Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File:                     QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier:          Yqh7rBi+1umPaf/aCDl00LW9MTn9srez8Tjoa7aYXZQ=
Subject key identifier:   0B:BD:54:8D:9B:77:A2:4D:84:B1:00:FC:41:73:08:E5:7F:04:E2:F4
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer:       /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial:       01A0201E271C2A32D98971E19100749F02A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number:          0BD5
Signing time:             Thu 20 Aug 2026 17:00:41 +0000
Manifest this update:     Thu 20 Aug 2026 17:00:41 +0000
Manifest next update:     Fri 21 Aug 2026 17:00:41 +0000
Files and hashes:         1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: qq35MWQLkRGIfdSqoD30B3FdkNhhRuBeJvn4vC7EhXQ=)
                          2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:1e:27:1c:2a:32:d9:89:71:e1:91:00:74:9f:02:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
        Validity
            Not Before: Aug 20 17:00:41 2026 GMT
            Not After : Aug 21 17:00:41 2026 GMT
        Subject: CN=0bbd548d9b77a24d84b100fc417308e57f04e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:19:b1:d3:8f:d8:fa:03:14:c7:e9:53:bd:
                    a0:4c:a6:04:15:eb:38:63:24:79:26:11:b0:26:26:
                    0a:98:0a:e8:52:d0:49:6c:5e:57:e3:9c:7b:b4:9c:
                    72:2e:b5:1a:37:f3:a3:f5:f1:3f:df:be:98:55:9a:
                    9e:40:2b:9f:ab:cb:f8:22:3b:a4:ee:56:6d:8a:7f:
                    5a:a8:c7:c8:e2:f4:93:dd:61:c4:e7:fe:2a:b9:85:
                    97:7d:0a:84:65:a2:67:bb:8f:d3:53:4e:35:85:20:
                    05:9d:ae:79:d7:9a:4b:d3:37:97:44:bf:d6:8b:2e:
                    74:7c:70:09:19:90:02:15:fb:1a:c8:73:b1:42:05:
                    10:8b:1c:a8:9b:b2:22:8e:40:9d:b1:02:eb:6c:ee:
                    24:d4:ec:65:04:85:7a:3d:3b:3b:6e:29:81:28:4a:
                    1e:3f:88:d5:a6:65:8f:db:eb:1d:b3:86:b6:bf:d9:
                    f2:6f:0e:fb:e2:24:ee:89:78:b8:c1:1b:79:e9:31:
                    2a:a0:35:f6:d1:1a:ae:58:a6:88:b8:0a:f4:9f:3f:
                    e4:3b:42:f1:42:b4:fb:33:38:62:8f:7f:fe:e6:b0:
                    97:9a:1c:40:62:47:96:1f:e6:f6:04:ef:fa:00:7c:
                    82:dd:44:de:fc:2f:4d:a7:3f:48:82:55:bc:ed:d9:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:54:8D:9B:77:A2:4D:84:B1:00:FC:41:73:08:E5:7F:04:E2:F4
            X509v3 Authority Key Identifier:
                keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:50:2f:87:eb:63:9f:2e:28:57:5d:d0:fe:c3:42:75:f6:
         15:5f:a4:ae:e6:27:64:02:b7:78:7c:4d:aa:07:e5:a2:4e:52:
         9b:60:53:61:30:18:22:58:ab:c8:84:98:09:7c:ba:23:39:cc:
         5c:a9:a1:4a:77:f7:f0:c9:bb:a7:b3:af:e3:74:d5:84:e2:99:
         b1:f8:8f:92:2d:28:4d:e8:70:91:2d:e8:dc:75:f2:4c:68:40:
         b8:3e:be:06:a4:fe:bb:42:f3:9f:9b:4e:5b:de:26:c1:6e:fb:
         1b:a9:8c:0b:04:b1:0b:23:65:44:92:31:7b:3d:a4:5b:79:58:
         43:ea:39:5a:8d:82:df:5f:2d:5c:12:d1:d3:5e:0a:1d:27:16:
         e8:cb:cb:04:a0:e9:3b:88:ea:88:d4:0e:f9:cc:65:4d:78:71:
         c5:d6:b2:e0:36:55:3d:5a:88:35:6b:e5:75:ba:d0:f5:37:4a:
         8c:fe:67:fd:bc:0a:b8:db:25:ca:e9:fb:95:f9:9a:55:67:bd:
         2c:50:3c:fd:5f:85:96:12:a8:f0:79:33:0a:11:7f:25:f3:56:
         37:76:99:ab:fb:9e:ad:ca:7a:67:63:32:73:9d:32:6e:cb:f4:
         00:f7:12:2c:63:6a:4c:af:22:70:fd:e5:96:50:c9:8b:c9:7b:
         0e:66:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:30:44 2026 by rpki-client