Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File:                     d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier:          t2Od0gqDVzAOIjWs1AuH2I7Fb9zq/FueehF+crLdjbI=
Subject key identifier:   16:5D:06:47:39:7D:FF:F1:76:76:5C:54:4C:16:33:9C:AD:BA:15:D7
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer:       /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial:       019FAA50BBB6EA6385C9D0D51B9074C225CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number:          0E64
Signing time:             Tue 28 Jul 2026 20:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:45 +0000
Files and hashes:         1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: RVGwUwyLhO6DDok1RAX+lWT7oF0J2SZ3Ynk++1JSAho=)
                          2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:bb:b6:ea:63:85:c9:d0:d5:1b:90:74:c2:25:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
        Validity
            Not Before: Jul 28 20:00:45 2026 GMT
            Not After : Jul 29 20:00:45 2026 GMT
        Subject: CN=165d0647397dfff176765c544c16339cadba15d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:ef:94:52:4c:dc:ab:20:89:56:b7:5f:52:
                    d5:eb:cb:6b:50:49:fa:1e:ad:4a:a6:3c:9f:1f:da:
                    b6:7b:fd:00:aa:3b:64:ef:e1:ec:b1:bc:db:76:9d:
                    dc:9c:d5:64:b7:f9:e4:89:d5:6b:40:78:79:91:95:
                    d4:14:ec:e5:7e:80:99:35:dd:04:10:24:30:14:45:
                    87:cb:4b:93:8d:14:f7:f5:d4:e3:2e:1e:59:87:ec:
                    ec:22:40:d0:ee:da:e3:ac:e2:c8:40:48:e0:5e:cf:
                    99:00:6b:0e:27:cb:fa:38:8e:f8:49:8d:61:69:df:
                    f8:c8:7c:3e:1d:0e:41:58:8e:53:22:8e:7f:92:19:
                    2f:60:0b:2d:00:bf:2e:8a:a9:a6:92:ec:bf:36:ab:
                    7d:84:9b:a2:f3:1d:05:eb:4d:15:66:54:fe:24:10:
                    7c:a7:81:8f:a2:5b:0a:e8:01:ee:44:c7:80:64:83:
                    63:3e:fc:7a:ff:35:d0:13:d0:c7:25:89:6d:c1:ce:
                    9d:e9:f6:5c:82:38:fd:5e:c8:82:2e:0d:5b:89:f3:
                    be:28:a4:83:65:03:79:99:8c:5b:06:94:83:4a:2c:
                    ce:a3:75:d0:af:55:fd:1e:03:94:f4:89:a7:81:2a:
                    97:34:25:85:e4:90:8d:71:77:29:57:c8:17:6b:44:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:06:47:39:7D:FF:F1:76:76:5C:54:4C:16:33:9C:AD:BA:15:D7
            X509v3 Authority Key Identifier:
                keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:e3:15:bc:d1:72:af:81:04:8c:0c:25:46:33:a6:b7:46:
         18:c1:df:fa:3c:0a:dd:1e:e5:58:4a:cd:7d:6e:02:0c:ea:1a:
         92:13:62:7c:6b:86:bf:4f:02:c4:91:e3:8a:2b:25:c3:75:30:
         4e:d3:e4:e2:b2:1c:ef:f0:2d:c2:8d:df:90:79:cd:59:46:5d:
         7a:e2:37:85:a1:5b:4a:08:cb:68:9a:61:08:0e:ea:11:1e:4e:
         f2:a6:30:b7:e2:e0:2a:47:dd:5b:eb:ad:08:95:23:90:03:70:
         7a:98:2a:b2:c5:c3:21:dc:84:23:63:c0:44:11:3e:d7:5b:37:
         fd:ea:58:12:8f:84:f1:7f:8d:30:7a:29:52:e9:64:82:bf:60:
         f1:f6:33:65:a0:9b:54:24:3c:90:1f:71:41:96:9d:fb:68:a0:
         f5:f6:e5:56:00:70:f8:d3:bc:9d:5e:5f:09:4e:59:35:71:0d:
         a8:b6:d1:c7:5d:e5:4d:42:31:24:93:c2:0a:56:e0:46:03:bc:
         eb:a6:7f:32:32:4f:f5:3c:3a:e1:8d:ba:87:82:80:a0:c5:45:
         92:ea:b5:8f:9a:d4:2e:63:4e:19:3d:45:a7:be:61:2f:c1:7e:
         94:09:a2:24:a2:10:0e:c3:e6:7f:61:be:d7:9b:b1:a6:42:d5:
         40:b5:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:14 2026 by rpki-client