Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          He8lpc48kBO+yTQpFjxSTL67/chAPNN73HkDoa4s0Y0=
Subject key identifier:   C6:9B:0F:B9:3B:4B:88:69:AC:1D:0A:77:D9:99:D1:99:B0:3F:6B:AB
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       01A001A5AB30BE89FE25FEF99815BF05263B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          136D
Signing time:             Fri 14 Aug 2026 19:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:29 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: GhF+rLaQ+7NJ2RdVhZjkxX1+74d+w/F35EMUQ2WE5pk=)
                          2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:ab:30:be:89:fe:25:fe:f9:98:15:bf:05:26:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Aug 14 19:00:29 2026 GMT
            Not After : Aug 15 19:00:29 2026 GMT
        Subject: CN=c69b0fb93b4b8869ac1d0a77d999d199b03f6bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:7d:78:0b:34:fd:a0:b9:ea:6c:e0:06:d8:
                    ca:66:6b:6e:d1:08:6b:10:4c:bd:95:f2:c5:4f:b8:
                    1c:51:30:6c:7e:66:3e:cb:c0:4e:4a:df:bc:cf:2d:
                    70:97:18:97:84:b3:20:fd:2f:54:8f:45:16:f8:94:
                    cd:58:90:45:8f:f4:0a:d3:10:10:ec:a3:8c:bf:72:
                    71:ee:02:e6:1c:0b:a2:35:12:f9:c0:69:c1:14:5e:
                    6a:f9:48:3e:c8:99:15:77:9d:58:b0:14:f3:ff:9c:
                    35:a5:29:dd:b3:0d:d6:bd:c3:ab:76:89:d7:0a:de:
                    1d:68:e8:2a:0c:e0:25:a7:4d:d0:ae:33:83:74:e8:
                    64:a4:a0:25:b3:e3:ac:af:cc:99:3d:33:f7:7e:ef:
                    79:8a:fd:1a:bb:e0:a2:d7:01:19:2d:19:7a:76:99:
                    c6:0e:f5:76:aa:80:6c:b7:3b:96:44:72:f1:79:4c:
                    42:e5:0e:33:21:d5:b2:c8:da:29:03:cb:33:4c:17:
                    78:2c:09:82:74:c2:cd:e8:3e:0a:6a:b6:12:73:91:
                    b6:09:6b:12:01:7a:ec:dc:85:40:f7:fa:b0:52:41:
                    53:eb:17:ce:8a:5f:0a:f7:bd:e4:c7:12:ac:29:a7:
                    17:e0:78:8b:54:cc:ba:f8:0a:78:ce:30:f8:c2:a2:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:0F:B9:3B:4B:88:69:AC:1D:0A:77:D9:99:D1:99:B0:3F:6B:AB
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:00:7c:1c:3d:ea:8e:23:3c:57:92:58:f1:83:e4:b4:07:
         44:51:75:46:f4:b5:17:9c:a2:9b:fc:df:ba:04:a4:51:74:03:
         51:19:d3:89:8a:76:bc:b0:29:47:78:1c:1a:f9:6c:0e:c4:4e:
         08:38:85:2e:56:5f:40:44:d9:4a:e0:1e:1b:64:2a:0c:f7:37:
         3f:61:ed:f6:a8:fc:dc:b2:fe:67:54:cf:2b:0a:8e:a4:5b:23:
         18:9c:7f:1c:f6:bd:31:ee:1f:20:12:39:4e:94:64:b3:bb:5d:
         32:0d:ab:83:fc:57:19:ea:19:6c:6d:a6:63:88:24:86:4c:aa:
         f5:c8:69:a3:f2:d7:20:a0:1d:8c:91:68:cf:a5:48:6e:86:f3:
         a6:73:cb:ae:c2:da:52:87:6a:cf:62:dd:20:9c:74:ee:88:1b:
         cf:e8:59:83:a8:8f:88:69:e6:f5:9e:b9:28:ab:8b:82:e3:58:
         e3:c0:5b:e9:74:c7:d8:f1:79:27:2a:3c:d5:1b:e7:6a:a1:80:
         44:11:18:2f:27:84:f1:51:65:4e:07:b4:fb:33:ed:a3:0e:9b:
         0d:1e:b0:cf:2e:ae:a1:4e:ca:81:5e:61:40:b3:d8:10:e3:00:
         7a:b1:76:98:22:3a:1e:a1:0f:23:13:13:17:b1:ad:ab:65:d2:
         99:87:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:17 2026 by rpki-client