Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File:                     Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier:          Ar/NU8FCkPQPhRKcqK+e3BaXYZoSpFOGujnjUq2hOfk=
Subject key identifier:   60:09:3E:B0:C2:17:92:A1:71:98:62:0D:D0:7D:33:0B:88:7D:70:3F
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer:       /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial:       01A024A0133AD9469D143FEEDD5C2A0D8735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number:          16B2
Signing time:             Fri 21 Aug 2026 14:01:05 +0000
Manifest this update:     Fri 21 Aug 2026 14:01:05 +0000
Manifest next update:     Sat 22 Aug 2026 14:01:05 +0000
Files and hashes:         1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: EfoO7fPTO7pGtBF07YWtAOjS75qWUdQxaU41nCyzWFs=)
                          2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:24:a0:13:3a:d9:46:9d:14:3f:ee:dd:5c:2a:0d:87:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
        Validity
            Not Before: Aug 21 14:01:05 2026 GMT
            Not After : Aug 22 14:01:05 2026 GMT
        Subject: CN=60093eb0c21792a17198620dd07d330b887d703f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:f8:df:65:e1:d4:71:ea:00:72:d5:a7:74:
                    49:63:26:e1:c0:59:d9:93:11:22:66:7f:b8:99:4d:
                    5c:32:a5:0c:1d:91:aa:6a:b2:fc:86:0b:6c:6d:1b:
                    f5:24:8d:e0:00:bb:51:31:3b:aa:db:9c:5d:14:5f:
                    97:db:b1:3c:8f:e1:78:0c:5d:05:61:1e:5e:df:04:
                    b3:91:14:d8:61:43:84:ee:b5:6d:28:95:ea:10:0e:
                    77:4c:9f:51:3d:29:31:cc:d3:b2:f7:e6:ad:c1:7a:
                    bf:1e:28:5d:3a:8e:f3:c7:1e:18:e4:ad:e6:19:b8:
                    2f:e0:0c:5a:ee:9b:68:c5:d6:03:e9:cf:45:2c:4f:
                    da:dd:ed:e7:ca:7b:ba:09:53:b8:04:69:82:35:5b:
                    09:ab:fd:0d:bd:2c:7e:7a:f2:55:32:51:d5:7e:0d:
                    c2:15:74:ad:25:3d:ee:9f:9b:8d:0b:81:37:b9:a8:
                    a5:39:1d:f2:f3:59:5f:e9:21:7d:43:51:bb:cb:02:
                    37:34:42:84:40:32:ea:7a:c4:66:72:30:ca:45:64:
                    7c:30:c8:01:d3:dc:bc:3a:d8:e3:56:7d:d1:f0:7f:
                    89:95:1c:54:33:80:09:81:de:25:32:a3:13:ca:c2:
                    80:21:ca:18:6d:b1:07:af:a5:86:77:6f:07:70:56:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:09:3E:B0:C2:17:92:A1:71:98:62:0D:D0:7D:33:0B:88:7D:70:3F
            X509v3 Authority Key Identifier:
                keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:48:1d:b9:fc:f5:00:99:f0:90:f5:ce:fe:1a:03:39:bd:
         17:51:b0:34:d0:71:e6:b6:4d:95:ee:51:87:df:74:91:cd:7e:
         2f:a9:69:31:d6:b8:93:3e:6a:5b:56:7b:5b:c7:a9:b3:aa:8f:
         ff:e7:de:ca:0d:fb:b4:e6:ea:1f:89:51:3c:27:d8:db:ab:a8:
         87:db:98:4b:34:7d:a3:24:df:8b:f9:6a:d3:8c:0e:12:a1:1e:
         e7:c0:22:11:c7:7c:2c:45:fa:72:45:96:95:a1:c1:5a:42:5a:
         57:a7:b4:c9:9e:bf:03:41:42:fd:1c:a1:2a:70:77:bd:4e:3e:
         48:29:0c:99:95:56:ad:42:3c:14:69:94:df:aa:9f:69:dd:0c:
         d0:ea:be:8b:e6:3d:88:ff:d0:c6:d2:0f:27:3f:f6:f3:42:12:
         f2:ad:9b:2f:73:80:96:f9:d5:a4:b2:6d:73:32:54:b5:1a:2b:
         d6:dd:d4:d1:a8:97:6a:41:66:5d:7b:25:4e:bb:92:be:22:e1:
         09:04:fc:67:f6:2d:05:c9:b0:be:de:24:55:54:3c:c4:b1:ef:
         6c:22:88:6e:57:85:2a:c4:23:94:9b:89:3d:82:32:5e:59:0a:
         8b:cc:c0:92:cd:dd:2c:4f:fd:fb:3f:9a:08:3b:f9:d6:25:59:
         b3:ed:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:56:23 2026 by rpki-client