Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File:                     sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier:          C6FEbtqbs/4hjXbRTNSjs31W+M9LFvH0NLwFSz6f8X0=
Subject key identifier:   A2:F2:96:1B:59:D5:46:C9:A2:D2:61:7C:8F:00:96:86:26:BC:52:A0
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       019F8EA2E6810F2EDC1FB673E8B8F189B0A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number:          0827
Signing time:             Thu 23 Jul 2026 11:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:08 +0000
Files and hashes:         1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
                          2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 0wmZA5AZ/QFEaqpHCH4AvFAaBFHIlBW08B2NhI7L3io=)
                          3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:e6:81:0f:2e:dc:1f:b6:73:e8:b8:f1:89:b0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: Jul 23 11:01:08 2026 GMT
            Not After : Jul 24 11:01:08 2026 GMT
        Subject: CN=a2f2961b59d546c9a2d2617c8f00968626bc52a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:44:0d:e8:22:3d:9e:be:21:ca:6f:10:01:
                    c1:85:7b:e8:b3:80:1c:8e:5e:29:6d:86:cc:c9:4f:
                    58:92:f9:e7:71:37:2b:e9:9e:40:82:84:bd:07:f8:
                    4f:bf:25:92:68:67:ff:11:73:51:c1:82:19:03:f2:
                    36:e7:c7:2f:19:f3:c1:fb:5b:c1:c8:d5:a8:2f:d3:
                    89:2c:69:a3:53:87:4e:1f:10:b7:e6:28:15:b5:ef:
                    98:de:77:bb:a2:ef:4c:87:65:0b:82:7e:6d:72:3e:
                    e0:97:c8:bd:72:de:ac:1c:91:fb:5c:24:18:29:96:
                    f2:fc:f9:5e:b0:e8:d5:4a:d2:54:9b:a9:80:e5:42:
                    e0:9a:b7:b6:0e:3b:7b:5c:b6:8d:17:a6:5d:0c:64:
                    1f:a2:14:d7:58:01:82:b4:33:4b:5a:4b:73:c6:97:
                    69:e0:a5:3b:74:13:23:4a:7d:9d:d7:e0:c0:8c:ba:
                    d2:47:31:cd:a7:22:7d:37:e8:e8:ea:e8:66:ef:ab:
                    01:c5:fd:db:c6:33:14:99:bb:7f:cf:ea:e0:a5:bb:
                    7a:ac:a7:43:b2:45:f4:bc:58:b7:b8:2a:bf:12:f1:
                    33:ac:5f:33:af:01:e6:07:98:84:45:8c:38:2f:f9:
                    1a:94:5d:b6:7b:85:5d:9e:fd:dd:a2:65:c5:23:00:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:96:1B:59:D5:46:C9:A2:D2:61:7C:8F:00:96:86:26:BC:52:A0
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:75:be:4c:14:c7:da:45:9b:92:e9:7e:08:a5:e4:99:2a:1d:
         ef:c6:cd:18:1f:3d:ae:dc:94:d5:1e:7f:ed:c2:e9:43:cf:29:
         03:ce:22:01:32:4e:f8:d7:fc:8f:84:c3:2b:c2:e1:40:ed:db:
         4d:57:dc:d9:eb:19:f2:a7:49:2d:29:da:e0:2b:48:42:ed:2f:
         52:61:4b:da:1e:1b:f8:72:af:00:84:ff:e6:26:9f:18:28:64:
         50:26:9a:fa:3b:01:1e:b1:c4:4b:37:8a:51:df:bb:fd:8d:8d:
         e3:55:14:8a:d2:29:f3:1a:74:d4:6e:3f:f4:01:0e:64:b3:05:
         9c:0d:45:78:1c:3b:9b:4f:6d:04:e8:fa:71:eb:41:19:da:81:
         59:bd:f5:56:c2:73:43:4f:42:51:07:0e:bb:6e:14:7d:0d:b7:
         56:1b:5b:5d:65:d6:27:3d:57:74:2f:d2:63:e2:f7:b7:8a:87:
         6c:71:c3:ab:7c:03:e0:88:54:93:35:7e:a7:53:9b:54:a5:de:
         b4:f4:cc:c0:ed:f9:e2:86:cb:89:f2:d4:d9:4c:44:5e:7c:33:
         09:cc:fb:9d:96:d8:5c:d3:bf:43:0f:50:4b:2a:91:61:cf:ad:
         f2:16:fc:f3:b5:01:3f:31:71:50:eb:93:89:1c:f2:03:da:dc:
         5b:8b:60:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:05 2026 by rpki-client