Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
File:                     dZxU7z8HSxxmiPmXVM2KONmfbKw.mft (raw, json)
Hash identifier:          V8G/8tGggmU0hrHj4w89TdukzEggpe5DPyHayThnTLI=
Subject key identifier:   72:3F:B2:F8:F1:64:60:02:AD:30:C5:9A:CC:A8:85:79:D4:2B:70:F1
Authority key identifier: 75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC
Certificate issuer:       /CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac
Certificate serial:       019F9135B8D5410ED3FF70AA377F63D17470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
Manifest number:          0D66
Signing time:             Thu 23 Jul 2026 23:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:44 +0000
Files and hashes:         1: 82k_FBmadDpplfRxAzsZmpXgVGU.roa (hash: 5bqVmZOT/e8gHP0DWkqPbjBNbKxoEy/SNw9KQkuz/50=)
                          2: dZxU7z8HSxxmiPmXVM2KONmfbKw.crl (hash: PfI5v62Ic2ZxfLxIy7v272vgtEYbNc+Iv6c6vcRdn/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:b8:d5:41:0e:d3:ff:70:aa:37:7f:63:d1:74:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac
        Validity
            Not Before: Jul 23 23:00:44 2026 GMT
            Not After : Jul 24 23:00:44 2026 GMT
        Subject: CN=723fb2f8f1646002ad30c59acca88579d42b70f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:ae:1b:78:8c:cc:53:10:07:cc:6a:a6:ba:
                    13:7c:a4:f1:3b:d4:0e:b3:0e:9b:56:6a:3e:4c:13:
                    89:b8:e9:2a:b8:d5:bc:86:93:96:b1:b5:9d:2c:23:
                    ef:3c:e1:26:19:6d:1c:a8:0a:6b:ac:7a:fc:06:ef:
                    23:d1:fd:97:d7:98:f6:f9:83:63:be:71:ff:9c:58:
                    af:e8:04:d1:e1:38:19:06:61:34:10:d0:53:66:35:
                    87:5b:e5:73:da:8a:71:55:d1:32:fd:10:30:74:9e:
                    2f:6a:4a:4b:6a:26:42:db:5d:ab:c5:d2:a8:8e:1f:
                    e5:82:aa:74:b6:e7:4a:64:12:09:7c:13:ed:50:72:
                    d4:25:7c:a9:76:d7:ba:3d:fc:55:7a:55:07:44:29:
                    37:3e:bd:c6:0f:30:7b:bb:c6:34:f9:d2:b9:32:d8:
                    75:aa:a2:9d:35:49:f3:ed:8a:21:8c:bc:4f:82:54:
                    39:b2:a7:f8:de:e1:02:c7:a8:38:6e:84:ff:1c:fa:
                    31:b6:83:61:1a:33:41:82:a7:a8:5e:a2:16:aa:6e:
                    e8:07:c7:ae:cb:33:34:78:16:e7:c0:7b:a9:d7:d6:
                    88:c3:6c:92:be:0a:89:f5:07:2b:0a:e8:43:f0:bf:
                    81:be:59:62:c3:ca:63:e4:b7:7f:64:e6:15:38:16:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3F:B2:F8:F1:64:60:02:AD:30:C5:9A:CC:A8:85:79:D4:2B:70:F1
            X509v3 Authority Key Identifier:
                keyid:75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:98:61:39:ee:38:0e:3d:ea:9e:43:50:c3:96:74:46:d2:
         37:88:f2:92:a7:a9:c3:38:dc:22:03:6a:5a:7f:fd:9a:58:52:
         fa:13:c0:7f:f6:48:c7:10:56:e6:55:1e:52:30:a6:8b:57:1b:
         71:cc:d6:ec:23:55:ea:49:43:91:57:46:62:83:e5:df:1b:cf:
         2d:d0:a9:dd:70:e2:ba:6f:3e:ca:bc:25:de:3e:0c:50:51:38:
         ad:1f:59:26:92:38:85:30:4b:1e:78:83:e7:cc:c9:c7:2f:56:
         61:5b:65:94:59:24:56:40:05:a8:5b:e0:a2:ab:6b:1a:73:ed:
         24:d9:60:09:99:fa:04:41:56:91:b1:8b:73:95:02:24:17:b0:
         3a:a1:fb:32:72:de:aa:a9:67:53:e8:2b:e0:02:ef:f8:cd:19:
         a0:19:16:7a:98:9a:10:6a:0c:da:db:f4:5b:10:66:48:da:31:
         ae:8a:9e:e3:36:0d:e9:67:f7:5b:34:75:65:73:62:39:24:fc:
         5f:c2:0a:4f:69:1f:fb:22:a0:c0:f3:72:eb:12:9b:fb:5e:20:
         61:20:3e:28:8f:f5:91:a4:87:06:13:ed:9b:7f:c5:50:c2:17:
         94:c1:bd:91:91:00:1f:b3:59:bc:63:d2:95:0e:92:f0:50:49:
         a6:6e:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:21 2026 by rpki-client