Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File:                     _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier:          Fw0sb7cSzn2uCqUVL+QmaWwmlKztyLWHMZUGE6p3KNY=
Subject key identifier:   0F:77:2B:31:71:1B:C1:1C:01:E8:8A:F8:0B:50:CB:30:BE:B1:8B:61
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer:       /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial:       019F9549C1B2C57EB4617CEF7965D518D38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number:          0E35
Signing time:             Fri 24 Jul 2026 18:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:06 +0000
Files and hashes:         1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: cyk03A5XdgQW+buya37Xh0ydR8nI9RlO5QuuZPKyoCY=)
                          2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:c1:b2:c5:7e:b4:61:7c:ef:79:65:d5:18:d3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
        Validity
            Not Before: Jul 24 18:01:06 2026 GMT
            Not After : Jul 25 18:01:06 2026 GMT
        Subject: CN=0f772b31711bc11c01e88af80b50cb30beb18b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:b2:cf:92:9f:a7:5e:54:f0:30:ac:66:ec:
                    68:83:b2:34:c0:31:c8:be:92:e7:34:ea:36:56:ef:
                    6d:bd:35:0f:a9:f9:ca:42:3b:4e:08:87:33:c9:09:
                    c3:60:74:56:25:38:a3:23:ac:f4:ba:4d:a3:68:c5:
                    9d:5b:ab:72:2c:07:f3:7b:de:88:48:11:1f:df:e1:
                    4c:56:a1:b1:6c:e2:61:70:5c:79:08:f6:7d:14:72:
                    07:fe:f8:e1:e7:01:19:66:92:65:4d:0f:b3:f1:c5:
                    17:d4:2c:48:c7:98:ad:96:ee:f0:4a:0f:b9:8b:d2:
                    23:7c:a8:de:ab:42:62:2d:51:5b:08:9c:d3:73:a2:
                    40:42:92:6c:d6:36:1a:6f:27:f3:52:29:09:12:62:
                    ca:bf:fd:c0:fb:bc:d3:75:fd:7f:2d:32:18:2c:4a:
                    f4:86:eb:1d:23:6f:02:9d:60:bb:51:75:ec:8f:05:
                    8e:cb:18:a8:c4:64:a0:9c:38:00:ec:e3:3a:31:55:
                    4d:75:e2:c2:23:5f:31:ba:c5:be:d9:5f:63:f3:ee:
                    40:64:b8:af:40:41:a4:bd:fd:41:e5:64:f7:6e:23:
                    fc:65:f3:c9:f1:99:c9:e2:bd:47:0c:c4:d5:4e:88:
                    87:8b:37:4a:83:79:c0:f5:a8:fc:8b:c6:38:87:e0:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:2B:31:71:1B:C1:1C:01:E8:8A:F8:0B:50:CB:30:BE:B1:8B:61
            X509v3 Authority Key Identifier:
                keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:2f:1a:72:68:fb:f9:de:52:ce:88:1b:e4:b2:f8:34:d2:
         42:a5:01:6c:df:51:46:91:86:f4:e0:c8:28:b1:0b:2c:39:41:
         8e:44:cf:b6:0b:e0:6f:31:f1:d9:3d:e3:03:c0:a1:92:cf:ad:
         be:66:f4:82:02:05:1e:c7:23:1b:94:cf:a3:1f:c6:41:9a:52:
         f1:b3:25:cc:66:71:94:63:a9:80:4d:93:e9:13:d6:4e:09:8b:
         8f:17:c3:91:04:7d:33:ac:fe:c5:54:2e:57:f8:a6:41:e7:85:
         fb:a2:3c:18:60:e0:6c:9d:86:0d:98:f9:86:a6:61:38:ff:de:
         dc:c5:93:5c:41:12:54:06:77:86:c7:76:6f:5c:a9:89:e1:7e:
         5a:d2:37:60:24:6d:d0:8c:c0:2b:52:7e:5f:6b:6e:2d:6b:18:
         01:2a:4a:97:66:9e:14:59:0a:ac:43:7e:5f:2b:4e:2f:d4:88:
         d7:33:75:9d:6b:57:4e:72:65:a4:dc:50:7c:3d:87:d3:79:85:
         03:d5:7b:a2:29:dd:8e:a2:fd:6b:87:01:f6:16:8e:30:2e:29:
         45:9f:6a:ac:23:79:d7:97:e7:f6:86:01:77:21:f0:21:98:e7:
         70:08:96:80:f5:20:0c:89:75:51:f7:8a:f3:e7:8d:fa:ea:20:
         4e:9c:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:24 2026 by rpki-client