Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File:                     1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier:          lDxhvGi4w70Fp4aiM88Q4WKVrO3zii/za+cytonNqiQ=
Subject key identifier:   E4:95:88:B5:FB:D6:EE:B1:98:15:D5:1F:BF:04:C6:DA:1E:F3:A4:89
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer:       /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial:       019F8FEC764E16448977404BA17BC409D1D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number:          0ADC
Signing time:             Thu 23 Jul 2026 17:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:06 +0000
Files and hashes:         1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: bi8ZPyXaqHleTMtXKLG0Jc0nWUFw0zmggMQluI5xDbU=)
                          2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:76:4e:16:44:89:77:40:4b:a1:7b:c4:09:d1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
        Validity
            Not Before: Jul 23 17:01:06 2026 GMT
            Not After : Jul 24 17:01:06 2026 GMT
        Subject: CN=e49588b5fbd6eeb19815d51fbf04c6da1ef3a489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:ca:b9:56:e5:d4:28:8f:0e:26:3b:7c:d7:
                    c1:ac:a6:a8:0f:da:f9:ae:f0:1b:9b:6d:01:33:a1:
                    19:34:a5:dd:4f:a3:3d:00:ec:19:03:2b:0f:56:41:
                    7d:4a:57:d2:c8:42:7b:3b:b1:2d:c0:a0:14:f6:58:
                    ab:06:84:81:ac:96:6d:da:05:d2:0d:de:2d:04:e5:
                    3e:c2:91:f9:5a:fb:17:c9:8f:89:e6:42:71:9c:f7:
                    7a:d2:ba:50:0b:f5:44:db:0f:bc:8e:99:5c:b1:41:
                    2d:5c:8f:84:fb:c5:47:ec:34:e6:0b:0b:c1:e3:92:
                    b5:01:72:93:50:32:6e:71:2f:a2:dc:3f:7a:bb:48:
                    26:a5:5c:5c:5c:81:bd:4f:d6:17:92:cb:ae:94:28:
                    a9:f3:bc:00:ca:1b:c6:ad:40:97:51:98:b0:00:01:
                    67:7a:d5:3c:5c:c2:87:ea:0d:ce:19:90:a0:20:d8:
                    6e:89:3c:21:55:d0:5e:37:4a:a1:74:4c:d1:1d:40:
                    c9:d3:d7:bb:53:a1:b3:46:01:b5:d4:ce:af:e5:0d:
                    fb:e6:e7:3e:15:1d:4a:bf:1b:d2:e6:99:38:f8:17:
                    63:da:26:38:88:bb:a6:29:5a:7d:d3:0b:65:a8:0b:
                    59:72:5b:1a:39:4e:ae:04:97:a9:27:45:9c:b4:d2:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:95:88:B5:FB:D6:EE:B1:98:15:D5:1F:BF:04:C6:DA:1E:F3:A4:89
            X509v3 Authority Key Identifier:
                keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:f8:ff:dc:d0:c7:46:5b:cd:87:60:17:82:77:84:1a:00:
         e6:96:76:4a:76:9c:ce:f3:96:b8:d1:ac:db:90:2d:b5:9f:d2:
         cc:94:31:84:81:6a:96:4f:d5:38:e2:5b:10:50:c7:5e:03:f5:
         30:cd:f6:c4:5d:90:5f:15:d3:48:d3:82:91:39:0b:bb:e8:e6:
         50:c3:e5:5e:b8:14:65:2d:07:1e:b3:29:9a:e4:84:35:4c:73:
         7f:74:ef:a7:d1:88:b2:aa:de:cc:1c:c2:66:92:c3:d3:89:48:
         75:0e:32:e6:df:06:51:71:69:45:3c:ae:ec:7e:25:76:12:58:
         dd:ea:6a:4d:79:a4:69:32:35:bd:4f:64:8c:f1:2e:60:c0:98:
         6c:b0:1d:ea:69:04:93:b6:7a:bc:65:d2:db:6b:a8:cf:55:7e:
         70:61:4b:af:ae:5d:d1:ab:fb:dc:38:da:80:ab:c6:7a:c4:5a:
         b3:95:d2:bd:8c:32:f3:f3:c1:58:73:06:05:46:04:d5:bb:82:
         86:88:b5:df:8e:30:83:62:bd:be:c3:67:f9:80:b2:f1:76:1d:
         3b:36:9a:f0:cc:15:a0:84:39:be:c7:18:8c:5d:51:d8:d4:69:
         02:e8:5a:a6:2d:98:6b:31:96:ee:7a:b5:ae:d9:cb:5e:26:0b:
         97:0a:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:25 2026 by rpki-client