Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          RV3oFCx7J4She1vF/ZQNSheMpJsRQw4dbblNvx9IBsA=
Subject key identifier:   75:5A:1E:C7:D8:96:DF:CD:42:67:E0:67:25:00:9A:ED:7D:F0:4A:B2
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       019FA9759432EF8373C6E88195D9656C51F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 16:01:22 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:22 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:22 +0000
Files and hashes:         1: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: 3DxRYgK+JnHegq0yMicVqLcvOenRisEktQ/fc3vRZb0=)
                          2: H1YvmuStYDNqAB61c-rWu6eqTD4.roa (hash: 9PGCd+QuRbx4/mSkh35qhoqedPe+bLxdrUELkN0aarc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:94:32:ef:83:73:c6:e8:81:95:d9:65:6c:51:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Jul 28 16:01:22 2026 GMT
            Not After : Jul 29 16:01:22 2026 GMT
        Subject: CN=755a1ec7d896dfcd4267e06725009aed7df04ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:50:bf:3a:7a:03:a4:3a:e0:c8:3a:96:7e:
                    42:ba:44:f8:ca:14:14:56:52:e9:59:b1:18:d0:e0:
                    09:de:a7:62:81:51:e3:39:d8:c0:a7:ee:69:56:d1:
                    27:e6:bc:54:97:77:11:d2:a8:67:44:6d:71:97:bc:
                    b0:22:ea:38:74:cb:1c:00:52:cc:a9:c5:01:10:67:
                    12:c9:2b:29:75:a4:c9:a3:f3:08:b6:a5:37:7f:8e:
                    8e:25:2d:3c:a9:ba:6c:6a:35:66:45:c5:ba:42:ae:
                    ba:ab:41:82:39:f6:94:da:1b:06:65:b7:9d:4e:6c:
                    0a:f5:d2:5a:41:42:e5:21:1e:7f:2a:d5:fe:3f:08:
                    8d:9a:32:82:df:16:49:25:9b:6a:e9:8c:fc:6b:02:
                    cb:37:e3:74:1e:c5:1d:4d:e7:cc:0c:21:11:c7:5d:
                    fd:28:ab:95:a7:54:0f:f4:93:60:5b:65:39:3e:da:
                    b0:8e:67:9e:77:c1:a7:47:2c:02:d4:b6:8b:19:99:
                    1d:f6:76:d1:33:90:e9:3d:f4:6c:88:94:ab:e3:76:
                    6a:42:75:79:d3:5e:55:d7:86:55:73:7f:b7:d6:0d:
                    cb:31:08:cd:df:06:8b:ed:75:d9:18:ed:e0:68:c4:
                    fa:f5:89:c9:f7:1a:60:53:cf:7d:fc:6b:6c:f0:e3:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5A:1E:C7:D8:96:DF:CD:42:67:E0:67:25:00:9A:ED:7D:F0:4A:B2
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:35:9a:e5:81:b3:47:20:5c:a6:9d:73:5e:db:3d:e7:88:16:
         8a:27:c5:74:bc:8c:ea:85:5a:d5:25:6e:a7:a1:51:a1:7c:b0:
         c5:7d:13:94:b5:7a:e9:cb:b8:17:11:d9:8d:3b:db:c2:d9:c2:
         58:4e:a1:70:37:8a:0f:b2:18:58:6a:8f:32:d2:72:68:5d:b5:
         51:b2:c6:ed:71:8f:a3:50:61:cf:68:ad:f4:6d:13:d9:66:a1:
         8f:50:cf:be:85:fa:16:ce:56:15:a8:db:6e:0e:85:b1:d7:1d:
         2e:11:4f:01:75:ee:e6:28:6e:3c:86:5b:6b:cf:21:a8:e2:e9:
         9f:35:dd:f4:24:00:94:10:78:95:7d:db:10:0f:8c:3a:02:c8:
         95:4c:82:5f:ae:0a:2f:79:da:98:96:03:26:78:d4:33:4f:51:
         4c:fa:78:d2:9e:00:19:bd:87:9c:ae:73:90:4d:32:bd:b4:81:
         70:00:6c:98:46:0d:03:5f:61:96:0e:47:23:d8:76:45:7e:7c:
         a8:41:03:25:24:5b:e0:d2:e8:e2:29:33:32:fa:6b:dc:45:c0:
         f6:0a:4e:6a:89:a8:70:7d:ca:8a:20:45:6b:38:83:0c:28:73:
         ab:00:5a:64:f4:7b:ab:fa:61:49:d0:af:27:74:d7:3e:67:0d:
         b4:e6:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:25 2026 by rpki-client