Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File:                     CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier:          LfaVJ0c83QmhXwbLDkdqz7Jspm42XJBgbSDNz02MZCs=
Subject key identifier:   4A:83:92:3B:0C:B3:1E:1B:AC:EC:04:4E:F4:63:32:C6:A2:0D:89:40
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer:       /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial:       01A040BBF5C113784447CDF61BF8350F09A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number:          016A
Signing time:             Thu 27 Aug 2026 01:00:55 +0000
Manifest this update:     Thu 27 Aug 2026 01:00:55 +0000
Manifest next update:     Fri 28 Aug 2026 01:00:55 +0000
Files and hashes:         1: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: yXi+g/FKhyQAOJ6yIO4hdE4mrM5X1F6qJpfeB92ilzo=)
                          2: OnyZlnAGFE9z6qHS8PQZpxuPoJI.roa (hash: MSNL5ZzuAie/1vcGJ5gTivp3rjaaK9xa+gQRkIgvUMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bb:f5:c1:13:78:44:47:cd:f6:1b:f8:35:0f:09:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
        Validity
            Not Before: Aug 27 01:00:55 2026 GMT
            Not After : Aug 28 01:00:55 2026 GMT
        Subject: CN=4a83923b0cb31e1bacec044ef46332c6a20d8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:6a:f1:b7:e9:ba:91:8c:ff:27:f7:3e:d5:
                    b8:8c:ca:60:f4:4b:82:82:ba:d9:3c:70:47:67:fe:
                    9a:f0:67:0d:e3:a9:83:d1:7d:3c:d1:a8:cc:75:5c:
                    0c:91:48:49:ab:0c:b1:e2:82:26:d4:0e:59:5d:c5:
                    5e:3e:fd:39:dd:13:13:45:56:05:42:11:c1:2b:41:
                    9f:af:5c:45:ee:13:4c:b0:04:2d:74:c8:82:1a:c7:
                    58:ff:11:0d:a9:90:a8:89:fd:3f:c1:e3:51:97:5e:
                    e9:48:50:a7:46:0a:90:c4:6f:43:6b:b5:f8:53:38:
                    5a:75:82:f3:da:12:fa:76:02:17:e2:0d:c8:07:4a:
                    f7:3c:91:05:a8:5a:e1:96:50:20:db:c1:3f:b9:a9:
                    18:67:4d:4e:00:59:4e:7e:df:ff:a8:0d:8e:7c:f9:
                    bd:39:0b:9e:c7:4e:54:42:f9:e1:1d:35:6e:99:c8:
                    c0:ab:2c:6f:d4:9f:4b:d9:05:74:3f:5e:d2:84:45:
                    54:b7:a5:e4:f1:c0:81:b2:90:e1:75:25:f9:35:00:
                    7a:76:fb:d3:92:07:21:e3:d7:b5:10:08:e5:5a:e1:
                    9d:de:36:95:bd:87:dc:e4:26:69:9a:36:c9:e5:f5:
                    86:b0:47:d8:3a:57:f1:c7:26:1e:a6:cb:f3:df:77:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:92:3B:0C:B3:1E:1B:AC:EC:04:4E:F4:63:32:C6:A2:0D:89:40
            X509v3 Authority Key Identifier:
                keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:46:88:3d:c1:d5:63:5f:42:6d:99:74:20:a3:d4:15:6b:
         c9:b7:bb:fe:05:62:45:a2:65:fa:4e:b6:af:83:b9:80:5f:eb:
         46:09:44:26:8c:7b:ed:b9:40:06:02:2e:1e:3b:96:57:56:62:
         51:d6:21:26:50:e7:92:2f:87:ee:40:b6:e6:78:ea:f1:57:13:
         53:e0:09:67:22:c1:d5:f3:a5:9a:c6:be:c9:06:89:17:ea:10:
         6b:30:81:89:4f:c5:a3:81:e7:92:52:e2:0e:20:12:50:0b:a2:
         b6:f4:d0:8c:35:b5:5a:9e:c2:6a:ff:ae:ca:44:a1:b7:bd:cb:
         60:bd:b7:41:1d:77:b2:d2:b1:5f:3a:83:29:d5:28:da:82:fe:
         4f:1e:a8:e5:c4:78:d3:45:77:e6:8c:85:1a:12:d7:e8:67:43:
         93:56:22:b1:e8:be:6a:ff:68:a6:92:66:59:d6:4a:00:e7:f2:
         60:fb:68:27:b9:82:64:1e:83:f5:e1:70:0a:c8:2d:ee:e3:52:
         2d:11:fd:8e:56:2a:1f:58:9c:61:0c:6a:49:ed:4e:3a:e2:c4:
         c4:7c:fd:c5:30:55:ce:5e:e4:0b:12:e7:5d:52:57:43:b5:c7:
         99:5f:85:b2:a3:f3:ae:01:29:af:c3:b3:a7:9c:23:ac:67:7a:
         06:1d:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:36 2026 by rpki-client