Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File:                     Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier:          yIRD4TF5xk9EGAVjVSLF4Uqn6feqGE/gwz+LMan4fuE=
Subject key identifier:   B2:A6:E0:36:32:F8:46:56:0D:57:15:0D:27:79:A6:B9:47:DE:E1:88
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer:       /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial:       019FA82B19A0CE52F836358EBD6DC26A378F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number:          13C3
Signing time:             Tue 28 Jul 2026 10:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:24 +0000
Files and hashes:         1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: Se0wWDL/tZwJvLMr0ItPOo+kXVB6gsfLJMNRAbLhX1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:19:a0:ce:52:f8:36:35:8e:bd:6d:c2:6a:37:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
        Validity
            Not Before: Jul 28 10:00:24 2026 GMT
            Not After : Jul 29 10:00:24 2026 GMT
        Subject: CN=b2a6e03632f846560d57150d2779a6b947dee188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:e2:38:7e:f3:00:f3:04:28:26:ee:93:b2:
                    09:7d:ab:64:dd:9d:34:f2:4d:64:52:d8:51:19:b2:
                    17:62:43:c2:8d:c3:cb:43:c1:2d:ce:e9:06:54:ad:
                    d0:11:e2:fa:09:63:57:c0:0c:4c:a5:a3:65:a7:36:
                    a5:e7:cc:4f:65:98:6b:ff:36:6a:b0:22:8e:f4:99:
                    36:ff:50:69:50:e5:d8:27:bd:eb:7f:26:e6:ba:8b:
                    c8:ef:cd:9d:72:d8:d1:14:5b:84:12:55:85:43:6f:
                    25:a7:76:96:62:4d:8a:fe:0d:0c:09:7e:d1:94:c0:
                    f9:75:b9:8a:b9:53:8b:62:fa:bc:60:be:59:b5:74:
                    85:18:04:7b:98:18:43:54:8f:a3:6b:8f:f7:7a:db:
                    34:d9:3a:f2:f6:f7:e0:d0:43:97:7b:f7:a2:50:4b:
                    50:0c:ee:ab:d7:76:8e:46:6c:f8:ff:ca:2f:8b:b3:
                    e0:7d:ea:97:7d:63:16:15:73:79:7d:cd:87:48:84:
                    69:93:0d:66:08:a8:73:d5:03:84:03:c6:cb:00:cd:
                    72:3d:21:e2:1e:c4:1c:bc:81:b0:04:8b:86:33:c2:
                    a6:d9:06:24:6c:dd:cb:3f:cb:07:29:1d:fc:82:7c:
                    0b:4b:b9:2c:12:75:d0:0b:77:3f:e5:f1:3a:d7:51:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A6:E0:36:32:F8:46:56:0D:57:15:0D:27:79:A6:B9:47:DE:E1:88
            X509v3 Authority Key Identifier:
                keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:89:7f:e4:57:71:c7:09:d1:8d:fa:64:16:fc:a8:7a:f1:35:
         6e:cf:31:eb:eb:b3:89:58:4d:6a:c0:37:31:0e:4a:ee:42:3b:
         3b:ef:2c:df:37:75:f4:65:1e:91:ca:e1:7a:30:59:eb:d7:17:
         4e:23:a3:e1:61:24:31:00:85:3b:53:83:82:61:ac:47:63:bc:
         a8:6e:44:98:21:0f:38:af:85:86:83:56:06:3a:22:ac:3a:e2:
         a5:33:65:9d:9b:6e:c5:e5:4b:17:16:52:25:88:ec:99:a8:f4:
         6f:e0:a2:7b:6f:79:4d:14:48:f9:b3:4f:f1:ec:2c:9f:5f:12:
         c9:67:1c:7c:0c:4e:7f:90:9d:da:c2:f9:fc:4b:89:bd:85:6e:
         78:32:4a:28:a3:bb:68:58:6a:4e:46:3b:ce:43:75:00:73:66:
         78:a4:39:d6:10:be:5d:d4:98:ac:45:93:64:d6:5a:05:c0:b2:
         6d:43:f5:b9:4e:f0:5a:e5:e1:da:1d:ed:d5:00:ee:6f:ad:4e:
         f4:1a:67:1d:b4:e2:45:90:15:04:27:34:f2:ec:e9:ba:e4:08:
         9d:7c:8f:6f:bd:ef:1b:71:94:21:80:ed:bc:5a:bf:b3:74:d6:
         dc:05:01:fa:31:33:57:c5:45:65:e3:5c:0e:67:94:53:62:7d:
         a1:ea:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:29 2026 by rpki-client