Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          CMWzx2SZW/yjWJt8XE9YhamOrrlo8iC2VGgmkntzMEo=
Subject key identifier:   24:80:73:72:0C:DF:52:36:AD:FC:0A:16:78:FE:97:93:99:70:2D:E8
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       019FAB2C6FB52D428B942344CD9EF3891E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          0334
Signing time:             Wed 29 Jul 2026 00:00:43 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:43 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:43 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: O8k6tRcGH+l9XpOfr3WHlc8R5RMwJyFeI4sQ7+I4Wi0=)
                          2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:6f:b5:2d:42:8b:94:23:44:cd:9e:f3:89:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Jul 29 00:00:43 2026 GMT
            Not After : Jul 30 00:00:43 2026 GMT
        Subject: CN=248073720cdf5236adfc0a1678fe979399702de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:6e:4e:cf:d0:8f:81:e3:c1:eb:3f:c6:8d:
                    f6:1b:19:b3:a3:f0:c6:de:ba:84:cb:46:15:48:07:
                    a2:51:3f:69:10:a3:5f:ce:50:2e:76:96:b5:f8:a1:
                    8e:7b:63:d7:73:90:8c:81:ec:0b:57:f5:b9:97:e6:
                    cc:a2:91:c3:8f:f9:35:c1:30:4d:a3:64:36:c5:94:
                    45:c0:eb:55:5c:c2:12:85:f5:6b:de:64:14:d4:29:
                    01:93:5c:9a:81:53:e3:d3:71:d3:ab:ea:c3:b5:06:
                    f6:91:56:91:b4:b2:7d:91:b1:ab:63:1a:a4:1a:21:
                    1b:2b:a7:b2:78:b9:86:15:b5:88:66:ff:75:fb:c3:
                    15:b2:9d:c1:7a:03:26:6f:b6:5d:51:17:b3:48:06:
                    8f:21:44:d2:31:fc:e0:79:fe:fb:18:1c:77:f8:d4:
                    7e:8e:ab:97:66:07:70:fe:fe:03:82:4f:2b:b9:29:
                    4f:4e:92:fd:27:1f:be:38:31:04:a7:e7:e8:f0:05:
                    0e:86:1b:da:2f:5e:36:cf:f7:81:da:41:d9:d9:ca:
                    01:e2:a0:d5:c0:85:5e:f8:04:1d:bd:85:a1:40:2f:
                    71:e7:25:92:fe:b8:6f:e7:d9:f6:c3:1e:e2:2a:8c:
                    7f:41:60:34:a6:d6:08:b2:3b:71:db:eb:ba:f7:42:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:73:72:0C:DF:52:36:AD:FC:0A:16:78:FE:97:93:99:70:2D:E8
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:18:65:f8:7b:93:0b:d2:bb:49:07:65:fa:bd:4f:44:74:
         f7:94:23:40:06:61:eb:f0:eb:ff:1f:90:2b:ec:2e:1b:10:b3:
         4b:84:cc:bc:e5:f2:eb:01:e6:b7:c9:a2:54:dc:eb:26:97:15:
         6e:4f:a9:34:9d:00:34:95:67:78:17:83:68:71:e3:ed:75:b8:
         12:c0:12:79:72:dc:33:bd:5f:be:85:c4:a7:78:fc:e6:77:0b:
         9e:ea:3f:45:58:bb:88:65:79:f6:d3:27:f4:66:25:e1:3f:ab:
         41:f0:ce:02:d3:f3:c1:38:ba:71:71:4b:d0:42:2d:42:09:91:
         e5:10:5a:1f:f0:c2:27:e1:97:f6:99:c2:fb:25:2d:36:24:da:
         b4:41:47:aa:c2:af:2f:47:34:c2:3a:c9:ba:3b:9a:ce:35:05:
         ac:75:fb:41:06:e9:2d:8b:6b:63:db:55:53:4b:1c:db:76:7c:
         60:82:dd:59:ec:96:43:af:84:08:51:ab:f2:7b:59:cb:32:56:
         31:96:57:50:bf:5d:38:b5:9a:b2:13:51:46:32:db:23:3c:00:
         d8:e2:99:b0:61:99:e7:6d:aa:73:ce:8a:12:dc:1d:b6:75:e6:
         08:8e:9d:05:ea:3a:53:6e:3b:85:1d:7f:4c:56:32:4e:c1:a1:
         74:06:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:07 2026 by rpki-client