Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File:                     735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier:          MBmXWpfYgYFy1eUNPxB62+P8QDtQzecg38byYH1MyUk=
Subject key identifier:   A3:DE:CC:59:79:6F:00:7B:B9:B0:58:A3:33:BA:F3:67:2D:D6:76:BA
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer:       /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial:       019F8F7E2CCE775B4F58D5AC39F06440F02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number:          0664
Signing time:             Thu 23 Jul 2026 15:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:38 +0000
Files and hashes:         1: 1j3vfqmoOqwb7Yh6DBdvRjdsFsg.roa (hash: /Uld+qa79+lTp86N22k2YZMrzBMGIznMfTj+54uPKBY=)
                          2: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: ijUaHWDnnAnUDtyUZ9D7K+0jXhlDVJQ3xrVb/Yj44S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:2c:ce:77:5b:4f:58:d5:ac:39:f0:64:40:f0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
        Validity
            Not Before: Jul 23 15:00:38 2026 GMT
            Not After : Jul 24 15:00:38 2026 GMT
        Subject: CN=a3decc59796f007bb9b058a333baf3672dd676ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:e1:1a:e8:45:1e:29:a8:6d:d9:51:2b:13:
                    0e:69:68:50:45:62:c1:44:d4:72:58:52:20:ea:9c:
                    b6:73:0a:93:f2:da:13:d1:04:b3:2f:9e:82:85:19:
                    66:32:08:ff:32:67:3e:01:5c:84:01:cb:cd:bc:b3:
                    e2:4b:9b:ad:5d:74:49:a6:b9:48:9d:3c:64:89:c9:
                    cc:31:9a:d2:40:3e:ad:27:11:1d:4f:60:ec:9a:08:
                    b2:4d:56:5e:06:8d:68:c9:74:25:3f:75:fd:0f:53:
                    a7:f0:1a:de:4d:d8:29:fc:50:3e:49:5c:3e:d8:99:
                    9b:f9:ab:55:20:93:c3:f8:fb:b7:d7:55:31:6f:db:
                    ff:e3:80:1a:e4:12:e4:fd:9a:df:db:48:31:1f:3e:
                    02:ea:d6:d2:ce:eb:b0:f5:7d:ed:5e:01:f3:4a:27:
                    ec:2d:87:f2:de:c2:9f:64:3d:8b:d1:96:c1:9b:0d:
                    9d:2b:a7:f9:24:12:2a:cc:12:87:3b:5b:ca:3c:4a:
                    45:cd:e7:7b:41:42:65:76:7c:ca:13:5e:d3:91:54:
                    a0:b7:51:f0:89:1c:2b:c5:01:f0:b6:77:f3:69:4e:
                    ce:3a:1c:bb:8a:55:38:02:5d:63:59:34:34:59:79:
                    00:26:4a:a2:c6:06:f9:8a:11:51:11:b1:cc:b3:e3:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DE:CC:59:79:6F:00:7B:B9:B0:58:A3:33:BA:F3:67:2D:D6:76:BA
            X509v3 Authority Key Identifier:
                keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:55:c1:4a:31:46:31:9c:85:94:23:72:ee:74:45:ac:6a:
         dc:fe:fa:03:13:b5:84:06:3b:c6:ef:f8:aa:99:39:2d:8b:33:
         ff:fb:e0:38:5f:7a:52:3f:88:b7:0e:d0:e1:13:f4:60:96:f9:
         34:67:ac:65:31:f7:14:34:61:65:14:35:7f:2f:28:e2:c3:3d:
         14:c0:7c:63:a0:96:e1:7c:64:7e:b8:8a:83:15:30:5c:eb:0c:
         ed:42:c1:89:ed:00:1b:70:2e:ac:d4:26:3a:44:52:1e:b7:09:
         cc:7c:35:93:65:9d:e9:76:3d:d6:93:a7:17:ac:0d:14:8b:b1:
         3e:90:f4:65:16:49:e9:9e:31:51:89:26:dd:4b:27:f7:48:2f:
         5d:20:c9:40:a4:7f:cf:49:d6:61:65:29:ea:6e:08:ff:46:3a:
         75:d6:17:37:f6:73:ad:d8:c6:0c:69:b4:b5:86:52:b6:31:31:
         ba:dc:be:48:95:4a:42:de:6b:4d:51:e6:5e:79:2f:b3:42:74:
         83:03:41:06:1b:35:7c:1a:93:cd:67:bf:3b:79:3c:aa:3e:21:
         58:4b:87:af:13:f0:54:45:c4:ae:7d:25:70:d9:aa:95:c2:e0:
         21:f4:29:ee:bf:b9:16:da:35:ae:cd:ba:bc:5e:4f:4e:a4:a6:
         93:75:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:41:19 2026 by rpki-client