Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          cLPdXkLY+pkAc6dr1Ea/AkWzs7XLkON6KyKk+Jdz108=
Subject key identifier:   57:49:7D:33:C0:F2:87:1C:F0:6C:A1:A4:7E:6C:B2:33:80:06:42:F3
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       019F8F7F694824350AF307BFC69FE2C6569B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          1074
Signing time:             Thu 23 Jul 2026 15:01:59 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:59 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:59 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: vv2P1s94CJcYidG4NmcJPRcbuNIuBkV0dqPlZNeMHYY=)
                          2: 3N8RjBOaHqysfsXcuS4moMiqHcA.roa (hash: iQaQoggeO3tLMHb/V/COJC4hr6BU8lu4S0DICLg++wE=)
                          3: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (hash: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM=)
                          4: W_FOHMjyvQTaAri5A_zDlx2DY2k.roa (hash: njRnMCxu5gn2zsVJDrc4Nj/3Yt4VdpnpXJ0wh2X6tGk=)
                          5: fdth4-LheaAtkNOEJz6pHobfl_k.roa (hash: rTpg5aqyYW2RH+xhrSVpQRy6U3wJBueXqcjg7bGUFhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:69:48:24:35:0a:f3:07:bf:c6:9f:e2:c6:56:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Jul 23 15:01:59 2026 GMT
            Not After : Jul 24 15:01:59 2026 GMT
        Subject: CN=57497d33c0f2871cf06ca1a47e6cb233800642f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:38:ac:7d:51:bf:09:91:a7:a1:01:c0:55:
                    a6:67:95:2d:ef:0a:43:7d:80:99:57:c7:c6:1e:e5:
                    15:af:9f:e4:55:49:3c:c0:1c:fa:ae:4e:e1:25:e6:
                    51:cd:98:ee:bf:b8:cb:f0:a5:ca:b9:b9:35:bd:e5:
                    7e:d3:80:c9:d0:64:99:c7:96:6e:1a:e1:5c:03:00:
                    20:a1:65:59:86:47:83:9d:1d:c0:f1:eb:ef:f7:f3:
                    a1:43:54:dd:e6:ee:86:39:8a:dc:e7:bc:78:0c:e9:
                    32:0a:77:3b:61:d7:cb:65:8c:59:97:d6:11:18:63:
                    4a:67:8f:00:16:76:17:29:56:2b:3a:3d:2d:13:65:
                    ff:db:6c:bf:a3:1f:11:19:04:ff:6b:d2:29:4d:9d:
                    74:0e:fe:d6:ce:63:ae:91:16:d6:89:d5:4d:d1:26:
                    ca:a9:26:73:b5:93:4f:08:3b:61:f7:fe:ab:14:26:
                    9b:73:bf:c7:67:64:da:64:6f:5f:aa:ee:18:8b:8c:
                    3b:d6:c0:06:2e:0b:f9:e3:81:e7:cc:f4:a4:b5:cd:
                    fe:ca:ee:03:0e:28:3a:4f:08:f0:21:0e:33:eb:2f:
                    88:93:ae:fe:72:3c:ec:07:4d:de:fd:b8:86:69:cd:
                    26:08:63:f3:65:9a:80:f7:96:e1:f2:43:db:b9:8a:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:49:7D:33:C0:F2:87:1C:F0:6C:A1:A4:7E:6C:B2:33:80:06:42:F3
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:71:98:ab:92:18:eb:87:32:31:e4:5b:24:66:e9:dd:c3:
         e5:4c:a5:dd:07:8d:cd:cc:77:fd:21:d6:f5:91:26:e5:99:7f:
         54:da:f2:d6:9d:2a:c6:94:79:cf:ea:1f:02:5f:ba:63:84:96:
         08:14:75:4e:35:aa:ce:f5:8c:18:9b:ec:25:3b:de:f0:05:4b:
         6a:ce:2b:39:34:97:bd:41:ea:24:1a:01:53:56:4a:8f:57:b2:
         d3:30:d4:d2:ab:6e:70:1f:72:9c:58:c5:29:c3:68:48:60:27:
         9c:f0:02:e8:08:ed:f8:19:66:18:5a:b5:e8:c6:e6:0e:c0:19:
         10:4c:49:00:36:5a:ad:0a:f6:c0:55:4a:26:25:75:0a:a1:2d:
         14:0e:d9:ee:e0:76:72:e7:16:4c:97:18:2b:a9:e4:49:d5:9a:
         9d:6a:b6:44:28:67:c2:1a:55:af:c0:d0:14:9b:e9:16:f2:54:
         da:1f:c9:a2:50:3d:88:23:03:8d:a7:67:40:b2:0e:a5:1b:89:
         d9:37:3e:27:a2:74:75:14:7e:63:3c:60:67:64:28:03:42:af:
         2a:ca:c8:a1:36:ea:a9:f3:b0:11:53:0d:b7:bd:3a:43:48:55:
         6f:da:de:a2:02:4a:c7:33:5c:07:9b:8e:d0:3a:28:ac:bf:86:
         1a:80:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:48 2026 by rpki-client