Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File:                     xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier:          +NesXkuY5Zh+fTwcfwmY431AFYpPyeSEfQUQ/TgeBys=
Subject key identifier:   31:20:87:BF:0F:56:DE:0F:86:B9:72:AE:2D:91:A1:3C:90:48:34:A5
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer:       /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial:       01A00402190F26875E1C986211DC3A2099F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number:          0DED
Signing time:             Sat 15 Aug 2026 06:00:41 +0000
Manifest this update:     Sat 15 Aug 2026 06:00:41 +0000
Manifest next update:     Sun 16 Aug 2026 06:00:41 +0000
Files and hashes:         1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
                          2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: OEDgvKfG9mBDlmc3se4qvBoDwZJljeyyt2V29kQiFIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:02:19:0f:26:87:5e:1c:98:62:11:dc:3a:20:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
        Validity
            Not Before: Aug 15 06:00:41 2026 GMT
            Not After : Aug 16 06:00:41 2026 GMT
        Subject: CN=312087bf0f56de0f86b972ae2d91a13c904834a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:e9:0b:5c:37:e4:fb:fb:9d:be:9c:2c:0e:
                    f9:fe:2d:24:99:81:ce:e0:be:1d:aa:44:7d:25:63:
                    e0:ee:da:83:e6:aa:57:a5:2e:80:58:fe:26:a4:82:
                    fe:c7:a1:2c:78:d4:02:b5:80:f8:d8:11:ce:e6:b2:
                    44:0d:a7:56:29:32:70:ad:f6:9b:f1:05:61:05:8d:
                    1b:e5:ed:c6:0a:c2:9c:6f:67:40:bb:0b:ca:87:55:
                    bf:85:88:2a:97:d0:55:08:2f:68:86:8e:44:75:02:
                    0c:d9:a0:a4:a2:5c:ce:b9:cf:26:cb:17:e4:74:72:
                    b4:cb:07:77:c3:76:21:64:9c:ef:0f:7c:02:85:49:
                    e6:b0:eb:f5:d0:33:5d:3f:36:5e:5f:84:84:ac:96:
                    5a:c5:50:e9:8c:53:a5:e6:88:8b:ab:bc:8c:fe:cf:
                    ea:ab:a9:7c:e8:1e:7f:53:e8:65:58:14:56:9a:18:
                    d1:5f:a7:bb:42:85:c2:01:4a:9b:71:dd:cb:49:10:
                    ed:c7:4c:59:bf:05:5a:26:b4:71:2b:8a:d0:8d:de:
                    d0:a0:e8:71:50:b2:50:1d:ab:55:42:bb:01:15:63:
                    be:79:84:8b:b3:d0:01:da:2a:68:a7:72:6f:a5:b5:
                    0c:85:11:1b:ba:1c:fe:3b:0e:63:91:01:8e:4f:5f:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:87:BF:0F:56:DE:0F:86:B9:72:AE:2D:91:A1:3C:90:48:34:A5
            X509v3 Authority Key Identifier:
                keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:66:92:85:27:4b:e4:e8:bc:3a:68:a3:ee:c7:13:bd:df:
         db:a8:52:70:17:ed:4a:15:1e:a6:33:24:d3:7f:5c:7e:b1:f7:
         c1:84:5c:e5:4c:2c:c9:52:44:7f:24:65:f5:88:56:44:9a:c7:
         47:56:89:53:d6:01:10:98:f2:57:76:5e:5a:e7:59:12:50:da:
         82:10:20:a5:f3:b9:23:b2:b8:cf:8d:bd:4b:6c:8b:b6:1a:0d:
         59:38:26:4a:58:bc:24:be:c1:e5:8b:42:3a:93:44:3f:48:5a:
         12:c9:48:5f:30:2c:60:59:1d:63:72:46:45:28:f9:37:06:4e:
         5a:b7:e5:e5:7f:44:33:a5:fe:45:d8:d6:84:70:87:94:d6:65:
         08:94:6d:e0:8b:b5:88:f4:08:0b:84:da:5a:c3:db:9e:2d:d7:
         f6:91:aa:5e:49:d2:7d:b9:5f:9c:92:42:91:d0:2d:e0:80:51:
         16:3d:e8:40:66:be:6d:ed:cf:1c:dc:fd:a1:74:5e:62:ae:75:
         aa:79:6b:31:91:59:b9:b8:44:b0:af:36:87:1f:2e:52:43:83:
         5e:88:03:4a:20:32:95:23:59:52:1b:1b:7b:de:9a:9e:46:d4:
         0e:75:27:5f:96:ad:04:dd:ac:a2:77:f9:e4:19:f4:18:0a:68:
         39:1a:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:03:22 2026 by rpki-client