Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File:                     1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier:          loQ4wMcwnmU1UrDSyQiEcdwwEjV2/vI17jCrDKZCPFo=
Subject key identifier:   80:00:69:33:32:9D:05:59:90:68:A2:D8:BA:47:3B:DC:F0:88:65:59
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer:       /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial:       019FA907AE466FAA8C2E28E36BEB266FBE8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number:          1917
Signing time:             Tue 28 Jul 2026 14:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:20 +0000
Files and hashes:         1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: FixxOuEnCcg18nsxvWQWNOl2dcdMHBuSU5mLnvC3OcE=)
                          2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:ae:46:6f:aa:8c:2e:28:e3:6b:eb:26:6f:be:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
        Validity
            Not Before: Jul 28 14:01:20 2026 GMT
            Not After : Jul 29 14:01:20 2026 GMT
        Subject: CN=80006933329d05599068a2d8ba473bdcf0886559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:00:cc:65:19:c1:c6:b6:52:e1:9d:c0:c4:
                    58:7e:6d:9d:e0:de:f0:7f:83:13:47:05:fa:c1:3a:
                    98:b7:80:18:a5:7f:29:0b:67:4b:6f:18:4d:02:f2:
                    a5:4f:56:95:f7:d3:33:e8:d3:1e:0c:b2:1e:f4:52:
                    e8:07:ac:11:a5:f7:03:30:f3:fc:30:3e:4f:48:6b:
                    83:a3:1e:03:b9:5d:58:3f:63:ca:fe:a6:91:30:7b:
                    e3:03:51:c1:7f:be:7e:41:de:81:ee:06:3c:c8:61:
                    93:75:c2:b3:5e:9a:cc:28:4e:1d:c6:15:38:72:ef:
                    74:07:63:12:11:8a:82:6f:79:a2:e4:b4:74:67:19:
                    63:eb:18:6e:6e:8c:ed:59:06:eb:af:93:99:13:4a:
                    a1:e1:77:fc:82:b5:93:a3:96:2f:a2:e3:f8:8a:ac:
                    c8:fe:71:9a:80:a9:b7:b8:02:f4:20:7d:00:de:9d:
                    f4:70:bf:0b:1e:9c:ab:c7:aa:5f:14:ef:e9:10:35:
                    06:89:54:04:b9:ea:d5:01:12:68:3b:f4:58:3c:40:
                    3a:7b:2b:5f:68:94:53:bc:68:97:99:02:d4:b3:c7:
                    49:ab:a2:35:f2:d3:b1:49:e5:93:d2:47:e9:c4:28:
                    b1:c3:78:23:ad:58:46:ea:14:b2:79:c6:48:b3:5d:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:00:69:33:32:9D:05:59:90:68:A2:D8:BA:47:3B:DC:F0:88:65:59
            X509v3 Authority Key Identifier:
                keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:78:4d:c8:bc:5f:0f:35:c9:e2:b0:69:56:e6:b4:ed:89:
         42:fe:36:97:af:7c:0c:3e:23:99:cc:43:f2:b1:23:6e:26:17:
         a3:7f:98:6f:ec:d0:16:41:13:23:d8:ba:77:9d:42:5d:63:98:
         cc:e5:18:34:24:3a:8c:31:4a:09:40:47:6b:b7:a5:c0:8a:00:
         07:8e:31:f1:83:82:c5:7a:d5:eb:88:b9:a8:47:6b:62:8c:51:
         a6:fd:11:05:e5:c1:0c:28:25:87:b1:ba:86:2f:b3:99:79:b7:
         e7:5a:55:d3:9c:59:8e:9a:ac:7b:bd:63:01:5e:3e:20:c1:66:
         d9:af:bd:8f:79:70:28:55:af:9a:c0:45:93:04:61:07:de:b1:
         5b:3f:41:d9:35:d9:2c:23:a9:95:f5:24:c6:4f:60:af:cc:41:
         7b:e9:cc:2a:08:5a:b1:e1:5c:51:b8:1a:78:f6:b4:91:61:2e:
         b7:70:e9:e9:a3:88:75:d1:76:e8:48:6e:86:c1:f5:22:02:e7:
         eb:f5:d3:3a:08:fb:fa:85:0c:d5:55:6f:0a:e5:37:de:d8:5a:
         4b:9f:15:69:00:b9:e4:c1:b3:01:95:b5:8f:20:12:1c:95:52:
         56:95:80:33:e1:b2:c8:f3:54:f8:b2:7b:47:e3:ec:18:d5:bd:
         ca:45:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:10 2026 by rpki-client