Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
File:                     gV1MO26b-NpPoYWDUtVnCXSU64A.mft (raw, json)
Hash identifier:          BbU8k7D/HQqjeQ6lRlxMpR0L1beimC/zUCcBnFrGhdM=
Subject key identifier:   B5:9A:B9:7E:00:65:BF:7C:02:5D:18:CB:D7:0D:E4:E0:92:D6:F3:3D
Authority key identifier: 81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
Certificate issuer:       /CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Certificate serial:       01A0016F800A7C1356166E1628500A00FD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:19 +0000
Files and hashes:         1: 9OSNQHYwP7hMCYqH3m4FGoNr2h0.roa (hash: oI3UIYnZEeaaqKn53u1eLaxo0kke+QgwtslSgUJGtVo=)
                          2: eS4B6UGXaj1jtg698wa76I6I9s0.roa (hash: ee1yHXEYh01F57rf9ic6LVAj3dkGow/zQH8cnd6TnOc=)
                          3: gV1MO26b-NpPoYWDUtVnCXSU64A.crl (hash: Etx2jdIoMMIvOVhFzROgMQvXmwF2hI07S0HqXXD+GkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:80:0a:7c:13:56:16:6e:16:28:50:0a:00:fd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
        Validity
            Not Before: Aug 14 18:01:19 2026 GMT
            Not After : Aug 15 18:01:19 2026 GMT
        Subject: CN=b59ab97e0065bf7c025d18cbd70de4e092d6f33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:d3:2d:1d:dc:12:d4:f9:ec:1a:2d:4c:c7:
                    de:6f:de:83:c4:53:bd:ed:a3:71:a2:8b:7e:3b:cd:
                    f8:67:77:42:c1:dd:3f:db:39:c6:22:a7:c7:2c:39:
                    0d:70:20:c7:02:8e:a3:75:e6:bc:67:95:b9:c7:6a:
                    55:29:20:6f:18:5c:ae:7d:b1:51:7b:de:1f:69:97:
                    c4:16:f7:52:ee:01:4c:9c:29:6b:b6:06:e6:bf:6d:
                    3e:79:73:70:52:c7:51:8f:f4:c7:89:9b:35:61:67:
                    18:61:a7:aa:01:29:a0:bb:64:4e:f0:1a:e3:4f:de:
                    b3:b0:06:f3:e7:73:5a:72:69:f1:cf:4e:8d:e0:b6:
                    9f:46:f1:bc:24:a4:9c:78:8c:8e:63:15:23:74:d2:
                    34:74:c2:9f:c1:b5:c5:e5:b1:a3:72:97:9a:5c:0c:
                    aa:88:8c:68:f8:ae:19:52:91:92:b5:20:2c:bb:dd:
                    11:d9:a0:64:6a:1b:91:00:63:3a:03:5a:d0:54:75:
                    7f:90:f0:b6:03:a9:aa:44:00:50:00:5e:0a:8e:4e:
                    5c:71:d8:7a:d0:77:03:37:7a:5c:d5:db:af:4f:1d:
                    7b:92:48:a3:ce:53:8b:ab:58:20:e4:23:b8:9c:76:
                    df:c1:1f:e9:4e:51:e4:df:8d:50:e2:53:5a:7d:0a:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9A:B9:7E:00:65:BF:7C:02:5D:18:CB:D7:0D:E4:E0:92:D6:F3:3D
            X509v3 Authority Key Identifier:
                keyid:81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:76:11:cb:d1:72:ae:2f:21:3f:26:7f:e8:74:a0:d4:9b:58:
         d0:86:2a:5d:18:f4:a7:94:f6:85:4a:c8:93:0b:10:b1:0a:36:
         a9:a9:61:e0:79:2b:d7:8c:cf:89:f5:db:8b:0e:1d:86:fe:28:
         8c:3c:79:7d:b0:81:7f:87:2c:9c:45:98:38:6a:dd:85:c7:4b:
         b1:e8:f0:f7:3c:a3:07:2a:26:be:6c:61:1d:60:6c:5d:d5:a0:
         d6:06:c0:c3:4c:13:39:1f:45:e0:84:87:44:38:f6:61:22:58:
         af:a8:c7:2e:7a:17:88:56:e4:88:36:f1:fa:a5:24:36:cb:29:
         ea:5d:73:c6:64:48:8c:3a:4a:ad:99:44:42:4b:27:b0:ab:c2:
         4f:45:81:df:12:d4:60:8a:d8:6d:22:7c:f0:4b:90:27:76:f9:
         e8:b6:31:4f:ea:a6:b4:7f:bc:c6:f9:89:48:13:db:93:4c:84:
         aa:2d:63:46:b4:90:bc:26:1f:00:d0:7f:e7:5d:fb:c4:04:8a:
         4c:05:4b:5b:20:de:37:e9:55:b9:85:63:8b:c1:3c:50:5f:79:
         37:58:6c:c9:a2:aa:fd:76:c9:9c:bf:fd:49:c4:08:18:df:d9:
         f7:da:b1:2a:2f:67:46:0c:ed:31:6d:ab:8b:3e:c7:3a:f2:be:
         df:ff:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:11 2026 by rpki-client