Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File:                     4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier:          75ULMnbp/MIhxEiBh5T5+FBHwhAnA3hBhe3piWJ8jKQ=
Subject key identifier:   00:BB:47:39:AC:96:CA:6C:78:47:57:4D:0D:7C:7A:88:0C:B1:73:B8
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer:       /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial:       01A001A6084FEEAF3B79B3F0DDAD71316317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: IRYo32JFvwVqBtQLDV6z9rQe/v74x/vNqv5awBamc+o=)
                          2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:08:4f:ee:af:3b:79:b3:f0:dd:ad:71:31:63:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=00bb4739ac96ca6c7847574d0d7c7a880cb173b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:56:1f:e0:a1:b4:14:92:1e:33:17:40:30:
                    5b:a3:04:9f:b7:d4:6c:88:05:8e:43:82:84:86:c0:
                    16:d9:bf:3b:bb:4c:1a:3f:2a:22:ae:95:0a:de:3c:
                    57:88:81:7b:2e:f9:8a:9c:7e:16:d1:d5:8a:89:c7:
                    d0:28:40:4c:a9:df:d3:1e:e6:bc:ca:ee:5e:78:77:
                    2d:fd:3a:ec:6d:18:ac:f3:3e:6f:81:78:48:ce:0d:
                    15:b4:18:91:f4:66:33:05:73:83:37:d9:bb:0c:4c:
                    e4:a9:66:a5:5c:5c:32:a3:8f:79:ee:28:a9:5d:37:
                    37:dd:a6:c0:08:e2:5c:ef:b5:99:9e:4f:13:f4:28:
                    c7:a7:6c:40:c9:d3:d5:b4:9d:68:74:82:e8:14:cf:
                    d8:56:d6:5e:90:18:ba:86:26:bd:4d:2b:70:85:dd:
                    ef:80:89:cb:ed:86:f8:6f:18:b3:1c:d1:71:6e:e9:
                    6f:0a:37:c9:3a:3b:76:d6:5a:a8:03:a9:88:b5:30:
                    ee:a3:0a:92:0e:84:d2:b0:47:f8:b4:dd:d6:fa:98:
                    aa:39:5b:4b:7c:2a:c1:fa:9a:6b:ff:f8:da:c5:3d:
                    11:df:c7:12:d9:dc:ae:92:fc:f3:5d:13:86:40:e7:
                    e5:34:69:6f:82:3c:f5:82:cd:51:04:31:24:53:a0:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BB:47:39:AC:96:CA:6C:78:47:57:4D:0D:7C:7A:88:0C:B1:73:B8
            X509v3 Authority Key Identifier:
                keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:c9:f1:0d:76:92:99:a8:70:83:be:98:8f:43:8d:32:b1:
         c9:13:85:1f:74:23:f6:fd:bb:9d:e0:bd:a7:7b:33:4a:d6:45:
         f3:3e:d4:bd:d0:5e:40:51:4f:06:40:ab:33:27:01:90:68:d4:
         91:03:80:af:df:c4:e4:7d:04:7c:43:aa:e2:14:15:a5:26:bc:
         75:2b:ea:b4:4a:92:50:25:d0:17:93:80:9d:90:06:9d:11:8f:
         d8:36:15:22:69:ed:52:43:4f:65:7d:87:2d:0f:0e:40:4c:25:
         33:29:f1:f9:7e:48:3f:88:62:a4:14:53:bc:30:74:84:27:6b:
         0d:84:a0:8b:f8:01:a6:19:09:5c:31:53:ca:15:03:41:85:46:
         d2:13:e5:2a:53:32:65:bf:34:86:fd:18:6b:51:b2:ae:c2:47:
         c1:81:0c:84:e5:87:1a:f3:b3:b7:4e:d9:c0:e2:af:8a:5f:0c:
         be:1a:66:62:74:8f:51:27:1b:8b:58:e7:e5:39:56:f5:ec:2e:
         26:43:39:d7:54:68:5c:97:cc:5a:e3:57:c1:54:7d:59:15:28:
         9a:bd:45:82:78:10:ef:8b:e4:89:7d:cc:79:cd:f4:e5:43:58:
         cd:09:d1:8f:4e:ec:1f:00:8b:a7:09:0c:a2:2b:f6:77:97:74:
         89:40:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:51 2026 by rpki-client