Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File:                     d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier:          EisVYSbwmCPV3245U503+T0ZuYCD9G/cx8B2E5AG+rU=
Subject key identifier:   D2:97:A1:5E:91:8E:8E:17:D8:5C:10:1E:B3:B0:B6:E2:ED:CF:63:39
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer:       /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial:       019FA9E2B2173660316DFA596388AD9D354F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 18:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:33 +0000
Files and hashes:         1: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (hash: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ=)
                          2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: QhJLPNQjqOfFo5PH2omwfD1qbuVJzUbLmlb7tWfucFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:b2:17:36:60:31:6d:fa:59:63:88:ad:9d:35:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
        Validity
            Not Before: Jul 28 18:00:33 2026 GMT
            Not After : Jul 29 18:00:33 2026 GMT
        Subject: CN=d297a15e918e8e17d85c101eb3b0b6e2edcf6339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:b1:ef:c9:3f:26:ef:f2:57:99:53:8b:91:
                    25:cd:6d:a8:cf:e3:12:20:13:25:f3:46:3d:70:9b:
                    c8:bd:3c:96:04:a5:c5:1b:3d:ea:a0:07:b0:96:01:
                    c2:e2:89:52:87:40:20:7d:e8:53:e9:60:9e:9e:06:
                    c3:7e:f6:2a:f3:06:7d:bd:60:86:8b:5b:83:a1:54:
                    51:dc:56:a2:15:f1:76:e0:95:b4:38:98:35:f9:78:
                    12:4a:6d:ae:f3:db:b9:32:19:90:70:bc:18:67:c4:
                    d6:e7:bb:19:70:ca:f8:ee:6e:45:6a:65:36:8c:c2:
                    3e:00:9b:c0:d7:11:53:fb:ef:f9:6f:13:d3:35:fb:
                    bc:48:b0:a8:3c:0f:83:1e:07:99:56:e2:5a:28:61:
                    99:d9:4b:dc:d5:ad:4f:d0:2d:a1:92:64:70:50:53:
                    bf:7b:a6:08:f8:07:ee:a2:99:12:d1:21:c4:81:de:
                    49:b2:14:48:73:ed:43:7c:b6:de:67:8d:6e:9a:9b:
                    d7:58:37:3b:09:6a:dd:61:b7:43:d3:69:95:41:62:
                    03:db:e3:86:89:fb:38:7c:ba:51:9a:74:4c:fd:7c:
                    2a:15:db:81:bd:9c:51:75:94:6f:c4:fd:fa:0b:4f:
                    eb:ca:71:c0:4e:c4:28:22:be:a1:4c:3a:c8:bc:83:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:97:A1:5E:91:8E:8E:17:D8:5C:10:1E:B3:B0:B6:E2:ED:CF:63:39
            X509v3 Authority Key Identifier:
                keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:66:c8:3a:72:18:f7:fa:5f:a5:59:a8:e8:b9:0e:1e:c2:d7:
         00:b9:bf:d0:d9:07:74:de:3b:d5:1e:87:f4:3e:50:66:e7:9b:
         5a:e2:86:d8:6b:f2:38:05:18:ab:0b:07:fe:12:1d:99:a2:9c:
         fb:9a:39:65:92:19:4d:37:73:b4:de:77:63:a2:e9:17:34:31:
         2b:95:99:03:7a:38:19:8d:60:01:91:7f:4b:bc:bf:20:24:5e:
         f9:82:93:49:a4:d8:1c:b8:94:1c:34:71:92:65:e6:d7:f8:9c:
         dd:22:5d:bb:64:9a:da:b6:26:d0:d3:79:5b:fc:6b:65:dd:96:
         98:5a:c8:bd:6f:32:44:93:de:8f:63:d9:be:12:94:66:7f:5c:
         75:fa:ee:bf:47:48:f6:c7:53:5f:6e:9c:f7:eb:6e:1d:5e:95:
         0a:53:83:6f:de:e4:98:5b:82:48:8e:f0:1c:6b:da:f1:28:2e:
         2b:79:2c:52:25:c9:53:c4:3a:a9:94:be:c9:87:b8:68:70:20:
         6a:87:fa:75:d2:a7:2a:8a:87:03:5a:4a:ca:e8:66:4c:6c:5a:
         60:3c:99:16:41:29:d9:0a:ee:9f:45:67:4e:ef:c0:42:2d:47:
         b1:59:f9:66:e0:76:88:95:d3:3c:37:a2:d5:55:3e:04:ef:85:
         ae:83:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:43 2026 by rpki-client