Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File:                     cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier:          yBdw1gMoDDy1OUYdfXIjcANFEKKIFNbSMjn1OctdJXI=
Subject key identifier:   D0:97:F3:E8:3E:04:E7:B2:3D:7A:5F:F0:3D:2B:84:47:8C:03:A5:9F
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer:       /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial:       019F9135C79A99ECFD7CFD2992A4C77B5B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number:          041C
Signing time:             Thu 23 Jul 2026 23:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:48 +0000
Files and hashes:         1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
                          2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
                          3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
                          4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: tM4hMxhVzT38vA+fQ/KULjYcZOiJ5bgtg64pTNXObvo=)
                          5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:c7:9a:99:ec:fd:7c:fd:29:92:a4:c7:7b:5b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
        Validity
            Not Before: Jul 23 23:00:48 2026 GMT
            Not After : Jul 24 23:00:48 2026 GMT
        Subject: CN=d097f3e83e04e7b23d7a5ff03d2b84478c03a59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:65:88:50:5a:e4:66:91:8d:bc:ae:11:44:
                    7b:86:6e:12:80:71:c6:84:41:60:d6:89:90:f7:8d:
                    b2:88:96:10:0e:0a:d9:88:e8:89:4b:40:3f:f0:e7:
                    28:17:f7:d8:41:b3:77:00:59:23:e4:7e:83:94:7b:
                    81:41:46:e4:57:be:e3:a1:1c:39:38:17:80:f2:dc:
                    2c:12:ca:08:c1:93:a3:ea:41:db:f7:b3:16:ea:9c:
                    96:53:92:17:70:17:9d:2c:be:44:cf:dc:bb:b8:cb:
                    66:14:db:be:65:b9:78:9f:24:03:aa:38:60:d1:0f:
                    65:ee:9e:a2:54:ee:e7:ab:8f:c3:a5:4b:a0:a4:cd:
                    e5:e2:16:14:e6:40:19:03:5b:61:f8:ff:6f:b0:e5:
                    49:e9:46:2e:0b:e6:c9:19:e4:de:34:33:94:f5:08:
                    43:ba:0c:89:d6:fe:45:72:26:06:3d:33:53:c5:4e:
                    88:6a:78:e9:a9:8e:ab:d3:32:e5:62:20:93:46:ba:
                    14:40:73:43:db:ad:9a:b3:8d:eb:43:fc:84:9a:93:
                    d3:56:5b:7e:0e:6c:3a:ab:c3:bc:b6:c2:b5:f4:62:
                    fb:4d:cc:72:da:e9:7c:84:86:bd:7e:f6:17:fc:ca:
                    e4:5a:d3:4c:2d:8d:8e:62:57:2c:b3:6b:ab:26:9a:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:F3:E8:3E:04:E7:B2:3D:7A:5F:F0:3D:2B:84:47:8C:03:A5:9F
            X509v3 Authority Key Identifier:
                keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1d:ef:ef:a7:79:4c:ea:dd:1e:eb:68:91:22:6c:30:bb:a3:
         77:02:c8:87:ae:b5:0d:13:dc:c2:64:a5:e9:21:fd:93:63:f7:
         c7:15:95:24:63:94:f2:12:40:31:26:3c:fe:7f:99:ea:78:4c:
         21:78:b4:4f:42:04:23:4a:33:52:26:c5:f4:08:2e:d7:ab:83:
         b2:21:5d:c8:de:af:47:c4:2f:94:7d:9f:e9:93:72:bf:21:91:
         bb:76:fe:28:99:7e:15:3c:7a:82:e7:2f:17:b8:a3:6d:99:89:
         d2:a0:e6:a1:7a:ff:1e:0d:c2:ed:68:46:b0:45:d1:d6:4d:1d:
         30:ca:7f:40:db:24:be:bd:81:ab:96:ef:c1:03:11:92:32:93:
         93:b7:47:8f:b5:00:5d:08:9b:fe:bc:16:ee:58:de:d0:20:2e:
         58:82:54:4f:7f:b0:78:cb:92:a7:29:d8:ec:af:8e:ed:1f:37:
         3e:70:62:aa:d4:22:09:63:5f:fc:cb:92:1c:d1:d8:02:70:aa:
         b2:17:3b:b6:74:bc:00:a4:3e:b9:2b:d4:81:80:ae:dd:1f:b1:
         49:34:5c:ca:82:98:0c:a3:f2:63:aa:33:2e:0f:d4:d1:e6:cd:
         be:e9:ae:06:0b:19:76:9b:dd:ef:d0:64:7d:e6:c1:17:6a:7e:
         b2:01:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:35 2026 by rpki-client