Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File:                     16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier:          hBCMrwfvQwR1n4Xlcp1kix/b6OBhODk7uSnN1rKwrtw=
Subject key identifier:   26:97:6C:CD:D3:1C:E1:0B:7E:7A:2C:30:D9:B4:BF:B5:3F:79:DD:5F
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer:       /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial:       01A0250E3FADF0F83CA6690FD063BBC5E349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number:          03B9
Signing time:             Fri 21 Aug 2026 16:01:25 +0000
Manifest this update:     Fri 21 Aug 2026 16:01:25 +0000
Manifest next update:     Sat 22 Aug 2026 16:01:25 +0000
Files and hashes:         1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: BpTJWrEbZYr837d4hhpJdssY97viNVHVc1sxseB3Hsc=)
                          2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:0e:3f:ad:f0:f8:3c:a6:69:0f:d0:63:bb:c5:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
        Validity
            Not Before: Aug 21 16:01:25 2026 GMT
            Not After : Aug 22 16:01:25 2026 GMT
        Subject: CN=26976ccdd31ce10b7e7a2c30d9b4bfb53f79dd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:ac:ba:9b:49:8c:25:ca:06:34:5d:4b:ce:
                    14:77:02:ec:6d:16:8b:60:1b:41:f9:57:b5:15:bc:
                    cc:28:72:ff:6b:10:d6:72:69:62:a8:a4:38:00:61:
                    48:f2:fa:2c:45:47:9b:24:ed:f1:f6:7c:81:98:55:
                    d5:95:95:7d:a0:d3:b1:f2:6a:e4:60:30:a2:d2:33:
                    bf:82:52:ec:28:3e:43:c7:bb:a8:f8:32:0a:99:62:
                    4f:27:ab:fa:61:77:e9:57:3c:b2:6a:e2:86:bf:f1:
                    87:a2:f6:97:d7:10:e1:bc:fa:b1:18:b4:34:98:67:
                    11:77:2b:50:b1:b0:c0:de:29:a6:75:8d:76:e6:32:
                    8a:81:2f:f3:37:f1:48:91:8d:6e:18:11:f0:51:71:
                    a0:f5:49:17:72:98:55:28:1d:5c:5e:bd:1f:32:0b:
                    62:9c:7b:bc:0c:58:e4:69:14:d6:4f:b7:55:27:75:
                    30:7c:67:b8:5d:35:ad:25:df:a8:9a:ef:8d:3c:7f:
                    d4:47:9a:ec:63:7e:0b:5f:11:d9:c9:37:b8:9d:8c:
                    bc:d6:02:a3:71:04:34:64:ba:f0:29:6c:e4:7b:d3:
                    ff:79:52:d9:e8:32:38:49:6a:1e:49:ae:49:f2:5b:
                    b4:e6:59:a3:cb:2d:54:a8:9a:c5:29:a0:d3:d0:17:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:97:6C:CD:D3:1C:E1:0B:7E:7A:2C:30:D9:B4:BF:B5:3F:79:DD:5F
            X509v3 Authority Key Identifier:
                keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:66:db:0c:a2:25:0b:26:39:1e:c8:18:cc:db:40:04:31:19:
         f2:ea:84:65:05:14:e1:c2:42:89:da:1f:7d:a8:6f:44:69:0c:
         a4:a8:dc:08:f0:3e:5d:cb:f5:9c:40:ae:0e:32:87:af:45:17:
         2b:c2:34:b7:75:15:99:02:ab:73:21:98:a2:19:ba:cd:67:b7:
         f1:61:ff:71:05:4b:54:66:50:65:9c:8a:94:e9:dc:50:0a:c2:
         a3:57:fd:34:f7:be:f2:12:9b:f6:39:81:46:b5:46:c5:eb:cb:
         df:68:8c:c0:91:e5:85:fa:06:35:7a:f9:5d:66:5d:42:22:92:
         e0:ca:38:08:e4:df:f7:1c:82:be:b3:e2:56:86:de:d0:2d:4a:
         f0:c2:76:39:cc:e1:d1:a7:eb:d2:f8:93:e8:05:1f:49:49:1c:
         23:54:7a:50:54:04:42:a2:bb:10:75:ee:fe:d4:37:0a:29:d8:
         b4:2a:de:58:80:6a:a1:8e:c9:6a:28:22:56:d2:fa:a6:ea:fe:
         77:64:a3:e6:4e:dc:1e:15:e6:18:cd:37:89:9e:3e:de:cb:4c:
         7a:5c:06:5f:4b:0e:a1:16:cd:8e:e5:c1:37:67:33:a3:e6:f4:
         c6:cc:6a:6d:fe:11:e9:df:65:83:25:04:0d:41:4f:f7:a5:12:
         df:b0:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:03:58 2026 by rpki-client