Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/lUpa0BWcEUbrxxSfbKyQe0-6wQw.mft
File:                     lUpa0BWcEUbrxxSfbKyQe0-6wQw.mft (raw, json)
Hash identifier:          tQERQucr/FS14OqobFlO6ILiYUw5V/TQmeOplggpGaM=
Subject key identifier:   F6:15:AA:81:E8:FB:FC:B2:2C:41:D9:EE:7D:F0:28:2B:47:34:17:DB
Authority key identifier: 95:4A:5A:D0:15:9C:11:46:EB:C7:14:9F:6C:AC:90:7B:4F:BA:C1:0C
Certificate issuer:       /CN=954a5ad0159c1146ebc7149f6cac907b4fbac10c
Certificate serial:       01A0035D8876ACABFBD42CFA1BCAAEE13B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUpa0BWcEUbrxxSfbKyQe0-6wQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/lUpa0BWcEUbrxxSfbKyQe0-6wQw.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:00:56 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:56 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:56 +0000
Files and hashes:         1: J1GWcqVXsn1sBhJDX9AZSZ4J0is.roa (hash: EYM2EqCvdQKS2s4ktYe6nrRnBQ42rzHlrPzYp8D/lsY=)
                          2: lUpa0BWcEUbrxxSfbKyQe0-6wQw.crl (hash: VcXry7OPwt/Xw8+lqeeXVHwrSpkaILm4a9PsMjRXZIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/lUpa0BWcEUbrxxSfbKyQe0-6wQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/lUpa0BWcEUbrxxSfbKyQe0-6wQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUpa0BWcEUbrxxSfbKyQe0-6wQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:88:76:ac:ab:fb:d4:2c:fa:1b:ca:ae:e1:3b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954a5ad0159c1146ebc7149f6cac907b4fbac10c
        Validity
            Not Before: Aug 15 03:00:56 2026 GMT
            Not After : Aug 16 03:00:56 2026 GMT
        Subject: CN=f615aa81e8fbfcb22c41d9ee7df0282b473417db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:26:4e:0f:ce:7a:17:af:58:cf:a5:60:ba:
                    36:8e:54:b9:cf:8d:be:8b:d6:2e:e7:f2:63:42:da:
                    74:86:2e:4a:eb:8b:67:4e:73:69:62:7d:8f:ec:ce:
                    3a:e9:0a:65:e7:f0:20:59:99:63:b5:17:41:18:40:
                    ce:48:18:d9:86:ea:dc:e2:51:fa:6b:e0:ba:c9:2f:
                    ef:c5:0d:9a:c4:7d:85:fb:2f:24:de:a9:d6:85:e8:
                    1a:14:35:99:a1:58:ea:d9:6b:68:d2:56:18:0f:7f:
                    8d:eb:df:36:a2:7b:0c:c6:47:53:df:6c:aa:0e:de:
                    1d:2d:0e:37:81:62:64:ac:0d:29:fc:e2:be:26:5e:
                    fa:50:cf:45:06:50:7f:e5:02:ed:da:47:5f:fe:3c:
                    2e:98:90:35:fb:2c:ee:88:ce:4b:77:cf:8e:33:dd:
                    57:ba:52:e2:43:1d:27:54:fd:cb:af:15:e6:4c:88:
                    13:dd:28:b1:53:79:db:d9:7d:5f:dd:41:74:58:bf:
                    6d:8d:1d:b7:8d:23:15:31:5b:f5:a7:3c:ed:21:01:
                    3a:2b:8f:fe:fa:e2:52:d8:45:ad:43:84:09:56:71:
                    40:71:22:0e:82:f3:37:a4:51:c5:1d:5c:11:02:c6:
                    ff:d2:2e:f5:df:ac:61:82:7d:83:51:a6:da:b4:ae:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:15:AA:81:E8:FB:FC:B2:2C:41:D9:EE:7D:F0:28:2B:47:34:17:DB
            X509v3 Authority Key Identifier:
                keyid:95:4A:5A:D0:15:9C:11:46:EB:C7:14:9F:6C:AC:90:7B:4F:BA:C1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUpa0BWcEUbrxxSfbKyQe0-6wQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/lUpa0BWcEUbrxxSfbKyQe0-6wQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/lUpa0BWcEUbrxxSfbKyQe0-6wQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:43:de:a4:35:cd:d5:e4:7d:39:fd:3e:2d:c6:b5:90:f7:32:
         71:1f:d2:75:11:7e:ca:44:a6:68:34:da:4c:75:83:df:57:63:
         2c:93:3f:e5:26:4d:02:76:db:11:94:e9:3f:99:6c:8f:f6:32:
         50:33:01:b6:37:5f:e7:12:c0:79:5f:9f:dd:da:eb:f0:65:6c:
         40:bc:7e:3b:91:38:f0:31:3f:bf:84:08:50:f9:42:4e:7f:59:
         a9:67:22:d2:4f:3d:54:82:b0:86:ee:7e:12:2e:54:dd:b4:f0:
         dc:af:7e:b4:83:be:3b:da:59:48:c9:96:59:b5:d6:a7:ac:28:
         69:13:df:a9:68:8b:3c:b2:69:c2:98:4e:5b:40:37:1b:51:83:
         99:ec:0f:f4:d9:30:b5:4e:9f:bf:f3:f2:5b:d5:5a:10:b8:e7:
         97:fa:62:c1:43:62:ea:25:2e:84:eb:b6:34:74:e8:f1:52:3c:
         35:9e:e7:e9:8a:73:37:95:b1:e2:ed:31:b2:71:83:38:57:88:
         8a:78:de:5c:49:39:9e:20:49:28:0b:dd:a2:a0:d8:80:70:a0:
         5a:35:81:11:2a:15:30:c3:15:56:57:fc:49:fd:36:88:12:d1:
         e1:ad:d1:80:53:ea:5c:ec:d5:b9:94:2f:1e:97:4f:d6:df:2a:
         94:b2:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:59:53 2026 by rpki-client