Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File:                     Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier:          HMD6HCZ2uPJOKBkNVJeiM3d3PPgrEKGXp8bOcdX4kCM=
Subject key identifier:   DB:E1:5A:2F:AC:F9:2B:D4:A3:9B:B6:3A:B7:45:56:BB:09:C3:CE:F6
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer:       /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial:       01A00137D2F03FE8B8847DBBE6AAD0092467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number:          0665
Signing time:             Fri 14 Aug 2026 17:00:30 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:30 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:30 +0000
Files and hashes:         1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: vUHnAwhMwQWZ2maLxe+niDzRz4QnLvXalDBL0xisapQ=)
                          2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:d2:f0:3f:e8:b8:84:7d:bb:e6:aa:d0:09:24:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
        Validity
            Not Before: Aug 14 17:00:30 2026 GMT
            Not After : Aug 15 17:00:30 2026 GMT
        Subject: CN=dbe15a2facf92bd4a39bb63ab74556bb09c3cef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:c2:95:a5:ce:d7:2f:c2:c2:36:7d:98:f0:
                    88:75:7b:76:d2:16:20:30:8a:77:29:7a:f0:e2:ab:
                    bd:17:b1:40:8e:ef:11:98:35:bc:14:39:b0:44:ab:
                    be:12:92:88:93:13:4f:9a:26:27:8d:93:f4:03:36:
                    9f:1d:84:6b:d0:cd:6f:ff:b6:2b:3e:04:67:79:d6:
                    11:f0:ed:bc:06:96:1c:08:79:9c:0c:21:99:3e:d1:
                    ed:11:28:b4:b9:43:8c:09:cb:72:e5:9a:18:ec:78:
                    72:57:21:2d:f9:2a:b1:6a:c8:6b:b6:9a:14:46:c1:
                    3c:f6:d8:18:6f:80:a9:6d:37:db:6b:54:47:4c:9f:
                    82:e5:9e:4b:0b:2e:1e:b6:64:0a:11:69:a5:fd:57:
                    fe:ef:31:70:7f:47:65:d4:99:c9:40:8e:4e:ce:48:
                    a6:6e:91:b5:7f:31:aa:ee:55:28:06:25:1f:25:44:
                    9e:8d:f4:57:d6:fa:57:ff:7f:f1:8d:0e:1b:d8:d5:
                    e8:cc:cf:81:bb:f7:70:ed:e2:cd:e0:bd:83:4b:37:
                    70:5f:a4:78:79:c7:a6:bd:7c:01:c8:8d:8b:4d:af:
                    43:59:0f:b9:d8:20:a2:70:77:e9:37:da:73:08:d1:
                    37:77:48:83:b9:41:e3:84:ab:3b:89:26:12:7d:5f:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:5A:2F:AC:F9:2B:D4:A3:9B:B6:3A:B7:45:56:BB:09:C3:CE:F6
            X509v3 Authority Key Identifier:
                keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:18:fe:83:1d:99:db:82:72:59:6f:cf:be:94:81:90:60:20:
         7e:c9:68:3c:49:1c:7b:b2:e5:1b:c2:fb:b7:a3:5b:89:9a:50:
         72:7f:d9:ed:a4:d6:49:8f:4f:e0:73:a8:d7:8b:c3:b3:57:7a:
         9c:5c:01:6c:a0:0a:12:63:fe:73:e6:76:09:ad:19:b8:8a:5b:
         43:bc:7c:dd:d1:7a:82:ad:16:f7:11:90:92:eb:ad:48:db:8d:
         0e:0b:57:4e:78:90:78:7e:8c:e0:c7:0f:a2:4a:e9:59:f3:e2:
         16:a7:3d:79:a9:18:cc:0e:a8:f6:f4:46:03:37:fc:14:ff:b8:
         44:b8:87:1c:f4:fd:17:db:fc:1f:3d:03:1a:26:2d:11:53:13:
         08:66:32:83:d3:33:db:bc:f9:d1:6c:22:9e:06:e3:2d:32:e8:
         e3:1a:ab:8e:a9:a9:0f:3d:30:33:b7:ac:c1:ba:79:c7:d0:ff:
         88:20:c7:4a:3f:83:d7:29:1a:a3:93:71:a8:e5:51:53:ad:f0:
         58:94:67:6e:e5:e6:f5:77:47:86:bb:2b:7b:7c:96:81:b2:a5:
         86:ef:26:58:e1:f2:6b:0e:be:38:54:65:96:53:3b:ac:a7:26:
         b3:5c:22:21:c1:eb:15:09:be:fc:04:78:dd:76:e0:35:63:7f:
         1a:34:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:26 2026 by rpki-client