Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          g37Wc5aFFk5btfovBmD2mWXD2KhDEuJq0PXJOAUrzG8=
Subject key identifier:   35:E1:9D:74:39:84:48:5F:26:DE:E6:E3:D3:9B:BB:06:55:20:A4:69
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       01A0010148A1480352357696AD235BCD808D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 16:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:56 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: BATCm2HjsXji6p2etQIXnMBAnFqVDEO7iAobFuSf7AM=)
                          2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:48:a1:48:03:52:35:76:96:ad:23:5b:cd:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: Aug 14 16:00:56 2026 GMT
            Not After : Aug 15 16:00:56 2026 GMT
        Subject: CN=35e19d743984485f26dee6e3d39bbb065520a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:f0:72:d0:bf:b8:97:cc:6c:6e:39:81:13:
                    72:6c:0e:5d:a3:24:31:66:59:60:d3:9c:a6:3c:71:
                    c6:c5:85:36:b8:98:40:08:24:c8:4c:a7:fc:7c:37:
                    6d:48:98:8c:50:48:ff:9c:f7:b0:2c:da:15:ac:fc:
                    a5:d0:78:32:d4:aa:c1:6a:21:1b:48:da:7a:66:f0:
                    34:ca:80:0f:15:fa:cb:91:00:07:24:80:ba:ed:f9:
                    3f:55:80:a6:c3:e4:f5:c0:3f:fb:3e:32:72:a3:f5:
                    ae:34:c8:67:c3:45:bf:ae:3a:8e:11:0e:2b:a1:c2:
                    6e:51:33:61:1c:9f:e3:38:e5:48:f3:1f:dd:fa:33:
                    8e:ee:9c:22:f4:4c:4f:ab:40:02:65:2c:83:7d:52:
                    22:2b:2f:4d:9b:10:75:82:df:5b:c5:75:a8:ed:90:
                    5e:3b:72:91:41:55:e2:3b:26:14:20:f0:ad:c8:a6:
                    d4:03:ed:b4:c9:f8:b5:a5:2e:a3:1d:bb:ad:b8:21:
                    1e:bd:2e:b5:ff:6e:75:b9:bd:ad:69:81:8b:7a:18:
                    96:12:c7:60:54:b6:8c:c5:96:7f:6b:33:13:19:60:
                    3e:c8:f4:79:c9:29:7b:40:b0:43:92:0b:17:27:01:
                    ba:25:96:29:31:b2:40:f1:8a:9b:c0:07:58:df:be:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:9D:74:39:84:48:5F:26:DE:E6:E3:D3:9B:BB:06:55:20:A4:69
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:f1:06:f8:d0:8e:e3:75:f1:e7:5f:63:fe:53:da:64:5a:
         56:2a:22:a1:0e:37:d8:63:11:22:66:07:98:c5:ad:14:b7:01:
         ef:42:60:b0:67:39:e9:d7:84:c0:f1:71:e8:b7:cb:cb:49:d1:
         56:4b:48:68:a5:7f:68:9a:ee:99:a6:66:6c:7c:07:91:6c:5b:
         51:3f:f7:26:7a:03:11:11:b4:12:d4:6c:15:d2:d9:9c:bd:2a:
         4e:a6:70:47:cc:6e:42:48:58:eb:29:7e:45:8b:2f:0a:c4:74:
         99:4f:62:12:83:f5:8f:80:64:e2:86:33:e3:24:30:cf:c1:fe:
         33:e2:cc:f8:3c:a8:ff:d3:09:02:11:d8:1b:0e:7f:71:9a:1a:
         cb:f3:e9:73:14:42:a0:5a:f6:5e:5d:5b:e0:83:89:5e:d3:ba:
         79:c9:af:77:f1:7c:14:7b:22:23:23:d7:70:02:bc:95:4a:d4:
         46:45:4d:c3:61:5a:01:0f:65:26:e9:e7:00:e0:48:c1:05:b8:
         fa:9b:d0:15:33:db:18:cd:19:e4:f6:e1:1c:58:c8:96:09:e7:
         0e:c9:a2:4b:fb:18:36:af:09:42:4c:d1:38:a9:2c:8e:40:03:
         8a:88:96:c5:dd:26:64:f3:ac:9a:e3:44:87:e6:8e:9b:19:1a:
         dc:97:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:05 2026 by rpki-client