:88:69:ee:
                    e8:6c:a2:9b:4c:fd:58:d6:f2:ef:fd:a2:ae:c2:df:
                    3b:df:3a:e0:13:bc:c9:5c:e1:34:66:e3:2c:e5:52:
                    c3:d3:4b:0b:fe:24:e6:43:03:cd:0c:9c:11:cc:38:
                    70:6b:58:dc:07:f0:0a:7b:39:4a:de:1c:55:33:37:
                    f4:bf:fa:ae:91:69:31:de:5a:6f:ee:3b:7c:06:22:
                    32:ed:9b:a3:b6:19:80:9d:ca:20:23:5b:c0:1f:56:
                    86:16:14:50:61:fa:22:cc:30:0b:e4:5d:57:1a:03:
                    b6:de:d6:f1:18:1d:72:9b:51:75:48:71:c4:54:72:
                    ca:88:31:a7:85:af:77:54:18:ac:09:2c:55:6b:9a:
                    d2:f5:56:f3:50:c1:81:66:3f:f6:b2:ea:4c:98:68:
                    e4:47:9c:50:ea:c1:81:29:bc:4d:e2:ac:19:82:15:
                    f8:5d:c8:54:a9:39:a4:62:da:ee:cf:71:75:29:f4:
                    00:5e:df:6b:8c:61:05:50:76:08:cd:92:a0:54:1a:
                    61:f0:7a:c5:9d:76:bd:9c:a1:56:7c:85:06:fe:22:
                    95:8b:01:be:01:f8:d1:da:d0:bb:82:47:1d:8d:49:
                    d8:34:5a:0b:29:6a:c9:a1:ba:ef:a1:7a:0d:1b:c7:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:E4:59:F8:2F:00:F2:82:AF:CA:69:71:FE:A5:58:B1:E5:CE:F2
            X509v3 Authority Key Identifier:
                keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:e7:8f:a1:1b:1f:3a:c3:3f:4d:69:f8:59:e4:ad:d1:2b:
         8f:32:c0:7b:af:83:44:7e:83:d6:6d:75:3e:d2:6c:84:cd:23:
         66:d5:c3:cb:00:de:85:98:ef:3e:27:4e:78:37:ae:9d:05:62:
         c4:9a:c5:7d:7c:5a:00:73:0e:ab:74:96:0d:10:6b:06:98:74:
         d9:71:4c:91:18:95:85:04:8d:e1:37:24:7a:61:1d:65:02:f5:
         a3:f9:c1:96:a2:65:d0:bd:49:3c:c0:8f:2a:4c:80:90:c5:08:
         b9:cf:33:8b:35:62:78:84:46:1b:bf:77:bd:34:09:dd:f4:29:
         48:79:93:64:02:42:3a:11:a9:11:23:05:3f:a1:24:de:ed:db:
         d4:5f:cb:b9:ba:38:8a:50:cf:dc:84:b0:5c:6e:84:da:96:f4:
         bd:b9:66:73:ab:5a:47:1a:10:39:66:d7:1b:77:75:28:55:87:
         f9:fa:18:13:0e:e5:15:df:24:63:4b:dc:53:3f:02:6a:92:51:
         83:52:04:82:85:c5:0a:24:17:d4:3c:e6:e3:e2:27:71:83:94:
         58:df:f1:4e:02:99:92:44:9c:8f:0b:07:52:39:70:e8:22:66:
         1d:1d:4b:ff:95:6b:fb:8d:d2:d7:a6:e2:b1:d6:d2:5a:54:fb:
         ac:39:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:48 2026 by rpki-client