Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File:                     cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier:          +HJ4vVHbV+Q+54MWpmTjjxI6C9lLxbY9Ghv+ZP4dMj0=
Subject key identifier:   51:C2:2D:3C:4D:15:74:95:E9:E6:55:FC:38:BC:FA:A1:5B:A1:B0:B6
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer:       /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial:       019FF8D9E00AD41DDCF4E9E2081DFB266027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number:          0287
Signing time:             Thu 13 Aug 2026 02:00:55 +0000
Manifest this update:     Thu 13 Aug 2026 02:00:55 +0000
Manifest next update:     Fri 14 Aug 2026 02:00:55 +0000
Files and hashes:         1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
                          2: 3-exyexQ1xdpKGbpl-0EQUeMOn0.asa (hash: gMyFmlJorWF/kH2i/GMMziUsSiuXvqY0GqALAKfezjo=)
                          3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: VTLdKZwoa3QTT2mfXRmhhT9Pt1nNVeHMmIbb3Fpcles=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:d9:e0:0a:d4:1d:dc:f4:e9:e2:08:1d:fb:26:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
        Validity
            Not Before: Aug 13 02:00:55 2026 GMT
            Not After : Aug 14 02:00:55 2026 GMT
        Subject: CN=51c22d3c4d157495e9e655fc38bcfaa15ba1b0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:ea:8b:f8:fc:d9:60:c3:c8:7f:cd:10:43:
                    27:00:d0:c9:5d:60:ad:68:5d:f1:5e:5d:d2:5a:a7:
                    1f:50:a4:83:08:ca:42:73:33:17:43:67:ec:fc:48:
                    b3:fd:78:d1:e6:19:7f:10:58:5b:ea:72:12:43:df:
                    0a:27:57:20:dd:be:57:80:a5:18:1b:77:c9:b1:19:
                    c5:4d:2d:7e:f9:14:74:f2:68:1d:7e:d3:4a:50:99:
                    52:c4:2f:d5:3c:67:5c:ed:ba:c8:10:09:87:21:f0:
                    4b:24:6d:d8:e6:ef:47:12:d5:b2:64:35:5e:71:11:
                    1a:e1:4d:3a:7d:c7:1d:de:98:04:98:bc:55:dd:7f:
                    64:d4:d9:4f:15:52:93:8c:28:e6:9c:2f:06:fc:a6:
                    fd:4a:d8:32:03:9a:1f:ff:a2:e7:b1:8f:13:5a:06:
                    cb:a4:08:12:96:22:19:4a:68:20:bf:b1:6f:33:a5:
                    33:1a:cb:46:a9:ee:79:18:81:95:5a:61:e0:1d:10:
                    a2:28:32:d8:89:c9:5e:07:a4:79:cd:b2:bb:e5:44:
                    84:bc:4a:13:75:88:28:cd:a7:74:ae:93:14:67:57:
                    73:1f:56:1d:de:a2:6d:5f:4b:af:71:d4:5a:b4:49:
                    d9:5e:97:16:e1:77:46:46:7a:34:34:70:da:d6:82:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C2:2D:3C:4D:15:74:95:E9:E6:55:FC:38:BC:FA:A1:5B:A1:B0:B6
            X509v3 Authority Key Identifier:
                keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:cd:c5:ce:1b:4f:4d:58:f4:47:cb:0c:fc:36:d4:d9:88:23:
         ce:3f:e4:7e:35:10:d2:e2:b6:ef:ef:de:ef:02:37:69:59:c4:
         34:88:f4:6a:80:75:b9:cd:73:89:a5:bf:c4:0b:89:21:0c:8f:
         dc:c5:7d:68:dc:1e:88:2c:0e:01:62:23:c4:7a:29:01:cd:01:
         ac:e0:13:7e:e5:32:01:87:cc:81:97:2c:94:64:e4:68:a0:84:
         0a:9d:fb:a8:7f:69:1c:d8:3c:86:0b:e9:90:1b:29:28:94:57:
         92:88:db:f7:5b:14:98:ad:10:b9:a6:05:0f:da:6a:16:e7:96:
         f0:b1:b0:c1:ed:52:92:2d:09:f3:ad:eb:be:3c:18:de:c9:19:
         0d:95:9a:04:ef:0c:e1:3e:82:2f:3a:df:aa:55:a5:9c:14:1d:
         74:4a:a1:1c:7c:f2:ab:0e:d6:38:bf:2c:52:5e:60:90:71:9b:
         0b:45:a4:37:48:9d:2e:88:73:61:8e:11:75:88:ae:2d:22:00:
         f7:f6:5b:cd:43:08:51:42:cf:d2:b0:e3:2e:22:bd:ea:f3:9b:
         92:ea:2e:64:e3:84:94:a5:3a:e7:1a:cc:bb:b9:47:5e:b3:0f:
         ca:08:91:ba:e5:01:07:89:a2:c2:26:f7:cb:9c:5c:09:1a:d3:
         12:45:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:46 2026 by rpki-client