Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          UwmwMX3YewQgq08hQrJalD7CdrPEpTtcPm/LqsrK5OA=
Subject key identifier:   D8:8F:0D:B1:70:D1:3F:02:CA:98:37:18:83:9A:75:3A:E0:F3:82:B7
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       019F9580033826DDC3351C6B7EDAB32CF779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 19:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:22 +0000
Files and hashes:         1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: OUhqCG+z+JcRrHMYMcVlW7Ry6E1sMzohQNLCXAaH6Jo=)
                          2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:03:38:26:dd:c3:35:1c:6b:7e:da:b3:2c:f7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Jul 24 19:00:22 2026 GMT
            Not After : Jul 25 19:00:22 2026 GMT
        Subject: CN=d88f0db170d13f02ca983718839a753ae0f382b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:be:81:db:2e:19:d5:03:80:d3:fa:31:80:
                    cf:a4:e4:80:55:85:76:9e:b5:b8:f2:39:2c:7e:ba:
                    48:b2:4f:f4:9b:b9:a6:da:1f:3b:6d:1d:0c:17:9d:
                    57:a6:dd:4f:ad:16:92:92:b9:17:df:b7:5c:f5:1f:
                    d4:1b:01:65:0b:ec:8b:e5:8e:b3:6a:fa:8b:01:6a:
                    f8:92:cb:61:39:84:66:be:c4:e5:8b:a4:92:c0:ad:
                    35:cd:df:6b:c8:05:8e:34:7a:26:55:68:09:88:13:
                    ac:38:19:08:0e:9f:83:4d:e8:9f:72:23:47:07:24:
                    e1:8b:58:fa:dd:b7:cf:6e:5d:65:d6:21:23:68:fd:
                    89:7f:88:2e:4c:b6:34:01:48:a5:a0:dd:9c:a8:72:
                    49:ec:00:3d:cd:33:27:17:35:92:d9:43:13:f6:6d:
                    45:fa:3d:4e:3d:c2:25:0a:10:5e:85:13:ca:7d:83:
                    a4:fd:95:2f:ab:be:87:77:80:31:f9:00:0e:2f:fd:
                    94:45:e7:52:cf:ad:c9:a7:2c:ae:c1:c1:84:1d:c9:
                    e2:bc:3a:4d:61:13:7e:a1:ea:38:ca:50:f5:fd:4c:
                    77:c6:08:d3:25:4f:ed:9d:32:4d:ce:8e:d5:86:ed:
                    8d:94:a4:80:47:b7:83:4f:89:78:ce:f7:72:3c:5c:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:0D:B1:70:D1:3F:02:CA:98:37:18:83:9A:75:3A:E0:F3:82:B7
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:38:7a:89:43:08:d6:ca:a5:b7:5e:73:3b:ee:74:5c:86:
         a9:57:42:d9:fc:33:4b:e9:a6:00:5c:a6:e6:e1:29:35:54:08:
         e0:99:54:c3:8a:28:0b:f1:4f:f9:21:f8:91:e0:c3:24:ac:ff:
         86:26:bb:84:ee:f3:8f:3d:3d:5e:96:23:9b:b2:62:7a:b9:53:
         1f:9c:81:4e:9b:88:09:e3:a1:e1:f0:d9:66:dc:e5:29:6b:c9:
         2e:24:74:a9:5c:74:e6:93:03:59:9b:97:1c:bc:9a:9f:e3:e6:
         80:d4:c7:f4:25:19:f4:c7:fa:a2:cc:34:b6:e4:87:a7:af:c9:
         0a:24:6c:b0:c2:97:69:16:a2:0c:2a:9d:3d:ab:ec:b4:26:19:
         d3:ee:49:bf:79:df:64:a5:b2:9a:d9:0c:aa:c1:a8:a6:7a:ad:
         8d:8f:e8:44:78:06:31:d9:59:32:39:c0:5f:4a:11:d0:90:37:
         fb:14:df:98:d0:7c:ab:93:4e:41:c7:a2:ff:7a:0f:6a:94:02:
         24:6d:67:ed:cc:3f:b5:a4:12:19:5a:b6:79:47:45:61:8e:1d:
         97:c8:60:32:12:2d:66:df:ec:73:6d:4e:53:ba:39:82:53:1c:
         b5:0f:84:bf:47:a7:2c:3f:a5:11:23:35:16:33:b5:dd:5a:28:
         1c:d3:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:47:54 2026 by rpki-client