Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
File:                     RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft (raw, json)
Hash identifier:          Fj4t56dnk7ifSZTfj74wYTlsLsKwC8kHfIQR5KD7iSk=
Subject key identifier:   73:D7:B7:0D:73:40:54:32:99:27:BB:92:00:92:8C:38:A7:F7:8A:02
Authority key identifier: 46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26
Certificate issuer:       /CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
Certificate serial:       01A0043937E98A6AC7D7AD3209D0BC3EB53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
Manifest number:          023A
Signing time:             Sat 15 Aug 2026 07:00:53 +0000
Manifest this update:     Sat 15 Aug 2026 07:00:53 +0000
Manifest next update:     Sun 16 Aug 2026 07:00:53 +0000
Files and hashes:         1: BHHGcSt-xcyqmuqZZJUvi7Il74E.roa (hash: 1xQtvXwKdGqA3UbB0BtNu6enZHNYo0wQaicN5K3pYMc=)
                          2: RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl (hash: LDofHvvmBHaBjfrc2h6Y2ljiLAkDMaeieeK61JlO37s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:39:37:e9:8a:6a:c7:d7:ad:32:09:d0:bc:3e:b5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
        Validity
            Not Before: Aug 15 07:00:53 2026 GMT
            Not After : Aug 16 07:00:53 2026 GMT
        Subject: CN=73d7b70d734054329927bb9200928c38a7f78a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:08:22:25:c0:33:3f:56:d8:2a:7e:09:4b:
                    76:0a:6e:ee:b6:f6:45:d0:0c:f7:cc:7b:a9:48:47:
                    18:17:99:b0:66:62:24:bd:e1:ff:07:38:41:84:1b:
                    47:d5:95:08:b3:22:b3:85:4a:09:97:4e:8f:04:01:
                    74:3e:64:77:10:3f:b4:d3:08:7c:c3:5a:86:86:7d:
                    72:4d:d2:6d:d0:46:66:73:5e:60:ee:ec:47:5e:0a:
                    46:7b:08:7c:bc:ab:6a:6c:7f:4e:ab:db:00:01:46:
                    9d:b0:de:db:a7:86:48:0d:85:46:6a:03:0e:95:9c:
                    59:75:cb:de:c0:df:fe:99:55:e0:56:27:76:99:d4:
                    00:63:b2:95:cb:fd:77:fd:ce:89:c3:58:aa:cc:b9:
                    af:67:0c:c8:f4:32:67:d5:0c:56:ed:b3:65:36:62:
                    7d:cf:06:6d:0b:5a:67:ed:14:69:9d:0a:e6:aa:c2:
                    db:f5:7f:6e:ad:f9:a4:1b:1a:30:65:ce:58:35:ed:
                    f9:a7:ce:e4:62:0e:4a:a9:57:e5:b0:ed:0b:d7:33:
                    a9:07:79:38:c1:19:3b:66:84:45:25:b2:75:7c:f7:
                    56:16:c3:93:5c:ab:e0:01:57:f4:bd:f4:31:f7:77:
                    a0:7d:13:82:77:78:2e:15:e7:aa:43:c0:0d:a3:ce:
                    91:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D7:B7:0D:73:40:54:32:99:27:BB:92:00:92:8C:38:A7:F7:8A:02
            X509v3 Authority Key Identifier:
                keyid:46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:fc:76:6b:30:87:c2:3c:52:57:8d:35:86:1b:55:40:57:
         ee:21:e6:5c:5f:5b:0a:69:25:0e:c2:e4:c4:bd:c9:d9:86:38:
         ed:3d:85:4d:2b:91:ff:91:e0:78:38:35:a4:8f:b9:f6:f1:39:
         67:97:65:97:94:b1:aa:1c:f9:8f:5f:9b:0d:95:52:c4:cb:98:
         ff:5a:70:ac:76:24:74:6a:d5:fe:e9:c0:84:a2:2b:4e:46:f9:
         22:33:97:09:d4:41:8a:6e:43:7e:14:a1:fa:5f:cc:c0:10:6e:
         31:74:a2:d4:e3:ae:72:91:1e:68:ce:a5:68:0c:a2:91:07:1d:
         87:c4:5a:1b:91:a5:ad:fc:4f:55:3c:c5:bd:19:50:1f:96:4f:
         f9:b7:a8:d1:41:88:c2:4b:cb:8f:23:fa:f4:66:17:29:6c:e6:
         5a:7a:51:9e:29:11:86:af:e3:90:c9:d1:ee:7e:d8:6e:70:16:
         2e:34:2b:47:20:51:0a:93:4f:ea:13:55:d1:a9:6f:9c:8e:7b:
         5e:a5:30:41:f1:79:88:37:3e:f2:fb:be:e3:60:b1:89:4c:13:
         36:d2:40:95:98:50:ca:10:c1:64:e1:3e:ee:a9:30:aa:0f:3c:
         3e:74:9e:55:68:31:89:6f:b1:7d:be:48:4f:ba:71:fc:1d:f8:
         2e:7d:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:42:57 2026 by rpki-client