Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          2OlxIMsgZct65wWD1VoHuQd0OuSPwS0FMTBqelaaVls=
Subject key identifier:   F7:EF:45:14:C1:88:5F:39:93:82:28:AE:6C:C5:15:3D:1F:B7:77:93
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019F8FECB2F55B5AE39A1581D489C06A7355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0DEF
Signing time:             Thu 23 Jul 2026 17:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:21 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: KBnFF0MM+ZB+5qAMlBy0qgSj6oFTrTxikw2U6WYCPxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:b2:f5:5b:5a:e3:9a:15:81:d4:89:c0:6a:73:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Jul 23 17:01:21 2026 GMT
            Not After : Jul 24 17:01:21 2026 GMT
        Subject: CN=f7ef4514c1885f39938228ae6cc5153d1fb77793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:6b:11:e5:b9:26:85:49:ff:4e:4d:b2:95:
                    88:e3:ae:d8:7d:30:9c:46:21:e6:c4:bd:1d:55:a6:
                    10:7a:2c:b2:e6:80:f2:86:1d:b5:68:70:bb:3c:d2:
                    0c:4c:64:b2:ed:1b:63:86:1a:af:45:99:8b:f3:6e:
                    7e:0e:01:66:96:b2:5a:2e:2a:d0:d3:a6:51:f6:87:
                    31:07:52:4c:62:ca:02:7c:66:2d:4b:77:0d:4e:d2:
                    f3:b6:45:86:47:02:43:75:fe:65:69:81:17:af:f7:
                    68:4e:68:8a:d4:3e:f2:69:c4:7b:f4:e3:de:6a:b7:
                    3a:b7:1f:63:df:f2:89:8a:32:fb:2e:75:92:f0:a4:
                    81:21:8d:18:70:2c:f1:51:0f:fb:f2:7b:6c:a9:5b:
                    1d:55:28:00:a6:03:ab:4f:c2:a7:6f:e2:63:ad:05:
                    43:b4:3a:31:90:e5:01:9b:82:1a:3b:97:08:1b:c0:
                    a8:0f:d1:d5:1e:c0:92:24:a0:bc:f1:cc:d9:08:0a:
                    88:38:20:77:f1:50:0f:15:03:cb:9f:16:d2:79:4c:
                    36:c7:df:75:4b:b8:56:6c:19:a8:0e:a2:2b:d0:85:
                    48:cc:0d:88:37:c3:5b:31:03:14:73:41:cc:88:55:
                    e8:1d:8e:61:c5:05:f9:21:7a:ca:36:87:34:ac:9d:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:45:14:C1:88:5F:39:93:82:28:AE:6C:C5:15:3D:1F:B7:77:93
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:e0:9d:b1:f8:1d:a5:dc:ae:8e:b0:37:d7:47:30:0b:37:
         cb:95:2d:9d:9b:cb:18:64:b8:6b:fd:f8:f8:43:12:be:c7:cd:
         ae:94:49:bf:1c:d6:41:8a:f0:24:e3:94:f5:14:d8:f0:3a:b5:
         60:8e:d0:d0:b8:27:72:09:91:f0:7c:4a:56:77:7f:37:69:c2:
         60:b8:88:aa:7e:19:a2:57:91:10:e7:5d:6c:e9:34:53:2b:45:
         89:64:98:75:5a:92:d9:9d:5c:c6:2f:3b:20:e4:15:59:d5:a5:
         fe:af:54:f5:cb:31:4b:11:7f:81:99:79:46:7e:0a:5c:55:86:
         d6:77:12:6f:59:e7:86:29:a5:39:0c:9b:3f:d2:20:02:14:74:
         d2:f8:0b:50:94:f9:fc:93:ef:df:75:55:f4:b5:f2:c6:2a:4a:
         72:9a:0f:73:4c:d7:de:f4:b9:1f:4a:14:1c:7d:64:15:f6:33:
         9c:98:13:50:73:58:ca:fc:df:5a:cc:af:67:f2:99:37:59:08:
         08:0e:ca:19:71:b6:49:5c:f9:d4:90:44:ef:19:c3:3d:a7:95:
         00:e3:c1:3d:df:74:70:c4:1f:ec:11:e7:1d:31:44:5f:01:40:
         f0:20:f2:f9:74:fa:1d:5a:5a:d3:03:12:1e:b7:97:87:0a:17:
         2e:a9:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:14 2026 by rpki-client