Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          u5TfUp76uQ81WZVrQBQHR8vAJlvCTM5j71i5zMz5Ip8=
Subject key identifier:   16:40:7E:56:3F:F6:0A:1B:85:7D:8A:CC:6A:C7:92:41:81:C8:CE:42
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       01A00281C6ED0B7D0403F3BF1348AB5D1C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0FEF
Signing time:             Fri 14 Aug 2026 23:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:54 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: +9dSjnDrM6p7Vi7aMQqNg2AQJLUnMdrIGZmv8h8a6WQ=)
                          2: qyHL6II4esJ4dc5VWl8lMms3EA0.roa (hash: XUNHvMm3tr618bDepCNFHXOwOdAqjvCOtPPWHwwDwkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:c6:ed:0b:7d:04:03:f3:bf:13:48:ab:5d:1c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Aug 14 23:00:54 2026 GMT
            Not After : Aug 15 23:00:54 2026 GMT
        Subject: CN=16407e563ff60a1b857d8acc6ac7924181c8ce42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:b0:62:25:79:82:74:5b:3e:d4:f4:c8:34:
                    a5:ec:e5:b5:0c:50:03:bd:7f:f9:e8:c8:7c:09:c0:
                    e4:39:ad:5b:26:ef:98:ab:f2:ae:b9:08:34:a8:48:
                    6d:f3:56:ed:56:5c:ac:ca:1d:2c:ec:69:4e:49:de:
                    76:a1:11:29:c5:61:8c:e3:5e:63:ea:53:ca:6b:ca:
                    de:26:c1:eb:20:db:52:0a:51:9b:b1:ca:d3:01:b9:
                    b5:2b:9e:3f:cf:9f:94:32:de:a4:de:9d:17:e2:bb:
                    10:23:0b:41:5b:f1:86:c7:88:83:5d:29:3c:8c:12:
                    8d:18:96:ea:37:7e:db:e8:ca:34:ef:ed:d4:06:5c:
                    50:35:73:29:8d:ed:00:3b:6e:bf:ad:0b:3b:94:87:
                    a5:fb:42:f6:ed:a3:91:a7:21:d5:ca:1e:26:7d:05:
                    ab:62:fb:2c:65:a1:e0:56:8c:ae:34:9f:74:3a:97:
                    ff:7d:0a:28:c3:91:e8:b9:42:7c:8a:0f:c4:03:7b:
                    80:2e:70:3c:ed:e8:be:5f:cb:77:c3:c7:fd:aa:23:
                    47:09:4e:db:15:d1:9d:b7:48:5e:89:4d:bf:f9:86:
                    57:6d:6e:5a:9b:9e:88:62:b6:2d:ff:23:cf:63:81:
                    6c:77:63:df:09:f6:bd:b7:b1:09:96:e1:8c:a7:bb:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:7E:56:3F:F6:0A:1B:85:7D:8A:CC:6A:C7:92:41:81:C8:CE:42
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:54:45:c4:45:84:71:4f:0f:9f:46:ea:bb:38:77:0e:fb:
         2f:37:89:d9:5f:98:7e:ef:54:db:9d:07:6d:61:ce:51:1d:40:
         45:bb:10:89:e4:75:2a:1d:be:41:ed:53:7e:4e:d3:19:41:76:
         ec:3f:29:1a:d8:86:96:2c:16:40:dd:2b:6a:d4:99:0d:f5:f9:
         1a:6c:e9:d1:8d:46:23:be:71:99:6a:1a:c9:1c:95:bf:07:f4:
         9e:13:c7:41:77:45:86:19:88:b5:d6:9f:b9:8c:05:0e:e2:ef:
         bf:73:9d:1a:4d:f7:be:04:ed:1d:c5:d0:58:65:54:69:0b:8d:
         93:ce:82:21:31:19:13:68:67:7d:9d:2b:4b:94:90:84:8c:80:
         6c:01:5a:16:e1:4a:2c:c4:bb:6e:da:b5:d5:f8:35:3b:3b:3a:
         1c:c5:e0:6e:08:0c:92:d4:71:ef:43:94:28:0d:5c:16:67:91:
         3e:05:ac:9d:38:cc:0a:40:d4:bf:bd:50:e4:81:94:fa:e9:a2:
         fa:36:7f:43:33:29:47:c9:93:f6:75:fa:b5:ae:54:b9:47:13:
         3d:98:78:37:85:02:bf:27:e8:72:10:a2:6d:91:81:98:c9:dd:
         2c:87:1c:15:4b:ad:b4:03:0e:55:c6:0e:b7:b1:c4:db:22:28:
         86:ee:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:02 2026 by rpki-client