Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File:                     CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier:          QR2wMBTRoU0+Huh2VUAnMX9kJA1bcgZjEm+spXQgUL8=
Subject key identifier:   E1:1B:9C:79:4B:BF:FE:9D:A8:B4:01:5D:56:51:96:22:0B:FE:16:5E
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer:       /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial:       019FCAEF4925AD0EB7CB84803A64381148B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number:          1448
Signing time:             Tue 04 Aug 2026 04:01:47 +0000
Manifest this update:     Tue 04 Aug 2026 04:01:47 +0000
Manifest next update:     Wed 05 Aug 2026 04:01:47 +0000
Files and hashes:         1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: w59JtRNiLUcudX30oHIQQNQ26vAuETZZ5RJ9nYQirfI=)
                          2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 04:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:ef:49:25:ad:0e:b7:cb:84:80:3a:64:38:11:48:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
        Validity
            Not Before: Aug  4 04:01:47 2026 GMT
            Not After : Aug  5 04:01:47 2026 GMT
        Subject: CN=e11b9c794bbffe9da8b4015d565196220bfe165e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0f:f5:7f:24:f1:bf:08:50:94:f7:3a:e2:cd:
                    2e:0e:f9:c3:f4:b3:f8:26:74:59:06:7c:74:66:ca:
                    ec:c6:0f:3e:bf:f3:cf:46:63:b2:06:05:6c:e7:1f:
                    87:43:b7:46:f2:4f:95:e9:75:05:d4:2e:b8:ef:bd:
                    7f:8e:62:18:38:8d:33:da:64:d4:b2:2e:ff:bb:11:
                    cc:6c:e0:77:b5:18:54:4a:c8:21:bd:c6:63:10:b3:
                    f2:ef:47:07:cc:33:03:1c:fe:10:40:77:c3:6b:ba:
                    32:d4:f9:df:fb:69:8a:94:c6:f0:12:a2:c5:b2:17:
                    81:a5:56:74:39:76:c5:a4:04:ea:c0:01:8e:6d:43:
                    f5:cc:b8:24:6d:48:72:dd:6e:2d:e5:3e:dc:c7:4b:
                    67:94:6e:bc:28:ed:23:be:7e:f3:a7:85:99:9c:6c:
                    76:2e:2d:e1:a6:6c:63:31:0d:21:c2:50:b4:18:58:
                    ab:c6:70:7c:46:06:5a:8d:cf:61:a1:a6:c3:66:6c:
                    2c:ff:72:70:ae:a4:39:23:15:7c:89:41:38:ef:42:
                    25:00:b3:c8:26:f7:cb:b3:d5:d4:90:8b:82:d7:65:
                    76:a9:9e:be:74:41:4b:9d:2f:c3:2e:2a:16:bc:ae:
                    0c:7c:a0:71:41:da:f2:76:7a:61:86:54:9f:bb:1d:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:9C:79:4B:BF:FE:9D:A8:B4:01:5D:56:51:96:22:0B:FE:16:5E
            X509v3 Authority Key Identifier:
                keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:98:fc:f3:ff:4c:ac:c5:9a:e3:01:a6:96:2b:31:dd:ba:
         50:38:fe:7d:65:8e:9a:ab:3e:db:96:6f:7a:79:1a:db:9d:23:
         7a:3e:e1:61:0b:14:9b:38:71:ea:94:b8:ba:7e:ff:5c:ff:91:
         3e:45:38:89:54:6e:01:d1:cf:12:e2:2b:3a:1c:b9:4e:9e:ba:
         07:46:74:94:cf:19:f5:d9:0b:73:69:fa:d0:ae:43:81:1d:bc:
         c6:43:a9:17:44:bc:a7:79:96:c7:2d:43:9e:26:af:c4:a4:bb:
         7b:2f:8e:d6:84:36:23:b4:91:77:df:4d:2a:5c:f3:32:2b:74:
         84:30:fd:a8:11:4e:74:07:82:64:3b:d6:f5:97:b0:f8:06:29:
         ba:7a:24:8a:92:11:ac:3e:c7:b1:34:76:3f:9f:d1:2f:3a:a5:
         83:88:3f:fc:cc:02:cd:94:c6:e1:5b:d5:52:88:66:c1:07:b0:
         74:88:6a:89:68:4b:4a:e2:4f:ea:26:b9:b9:c1:77:0f:cf:b6:
         5d:32:11:ae:58:67:0b:99:cf:bb:41:be:7d:f2:e2:c5:4a:a0:
         c8:8c:66:b8:7a:02:f6:36:52:f0:28:dd:5f:eb:82:cc:fd:b9:
         db:37:eb:41:45:7a:a8:f4:f0:78:7a:b9:d1:d1:94:63:70:be:
         5c:98:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:37:13 2026 by rpki-client