Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File:                     77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier:          eo9LOO4+ONY5nITXRA9x0h+w48k+4cvuk9PYrrZ5lhs=
Subject key identifier:   C1:E5:85:A1:C2:36:17:B1:80:A1:79:6B:02:4D:CD:45:4F:87:67:95
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer:       /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial:       019F90C809B9E122C13140A67DEFFF6F45FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number:          1168
Signing time:             Thu 23 Jul 2026 21:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:56 +0000
Files and hashes:         1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: fPkL5jcfOIK4Dwyh8iRh2oa9GRN1RYrptlFvVAU1Y9s=)
                          2: u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (hash: Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:09:b9:e1:22:c1:31:40:a6:7d:ef:ff:6f:45:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
        Validity
            Not Before: Jul 23 21:00:56 2026 GMT
            Not After : Jul 24 21:00:56 2026 GMT
        Subject: CN=c1e585a1c23617b180a1796b024dcd454f876795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:99:bd:80:32:e6:23:c9:51:23:76:d1:7d:
                    cd:e4:16:9b:4b:f9:71:50:37:da:70:6c:fd:7e:aa:
                    02:54:31:7d:6c:c9:3e:20:f0:ab:f4:c1:62:55:69:
                    26:d1:0f:2d:db:6d:44:06:3e:6f:f2:a3:e8:11:f3:
                    02:b0:b8:34:1a:5c:66:64:a9:58:1c:d9:c0:ab:c4:
                    61:e1:35:c4:f2:57:60:ae:f1:4c:41:20:18:69:53:
                    f8:d0:5f:9c:0d:c1:22:58:64:62:87:79:08:d7:e6:
                    45:e4:5d:9e:b9:0d:73:70:7e:14:19:1d:52:f4:d6:
                    64:35:aa:7e:59:6c:35:bc:a7:b7:12:f7:60:b2:d3:
                    0e:a4:b2:35:a4:e2:16:70:e6:f5:a4:7b:02:a3:ea:
                    05:75:c1:51:5f:77:39:5f:cb:cc:98:60:ad:42:9e:
                    15:e8:7f:74:15:66:7e:ef:47:e7:57:f7:77:6a:72:
                    1d:50:27:ed:57:1e:99:8a:68:30:d6:dd:11:4d:d6:
                    9d:93:16:b0:83:40:db:18:71:aa:69:cd:c1:2e:46:
                    75:80:ca:de:0d:e6:c8:19:fe:0b:a2:fb:34:b7:97:
                    7d:20:32:8c:a4:6e:d9:e3:f9:2e:03:7b:99:8c:ab:
                    40:89:91:69:44:ff:b2:46:a9:8a:a4:c9:a4:76:11:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:85:A1:C2:36:17:B1:80:A1:79:6B:02:4D:CD:45:4F:87:67:95
            X509v3 Authority Key Identifier:
                keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f4:39:77:6b:a5:1a:a7:46:d4:fe:06:91:38:cc:28:b8:18:
         8c:56:b0:62:b4:a0:77:28:60:ef:d1:50:cf:9a:42:6e:ec:76:
         93:55:f0:2b:f7:27:ef:c9:61:ad:81:c1:62:d7:09:e6:50:a0:
         b4:a1:a7:bd:eb:af:55:53:6b:14:91:ad:17:69:31:66:bc:97:
         e1:31:2f:2a:aa:a8:ca:d9:7d:13:d2:63:82:62:18:62:29:98:
         cb:ea:28:0f:01:7d:cc:c5:6b:24:d1:e6:d5:fa:52:bd:a3:1f:
         73:e4:37:7a:68:e9:2f:29:34:a4:7b:70:7f:41:c4:ea:81:51:
         58:ba:0d:7a:ac:d5:3f:e4:ab:1e:22:95:02:0e:d0:15:51:2a:
         5d:69:45:b3:15:43:b4:93:5b:40:e3:6a:62:46:36:0b:fa:ed:
         2b:9c:b6:1b:cc:28:f5:10:15:37:a1:37:14:3c:80:7c:93:13:
         5b:94:61:00:72:be:65:d0:54:4a:e7:68:c2:90:be:a1:c7:71:
         a9:9f:80:4c:77:91:4f:c7:72:11:ae:f9:02:78:1d:92:a6:3d:
         3f:f3:fd:3e:93:b6:2d:22:25:5f:07:0d:cb:74:df:13:bc:d2:
         7f:d4:e3:b6:5c:fd:b0:60:17:ae:f4:7c:45:e8:fd:e1:a8:14:
         9b:c6:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:08 2026 by rpki-client