Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File:                     rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier:          bCmMUWWh6zdI6sTCgnz7XiRWBb/TpYOR9/I5wsMwlKU=
Subject key identifier:   BE:4B:D5:BF:3B:C8:FD:13:22:46:8A:7E:B8:15:26:CC:56:6A:45:AA
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer:       /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial:       019FAC75CB71E2ACE8AA8C5FCB8EFDBE1E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number:          0269
Signing time:             Wed 29 Jul 2026 06:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:28 +0000
Files and hashes:         1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
                          2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: ZglAxIyzLXdFEPAPs5bfw0gKGoSFU/OJd0VPwf/ii/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:cb:71:e2:ac:e8:aa:8c:5f:cb:8e:fd:be:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
        Validity
            Not Before: Jul 29 06:00:28 2026 GMT
            Not After : Jul 30 06:00:28 2026 GMT
        Subject: CN=be4bd5bf3bc8fd1322468a7eb81526cc566a45aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:c5:c0:ca:21:f8:95:fe:e3:5b:1b:60:02:
                    04:de:b8:96:f4:c1:5d:e5:25:e0:f1:53:c3:db:c0:
                    5e:98:29:f5:48:4d:22:73:65:85:62:e5:6f:5e:fc:
                    36:47:dd:86:71:8d:29:5d:f1:bb:90:e4:42:ee:39:
                    84:93:ce:e1:ec:4c:94:63:eb:c9:4d:1c:e6:24:55:
                    18:a2:e2:d6:32:c7:93:f5:73:84:a4:0f:3d:e0:e4:
                    7e:75:33:d2:9c:50:da:98:2f:83:3f:5e:27:0e:8b:
                    60:0c:4e:93:90:cc:29:3b:32:1d:01:18:54:3a:5d:
                    f8:5a:6d:98:c7:74:6f:9a:e0:21:ed:42:75:5a:9c:
                    cb:0d:ca:f5:8f:67:99:75:28:3e:db:7b:41:94:01:
                    81:c0:8d:13:18:02:4e:04:1f:d7:c7:a9:5c:48:ee:
                    2e:82:41:62:99:41:2f:8d:1e:53:f0:14:8a:95:14:
                    15:45:f3:80:24:53:24:b7:96:53:bf:a1:11:5e:c5:
                    b3:d2:8e:c7:75:f6:67:c8:59:10:5c:31:13:6d:28:
                    8f:97:96:8c:fa:16:93:29:83:5d:40:cd:c6:8f:ea:
                    0c:e5:6f:4d:bd:8e:41:4c:4a:e6:ae:65:0c:cd:e8:
                    20:db:c7:4b:81:ab:ea:d6:e0:fd:1a:79:f6:17:d8:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4B:D5:BF:3B:C8:FD:13:22:46:8A:7E:B8:15:26:CC:56:6A:45:AA
            X509v3 Authority Key Identifier:
                keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:62:22:9f:fa:50:ad:35:80:10:af:44:bb:a3:56:a8:f9:
         21:c3:9a:58:30:fa:85:88:9b:95:17:cd:c5:41:ed:ec:dd:c9:
         b0:52:0a:ad:5a:ec:91:43:30:95:d0:b2:14:f0:cd:7b:76:ae:
         64:70:71:88:1d:e3:19:27:65:d3:c3:f1:8a:22:42:1b:27:82:
         29:86:3a:c5:ca:57:b0:a0:ae:63:4a:2c:73:1d:ed:38:b6:54:
         f2:5e:f6:80:b4:0a:a8:89:b8:36:ef:8f:d6:8a:43:8c:12:c8:
         00:b0:4b:5f:8d:18:64:74:a5:cf:c6:74:bd:88:08:06:d5:dc:
         07:88:f6:c1:fc:ee:98:a5:39:69:87:0c:5f:6e:cb:e7:dd:5d:
         2b:47:49:7a:dd:b0:09:67:16:b7:76:1f:90:f7:c7:b3:96:9a:
         72:32:34:04:59:91:ac:51:93:63:a9:ba:8c:22:f4:f6:5f:a8:
         08:8e:9e:69:da:74:6c:f2:0b:b8:55:f2:4c:7c:58:85:ab:0c:
         53:69:61:eb:7a:f9:a9:02:e0:c9:db:08:13:6d:a3:fb:f0:d8:
         e8:32:c2:bb:c5:7a:49:bf:2d:ca:b2:42:10:51:57:f3:d7:b6:
         ea:49:06:d7:34:ef:10:0c:e8:20:0a:6d:cf:01:99:88:85:cd:
         e2:55:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:59 2026 by rpki-client