Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File:                     cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier:          KMaj8acAMuWyidVtGtldb3r0EXeM0L8DUaNTfjcWD8o=
Subject key identifier:   ED:EE:82:02:3F:B0:EC:57:D8:67:8D:BC:E0:5F:E4:FB:64:42:0B:41
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer:       /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial:       019F8FEC3A5AA4C0015E0FE054CC3E4C598B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number:          0DF0
Signing time:             Thu 23 Jul 2026 17:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:51 +0000
Files and hashes:         1: DgE7qpXbhbps6DJDYkdwBbjFG4U.asa (hash: JXqb/d+p8C0uPTZtibuHHJ5kSrbcCvMBiMCMoX7QBZY=)
                          2: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: ST5qT4dZnR2Qa2VKw8dcgnaivMf2Th1oN1u1QavROvU=)
                          3: dazL3iKbsjKxy4HddRH3nz-7Dnw.roa (hash: qq3zl4qFIOovDjZr1RPB2doiGCNi2c1snUt8x3cExWg=)
                          4: jgD1GTXsm3n5JwyXP57oSoUwOXs.asa (hash: nBQL1SbLriRKXkdqanEpebon9wOpjIUD2AKKZwRdH68=)
                          5: n0ltjUW2u4L-AevEK7WCfM6T9LA.roa (hash: N1gRe4gHex5uwrjtGQXXfVTkeefAztrf56Bgo5TeW0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:3a:5a:a4:c0:01:5e:0f:e0:54:cc:3e:4c:59:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
        Validity
            Not Before: Jul 23 17:00:51 2026 GMT
            Not After : Jul 24 17:00:51 2026 GMT
        Subject: CN=edee82023fb0ec57d8678dbce05fe4fb64420b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:f2:8a:ab:f3:eb:e5:81:84:f0:b1:cb:66:
                    97:fb:77:24:02:8e:eb:3a:c1:b2:08:9a:c2:90:ed:
                    3a:cc:cc:fe:7c:3b:70:50:cd:c5:3b:c5:dc:fe:9c:
                    3a:42:a2:bc:03:f1:4c:80:54:0b:83:2b:8e:5c:bf:
                    2f:8e:39:07:e0:f1:3c:e3:9c:ea:56:b7:ae:05:22:
                    47:5e:c9:e9:00:f0:76:c3:5c:97:88:15:de:52:02:
                    fa:94:1d:ab:cc:ca:35:10:89:30:2b:0b:5a:c6:68:
                    ac:73:90:2e:d0:84:08:c3:02:7c:f1:d4:4a:d5:27:
                    10:f1:e4:5e:ed:64:fe:92:02:43:be:f5:31:a6:cb:
                    9a:be:47:eb:11:a8:10:9f:2a:bd:04:72:a3:ff:85:
                    60:6a:21:ea:2a:51:29:02:1e:f5:2a:c5:55:b5:2b:
                    bd:67:5b:3a:35:e8:0e:78:e4:7c:aa:14:b7:5c:1f:
                    af:11:7d:13:7b:77:b4:bc:ad:de:e4:e1:d5:08:12:
                    c0:cf:56:8d:73:24:24:29:f6:65:79:4e:13:44:87:
                    4e:1e:a5:1c:64:d3:75:33:dc:28:32:3e:f0:ca:ad:
                    91:cb:64:e3:e6:24:8b:eb:2d:eb:9f:11:22:68:ef:
                    c4:e6:8d:8d:1d:0f:d5:6d:1a:0d:ac:08:37:d5:c4:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:82:02:3F:B0:EC:57:D8:67:8D:BC:E0:5F:E4:FB:64:42:0B:41
            X509v3 Authority Key Identifier:
                keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:62:75:ca:3b:dc:01:ef:ce:87:73:a3:28:09:4e:cd:55:ba:
         2a:8e:66:2b:5f:d5:5c:19:f4:eb:ca:f6:8c:f6:12:0f:cf:23:
         42:ee:b5:dd:66:3f:8f:83:24:45:bd:a3:76:09:53:8c:cd:dc:
         bf:99:45:20:41:ef:c8:43:d7:cf:5b:87:a0:66:f2:62:ee:7d:
         28:29:1a:d1:39:2a:af:d5:0e:70:b5:b9:53:a6:13:12:5b:af:
         88:cd:d9:fe:26:d0:7c:eb:55:8c:7b:9a:cb:d5:cd:1d:ea:96:
         55:ef:b5:1c:36:75:db:38:a8:c1:32:62:5c:40:11:e4:e9:a4:
         fe:f2:93:3f:82:b2:ab:fe:ec:d1:62:45:4c:94:3c:d5:91:e8:
         18:a3:4e:46:8a:f0:de:3a:3a:fe:78:87:42:b7:e0:8b:b0:b2:
         13:10:f9:3b:6a:56:bd:b1:89:7c:8e:c8:2a:35:0c:c6:94:86:
         e6:85:ff:cc:23:b4:6d:9e:87:f0:dd:fa:87:bd:07:be:7f:eb:
         8f:b2:57:22:fb:22:15:b6:08:f5:35:36:64:08:23:f4:ed:2b:
         c1:af:b3:e9:df:e0:a1:99:a1:1b:bf:ee:99:42:a4:c2:7f:ae:
         a8:9b:03:53:ac:98:45:07:4d:7e:55:f1:29:23:86:4e:46:8a:
         ad:b6:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:48 2026 by rpki-client