Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File:                     9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier:          PPWGA3vFFRFIp1pWEtf74gx0nQOjvoFTur0dzO+DTo4=
Subject key identifier:   45:18:46:E3:02:26:DB:15:D2:BE:6D:BD:22:28:BC:2C:38:A0:06:EE
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer:       /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial:       01A001A60A45F9C0729A037DBEC2B2266A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number:          070C
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: z5Qr//3fyi6A09fzZnKrBpFvLqVQWLwe3VQkrVhq+AA=)
                          2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:0a:45:f9:c0:72:9a:03:7d:be:c2:b2:26:6a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=451846e30226db15d2be6dbd2228bc2c38a006ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:5d:f9:f0:63:1e:95:94:7b:ad:4e:59:20:
                    6c:05:e2:53:b5:0a:94:da:7f:b8:f3:d7:50:88:d1:
                    59:8b:1e:2b:d2:f3:af:69:ce:d7:b7:09:b6:91:07:
                    35:4f:61:94:94:34:88:35:4e:2a:7e:60:57:e5:cc:
                    50:ed:7e:28:69:fc:4c:56:96:21:c4:f0:e9:5b:f6:
                    0a:ba:bd:37:16:88:c1:9b:52:aa:68:87:4a:fc:8b:
                    93:2d:6e:d3:d8:ef:d4:bc:60:4f:e3:1d:57:28:98:
                    4c:f8:f6:0c:37:86:9c:dc:73:96:4b:37:05:78:02:
                    e4:f4:63:3d:75:37:a8:a9:95:e9:8b:45:ec:6d:5a:
                    b8:32:94:1a:03:37:8d:fe:51:8f:92:a7:fb:8d:60:
                    2a:3a:ec:c1:59:0a:51:ca:23:2e:11:da:d0:ab:11:
                    16:11:68:f1:8b:36:b1:e0:3a:83:64:92:2a:b7:87:
                    1d:2f:bf:d9:ef:26:e7:25:d0:d8:c5:29:75:71:3e:
                    7c:86:fd:5f:84:e6:ad:81:7f:0f:f8:a6:be:d2:b8:
                    d3:d3:91:05:ce:1b:bd:0d:73:7f:77:75:ba:30:f3:
                    94:81:e8:3c:c0:f6:17:2e:95:e5:41:d9:50:33:61:
                    ed:47:41:fd:3a:73:9a:c1:7a:f5:d8:d6:27:49:e9:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:46:E3:02:26:DB:15:D2:BE:6D:BD:22:28:BC:2C:38:A0:06:EE
            X509v3 Authority Key Identifier:
                keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c4:57:25:1a:50:23:10:52:60:a0:24:8d:e7:d5:f1:ea:7b:
         b9:9e:01:63:d6:6b:86:01:5c:86:a2:aa:2e:b8:ec:97:bd:58:
         0c:bf:55:c7:4e:00:b5:90:07:10:11:7c:6d:70:17:3e:82:8f:
         6c:7d:0d:4c:7f:e6:99:d8:51:89:ec:3d:3c:28:81:bc:7e:97:
         24:81:51:c1:c2:bb:51:43:31:08:30:79:76:ef:db:71:97:26:
         0b:f7:e0:81:32:74:6b:53:f5:4b:df:01:bf:57:d1:04:f9:ce:
         41:b7:74:1f:76:c1:77:67:b5:76:92:67:0d:5e:ed:e2:e7:10:
         40:c5:68:8d:45:dc:29:99:0b:e4:f5:18:a3:ec:97:c9:00:63:
         c5:1a:fb:ce:c1:ed:93:0f:82:05:aa:da:dc:a3:4a:03:ac:cd:
         80:21:e3:10:9f:eb:c6:7e:19:17:e9:33:32:b0:ca:2d:9c:84:
         68:12:12:f7:bd:07:68:78:7e:eb:3d:b2:5a:3a:0a:ee:21:2a:
         54:38:af:c7:10:90:e9:de:8c:eb:1b:d2:cc:a3:42:a4:28:ad:
         81:d4:73:ee:dd:02:87:fe:0a:ef:36:da:50:65:6b:83:68:2c:
         db:70:e6:d4:7f:a1:3b:c8:31:49:58:26:22:21:ef:52:71:67:
         06:b8:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:38:34 2026 by rpki-client