Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File:                     cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier:          SNBNDg+JSzJMhWVMY/zQof4rw+jPBmdpCVYrj5dKDq0=
Subject key identifier:   29:84:5C:24:70:8E:5B:CB:A6:02:86:6C:C6:9F:52:F9:95:25:8A:8F
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer:       /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial:       01A003269B3BB8C1E7DD3A7A04A9C8CD7FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number:          0E96
Signing time:             Sat 15 Aug 2026 02:00:56 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:56 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:56 +0000
Files and hashes:         1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
                          2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: lk+L8kSda0vF+E3j9o5EV+62RlqFy+aQ8/Yz57VLiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:9b:3b:b8:c1:e7:dd:3a:7a:04:a9:c8:cd:7f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
        Validity
            Not Before: Aug 15 02:00:56 2026 GMT
            Not After : Aug 16 02:00:56 2026 GMT
        Subject: CN=29845c24708e5bcba602866cc69f52f995258a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:1d:1c:21:03:33:c5:32:bc:a1:16:e5:c3:
                    fa:63:0d:df:b6:1b:3b:dd:44:60:55:4f:40:b4:f0:
                    9f:34:47:c2:46:01:de:6f:c5:5b:f4:f7:d6:e7:aa:
                    e3:08:7d:f3:5e:ba:14:29:b7:8e:2c:b2:a5:e7:b4:
                    59:07:ea:0c:ad:d6:0e:b5:51:de:03:98:8d:fe:5c:
                    9d:fd:17:af:76:34:20:be:87:a9:63:c9:19:9c:d3:
                    60:7a:8c:46:66:0c:97:6e:bb:c9:10:bd:3a:7a:98:
                    5d:5e:f3:8f:fe:5f:3e:2d:ea:9f:83:a7:70:cd:51:
                    5b:51:cb:92:50:0a:cb:7a:ea:ec:03:2d:d0:a3:b8:
                    c0:e1:ee:db:71:ca:db:0f:f5:26:81:04:94:1b:5c:
                    4f:95:7b:17:76:a2:fa:5e:4b:7c:8e:b0:51:f4:6c:
                    ed:c0:f4:d8:2a:c8:18:07:ed:4b:fa:c2:76:fa:e1:
                    bf:7a:c0:c4:07:9a:d1:05:7d:61:b4:89:13:e8:c9:
                    66:54:b1:b5:0c:78:d0:0e:0d:fc:62:bb:e9:b4:e3:
                    88:93:92:f0:26:90:6d:70:57:ac:d3:b3:c5:0d:96:
                    f7:d2:98:96:9b:c7:3c:4d:84:04:60:4e:36:da:11:
                    10:67:de:90:51:49:cb:e9:dd:78:c7:ac:d7:04:ff:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:84:5C:24:70:8E:5B:CB:A6:02:86:6C:C6:9F:52:F9:95:25:8A:8F
            X509v3 Authority Key Identifier:
                keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:53:72:a0:53:06:67:bb:9d:ae:02:6a:07:11:a6:9b:ce:
         dd:0f:71:84:e0:f0:2d:d3:d9:d7:48:02:84:b5:ed:b6:8e:64:
         cf:a1:95:91:c4:a3:94:2c:0c:ca:aa:ab:fe:8c:c9:51:de:75:
         5a:a6:a3:4a:d7:10:c9:ae:47:37:f6:fc:62:51:3d:89:1e:f9:
         16:36:9c:82:58:e4:d3:12:da:86:33:f6:b4:f4:a6:cb:54:24:
         d1:f4:d7:f9:cb:ba:5e:2a:b2:cd:9b:59:e1:07:b6:7f:a7:11:
         ba:bf:fa:93:68:8c:13:a9:43:04:01:6a:c3:17:f8:a7:cf:13:
         1b:e4:5b:22:66:4b:9b:bd:fb:0c:33:e7:e4:a6:a5:0e:3d:3c:
         f4:cb:82:29:09:33:29:70:a3:f2:c5:73:0d:ad:07:f5:54:77:
         6c:7f:2c:04:7a:fc:19:94:d0:3e:3d:64:12:f0:19:d8:bb:e0:
         e4:61:1e:8b:19:40:eb:ed:db:2b:e2:70:0d:76:98:dd:40:78:
         e0:bf:d6:26:d5:bb:38:4f:f0:5b:c5:9d:7a:d9:e7:75:53:a8:
         61:d5:b9:ca:64:b2:65:2e:a5:ba:b3:32:65:b0:37:50:34:45:
         af:94:29:b8:d5:5f:fe:cc:be:cb:df:66:4c:b7:d0:0f:1b:2f:
         cf:b3:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:03 2026 by rpki-client