Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          f+EVPkVkRuKBWGwHNRPhCEklNnpqH8EiPCIEM6vQlt4=
Subject key identifier:   45:63:3C:4D:CF:60:7C:B3:A5:19:D8:A7:48:E0:AE:94:4C:39:4E:F6
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       019FAC3EF988434048C4AA662CA6AB167726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          0CB7
Signing time:             Wed 29 Jul 2026 05:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:35 +0000
Files and hashes:         1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: Z242D/8ajdDj29nzFnklGhiFzIAxOujHmnlEdAmSLf0=)
                          2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:f9:88:43:40:48:c4:aa:66:2c:a6:ab:16:77:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: Jul 29 05:00:35 2026 GMT
            Not After : Jul 30 05:00:35 2026 GMT
        Subject: CN=45633c4dcf607cb3a519d8a748e0ae944c394ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:cf:3d:5c:d1:48:a9:a9:79:ae:bb:da:ec:
                    20:85:c8:c8:7f:86:03:b7:93:8a:82:79:4a:d3:aa:
                    ef:b8:47:83:b7:9a:56:1e:9f:bf:f7:db:3c:e7:39:
                    6f:1d:98:b9:13:2c:bf:da:4f:18:10:6f:8d:d0:a3:
                    e6:94:fb:70:1e:6f:19:c3:ec:bb:7a:bc:7a:31:0b:
                    a0:8a:fb:e5:a7:bf:11:8a:43:54:33:7c:e7:cd:10:
                    7b:ed:3d:72:cc:cf:52:79:ab:ea:f5:71:e7:86:2b:
                    d3:ce:84:ba:8e:5d:9d:7e:f9:e3:c4:a4:35:26:60:
                    8f:f7:a8:9f:46:b9:c7:46:8e:07:55:f9:b3:46:12:
                    66:12:12:4e:90:e0:c0:8b:e2:87:dc:66:27:36:fb:
                    d1:fa:c3:c2:25:0f:3c:8f:4d:5f:5a:4a:6a:9e:40:
                    4a:d9:22:b1:12:37:31:8c:e4:0b:f4:b1:60:34:ad:
                    c3:b6:be:2a:e8:5a:55:14:62:a5:94:23:93:fe:0f:
                    dc:7c:0d:c2:9c:6f:ef:df:9f:2e:92:c5:91:f9:51:
                    3d:f4:e8:f2:fb:93:31:9a:67:2a:0d:88:fa:a5:f7:
                    6e:4b:07:20:f3:e6:dd:49:db:24:34:b7:56:ab:92:
                    34:8e:35:c3:de:19:5f:f0:f2:96:46:4c:da:b2:f5:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:3C:4D:CF:60:7C:B3:A5:19:D8:A7:48:E0:AE:94:4C:39:4E:F6
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d7:4a:b3:ab:4b:a9:73:df:42:25:c6:ab:29:00:dd:e9:ac:
         98:4c:12:52:44:c8:2a:27:48:65:17:a7:79:5d:45:93:5d:a7:
         e4:be:ef:43:69:19:b5:35:f4:ac:c0:9f:79:0b:19:5b:05:1c:
         e5:66:25:e4:c1:1a:62:b1:b2:78:34:41:e9:c0:0e:ee:1d:c2:
         5e:8d:89:a3:55:ab:95:55:7a:da:fa:da:cb:cd:f5:07:c6:38:
         29:14:fe:40:23:25:77:c1:65:0c:2c:39:de:a7:e2:41:eb:c0:
         7e:cc:0f:3f:e2:d2:63:db:ee:05:4f:a4:6c:89:f1:bd:37:18:
         ba:5f:c8:c3:c4:aa:5e:f3:00:9e:32:08:4d:d4:88:89:d6:a3:
         b2:64:1d:06:60:f9:de:0c:9e:3d:03:53:70:65:d8:dd:8e:71:
         e1:6c:d5:7f:b5:9a:d4:2d:88:7d:7a:45:83:c7:25:4f:2e:ad:
         a1:e6:fa:48:b3:1f:d1:e3:a9:89:81:e6:be:7c:32:8e:75:b9:
         99:78:e7:65:c9:67:cb:72:12:52:25:ff:d6:16:c9:d1:96:f5:
         0c:30:7b:82:da:49:55:8a:d2:16:62:fd:59:fd:0a:ca:80:6c:
         19:de:70:9e:92:f3:f1:db:5d:e3:15:ff:5c:30:a5:30:6b:82:
         e3:52:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:34:38 2026 by rpki-client