Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          3Pb/a4co/8h7ZxQow3scPRrRs6YKjGqd8hTqlW6eb9w=
Subject key identifier:   CB:47:76:56:F6:EB:48:80:73:85:AE:2D:FC:6E:4E:F0:A7:A4:A0:38
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019F8EA30B11C64491EAAE812339C8B9A62B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          115F
Signing time:             Thu 23 Jul 2026 11:01:17 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:17 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:17 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: cdAfP14TN0h/W14j544wcs5pNwkcIWZGAf7v6pfjzzw=)
                          2: 6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (hash: aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a3:0b:11:c6:44:91:ea:ae:81:23:39:c8:b9:a6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Jul 23 11:01:17 2026 GMT
            Not After : Jul 24 11:01:17 2026 GMT
        Subject: CN=cb477656f6eb48807385ae2dfc6e4ef0a7a4a038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:db:bd:cf:ea:89:1d:ac:43:c0:ca:b0:aa:
                    40:ef:42:fe:ce:48:27:21:0b:bc:26:29:c9:35:32:
                    d4:c7:c6:dc:5b:11:25:b4:5f:f8:e1:d1:48:5d:e6:
                    81:32:a2:f1:b7:5f:f7:3a:0e:1f:2e:19:55:d1:9e:
                    f5:91:a8:ad:2d:5a:61:87:a6:7c:25:c2:fb:8f:19:
                    3c:cd:30:60:a6:bd:eb:06:1b:02:98:7d:39:87:52:
                    18:4d:38:e0:65:53:65:c3:1f:bf:6f:c6:fe:ce:c8:
                    79:d8:ad:c8:b9:66:1d:22:d8:c2:d8:2b:f8:95:41:
                    80:a9:cc:08:ec:ed:2d:0f:82:1d:3b:cb:69:1b:14:
                    65:3a:9f:68:3b:1e:66:d1:49:6c:b8:8d:99:95:0e:
                    8a:cc:6d:61:b5:1a:60:66:04:ba:cf:a9:e0:b8:46:
                    28:cb:a7:54:77:87:a7:5f:e5:53:97:aa:90:1b:2a:
                    d1:58:b1:1c:60:3d:1d:e9:6b:21:18:f0:e1:3c:22:
                    44:57:56:29:67:e5:cf:4c:6a:11:65:ff:cd:9a:64:
                    35:1c:90:2b:23:45:c3:9a:1e:9e:14:42:1f:36:38:
                    c5:ba:e0:aa:98:d6:c6:aa:f1:5b:d7:11:ec:f5:f7:
                    79:3c:1e:3d:b5:8d:6b:cd:1c:9a:a6:55:1d:b9:d0:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:47:76:56:F6:EB:48:80:73:85:AE:2D:FC:6E:4E:F0:A7:A4:A0:38
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:64:ea:1a:14:ad:31:48:00:74:33:03:8c:08:32:97:57:42:
         2c:91:d2:84:b2:f8:0c:67:80:2d:71:21:45:52:5b:71:34:41:
         e4:76:83:d0:64:f7:30:34:f1:c4:45:0e:d1:4b:f1:ea:a9:c3:
         78:69:bc:d0:0c:3c:4e:e9:53:b8:03:58:41:8a:32:c5:ba:d5:
         b0:f3:c5:15:0a:b1:ad:56:eb:f8:03:ad:ea:76:fe:77:12:44:
         2f:80:dc:fe:43:9c:24:a4:c7:75:cc:1d:b8:80:a8:f7:36:39:
         a1:bb:7a:9d:3c:8b:27:71:20:db:f0:a8:fd:85:28:35:a7:46:
         84:30:6b:67:fe:70:42:bf:7d:ad:4b:6a:7a:af:c7:e2:2d:da:
         3c:aa:93:7e:97:9e:91:d1:58:de:df:ad:b7:3d:0b:e4:05:40:
         2e:74:9e:d1:b0:e5:44:67:4d:b4:30:70:4e:ea:72:66:3d:7c:
         00:04:9d:02:1f:18:12:71:6c:bd:fc:84:76:91:dd:19:20:40:
         42:13:f6:38:4a:38:b3:86:f3:a2:81:47:8c:2e:10:9a:01:aa:
         15:5e:77:b6:5d:d7:9e:32:1f:39:04:44:d4:89:dc:74:38:66:
         6e:c4:3d:7d:9d:b4:a8:f2:62:ed:59:1c:88:32:e4:d7:5b:c8:
         9b:79:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:38 2026 by rpki-client