Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File:                     43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier:          u69YBMIuHw6x297B01BUMN7sXe2D3RlEIcsk5TPGEUY=
Subject key identifier:   FC:19:6B:79:F3:2C:16:33:86:60:F4:95:23:EF:92:E0:69:13:6A:F1
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer:       /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial:       01A0009318D050BD5638872491EAA6AD5B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number:          192F
Signing time:             Fri 14 Aug 2026 14:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:35 +0000
Files and hashes:         1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: cqQFO78l3JguMZgP1gaCPoQBBhjDQ6Magj6yIibkxY4=)
                          2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:18:d0:50:bd:56:38:87:24:91:ea:a6:ad:5b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
        Validity
            Not Before: Aug 14 14:00:35 2026 GMT
            Not After : Aug 15 14:00:35 2026 GMT
        Subject: CN=fc196b79f32c16338660f49523ef92e069136af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:52:5c:67:f5:3b:b5:fc:5d:b3:53:7e:c2:
                    45:b6:f2:f2:ea:10:7a:f0:38:0a:9c:f5:7f:93:bf:
                    f7:f0:39:0b:89:73:af:30:c0:c0:d8:d5:61:7b:ad:
                    0d:f4:1e:07:db:1e:98:c3:6d:9a:d5:73:3b:b9:3c:
                    89:c7:d4:89:ff:23:a6:e4:07:0b:19:ba:68:49:7a:
                    87:89:c1:ca:24:3e:71:5f:56:3a:ee:b5:74:8c:ff:
                    81:fa:17:6a:82:bf:c1:c1:c9:37:2f:5c:d2:88:8f:
                    46:4c:a3:67:c3:4f:71:e6:50:eb:1c:dd:a1:56:ab:
                    92:75:8a:d1:73:9e:e9:1c:1a:cd:99:ba:09:f5:26:
                    5c:6c:b1:b4:f1:66:f4:80:ef:e8:4a:46:fb:96:05:
                    5c:16:97:ab:95:a9:83:72:57:cf:a0:36:6a:cb:1f:
                    8b:77:82:72:ed:e0:3e:32:21:a0:49:98:dd:b4:09:
                    87:e5:11:a9:a6:1d:9b:11:99:0a:7d:4d:d9:93:90:
                    c4:e9:e2:ad:d7:4d:eb:50:fd:18:bf:5c:c7:69:1f:
                    82:c0:72:26:37:e0:6d:2a:3a:02:dc:69:6f:1f:96:
                    96:20:45:97:f8:1a:6d:a9:0a:a5:ec:bb:ce:52:e6:
                    55:fc:3d:c0:74:0b:23:11:11:9f:03:75:ac:9b:2e:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:6B:79:F3:2C:16:33:86:60:F4:95:23:EF:92:E0:69:13:6A:F1
            X509v3 Authority Key Identifier:
                keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:20:6d:d5:bb:12:39:ff:22:36:73:41:fb:6a:fe:68:8a:
         5c:2b:8e:7c:c0:57:1c:a5:b4:15:48:1a:ab:71:30:5a:17:0a:
         1d:80:5a:42:8f:6a:fa:e9:6f:46:18:f7:97:d0:82:93:37:da:
         62:db:da:0b:5b:0f:ab:c1:27:fd:d3:01:e2:65:55:9f:08:5a:
         49:2d:cd:79:a4:1e:ba:92:93:6c:a7:29:5a:86:b7:f0:fa:bc:
         d2:9d:b4:31:d4:9d:82:a5:6b:6c:a3:53:81:b0:c5:2c:f7:aa:
         6a:c2:15:1d:82:bb:91:3f:fe:e8:19:35:e0:72:50:8a:7e:01:
         a8:e3:1e:6e:ac:5a:d7:62:58:1d:2d:22:71:89:5c:b8:50:ce:
         43:99:46:8a:41:70:60:7f:7d:f3:3c:3a:22:eb:44:5c:8c:5f:
         ac:6e:ad:12:ce:92:bc:ee:ba:68:a6:0b:41:b8:f3:f5:ae:9f:
         7f:e6:62:69:f9:a4:a9:27:0f:19:3e:b5:91:ca:66:5a:48:43:
         99:24:97:af:5e:74:cd:3d:c7:a7:0f:fd:8c:ab:ef:e1:ce:fb:
         f9:18:94:96:7f:d5:cc:13:f2:f4:1c:37:05:f5:a8:a2:28:d6:
         4e:93:50:9a:22:6e:68:e7:16:42:52:9f:79:35:95:1e:56:0e:
         71:e2:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:46 2026 by rpki-client