Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File:                     17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier:          mg7u2Fmh4koKO3+iebBjTTiZvNpwZHZ3Y30AUTJEfvs=
Subject key identifier:   53:AC:F4:61:E0:28:58:E3:9C:D1:3E:61:78:90:69:66:F9:5C:7B:5F
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       019FAA1A4025EBB20C3415A85A10A0BB64AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number:          10BD
Signing time:             Tue 28 Jul 2026 19:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:14 +0000
Files and hashes:         1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: 48khh8eYDMxh4izPkFv22qmfk08ap35XoENKIPHWVCI=)
                          2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:40:25:eb:b2:0c:34:15:a8:5a:10:a0:bb:64:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Jul 28 19:01:14 2026 GMT
            Not After : Jul 29 19:01:14 2026 GMT
        Subject: CN=53acf461e02858e39cd13e6178906966f95c7b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:88:ba:4f:c0:02:dd:db:7b:ef:49:dd:73:
                    da:36:c8:b6:4b:c9:7e:21:61:2d:21:07:41:db:f9:
                    66:eb:f9:dc:5a:9f:d2:81:c9:e0:85:92:18:f0:9c:
                    6b:b3:e1:3b:01:18:8b:e8:ad:ce:bb:1b:0d:09:1d:
                    7f:f2:65:9a:b5:ae:d7:88:79:d8:40:57:e7:3c:4d:
                    ae:7c:19:95:da:2a:ec:0b:fa:99:33:ea:94:a3:73:
                    d6:09:08:ce:d8:e5:ee:30:1f:ae:f2:e2:82:a4:05:
                    7f:4c:20:6b:5a:89:20:3b:90:0e:61:8e:f2:cf:8a:
                    14:fc:c0:85:a5:a5:f7:6b:48:69:b5:5e:cf:9c:fc:
                    66:66:80:f2:5e:c1:b4:79:08:13:ff:14:de:5b:ac:
                    62:8b:54:e5:97:9d:f9:11:b0:d7:e9:0d:b1:3f:64:
                    10:71:a4:05:e7:31:56:cc:1e:48:82:2c:c6:0e:fb:
                    ca:77:3a:ba:79:bc:14:ff:16:50:29:e5:1a:cd:4f:
                    7d:23:4a:72:52:e2:a8:e0:06:9b:f7:33:49:ed:d1:
                    da:86:e7:53:dd:59:27:5f:e9:19:de:ef:04:75:44:
                    31:73:3e:bd:56:0e:59:af:32:cf:54:15:5d:21:bb:
                    16:e6:8f:8c:47:cd:35:23:6b:3a:11:d5:4a:7f:ab:
                    f8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AC:F4:61:E0:28:58:E3:9C:D1:3E:61:78:90:69:66:F9:5C:7B:5F
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:8d:62:0b:8a:3f:8c:2f:30:ff:0b:bf:bc:68:66:d0:e9:
         85:d3:b6:2d:dc:80:2d:2f:f8:de:68:df:16:c1:2c:4c:75:2e:
         f4:da:50:c9:e6:dc:e8:3c:a2:20:2e:c0:6a:79:28:c5:c1:ba:
         50:88:43:d9:c1:d0:bb:9d:e0:47:5f:ad:f8:37:1b:d5:6f:37:
         7f:9c:1c:dd:54:c8:89:a2:2a:df:05:97:86:da:e9:b0:83:07:
         91:bb:63:59:e2:3f:8c:08:8d:43:65:54:c4:1f:2e:30:b6:b3:
         86:39:59:1b:9c:9b:8d:ac:91:c3:aa:df:70:d6:a3:de:dd:07:
         9a:d9:ca:d6:72:0d:78:e1:48:27:68:b2:b7:25:53:e5:ee:84:
         70:72:ac:5f:22:7f:2a:ac:00:eb:b9:c1:a3:4a:d2:b2:d4:e8:
         9b:12:7f:cd:20:be:79:6d:db:cd:de:cb:c7:51:5d:40:7e:0a:
         72:75:fa:d2:d3:d5:ef:67:9a:51:6e:49:67:3f:7d:44:e1:20:
         68:ee:84:f7:24:bb:1e:72:92:97:c8:19:f6:48:99:5f:0b:ce:
         f5:35:ac:33:92:75:41:77:00:0b:15:89:27:69:b4:74:6d:b0:
         74:5b:0d:cc:f1:8d:0e:59:fc:18:31:e8:b8:5c:77:a0:a7:aa:
         4c:cf:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:13 2026 by rpki-client