Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          vVpAl5WKrVDP5ILnOUCB5i8sa+iEgAlnvMFV1OaEclA=
Subject key identifier:   FA:10:1F:46:DB:AC:A4:16:77:B2:39:92:9D:F9:EB:19:8D:79:B9:11
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       019FAA87679EDB8BAF68F42870EB55A0A064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          1082
Signing time:             Tue 28 Jul 2026 21:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:28 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: UbR3sKtwhdFhd7F1J3rwFEKX9xU6UYgPqkNLkbh+zU0=)
                          2: 3N8RjBOaHqysfsXcuS4moMiqHcA.roa (hash: iQaQoggeO3tLMHb/V/COJC4hr6BU8lu4S0DICLg++wE=)
                          3: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (hash: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM=)
                          4: W_FOHMjyvQTaAri5A_zDlx2DY2k.roa (hash: njRnMCxu5gn2zsVJDrc4Nj/3Yt4VdpnpXJ0wh2X6tGk=)
                          5: fdth4-LheaAtkNOEJz6pHobfl_k.roa (hash: rTpg5aqyYW2RH+xhrSVpQRy6U3wJBueXqcjg7bGUFhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:67:9e:db:8b:af:68:f4:28:70:eb:55:a0:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Jul 28 21:00:28 2026 GMT
            Not After : Jul 29 21:00:28 2026 GMT
        Subject: CN=fa101f46dbaca41677b239929df9eb198d79b911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:33:ef:c3:9d:06:d1:04:0c:34:44:48:af:
                    91:a2:a2:ac:25:a4:81:9d:aa:be:bd:74:a1:cf:ec:
                    22:c9:41:9f:1a:a5:00:53:50:5a:dc:f7:c4:fd:b3:
                    77:72:aa:73:02:67:3c:bf:22:43:52:b6:cf:47:f6:
                    7a:be:35:bb:25:f5:50:07:b4:da:93:f8:ce:80:58:
                    84:2a:c9:df:b8:1d:b5:b5:44:c2:3d:bd:7c:4f:16:
                    f6:7f:0f:a7:57:cc:42:81:61:e6:ab:67:b7:14:0d:
                    e6:2e:d0:f7:d9:eb:0c:a2:76:5b:f3:01:65:c4:65:
                    7c:e5:17:ec:d5:54:ea:08:f9:a9:5a:ff:00:1a:9f:
                    37:7c:51:da:c3:59:c3:c7:e0:37:a1:56:16:80:ce:
                    b0:83:92:e1:7a:28:c6:fa:93:26:35:25:6c:50:e4:
                    a4:73:62:f5:8b:65:08:f9:cf:00:a2:e0:7f:75:84:
                    40:40:32:ff:ee:ef:d1:d6:04:2e:1f:09:5c:0f:78:
                    d6:ea:68:bb:37:c1:70:94:54:a3:dc:dc:f8:fc:dd:
                    02:5d:54:32:2d:53:83:0d:b0:6e:8e:f8:a0:e9:3d:
                    1b:52:ad:8f:3f:59:66:3c:cd:9b:0b:c7:5e:46:16:
                    4c:db:d5:76:3e:e7:fc:41:3a:49:c8:63:5a:3f:eb:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:1F:46:DB:AC:A4:16:77:B2:39:92:9D:F9:EB:19:8D:79:B9:11
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:dc:39:c6:ba:01:97:2b:d0:a1:fa:48:1e:f3:7b:be:38:
         2d:71:7b:54:0e:4d:8c:b8:0c:e7:b8:e5:9d:f6:9e:05:c6:a5:
         ab:b7:0e:70:36:b0:57:51:be:18:f9:e3:0a:4b:31:b7:ed:0c:
         b3:c7:ac:37:7a:e6:d3:2d:37:90:3d:cd:00:8e:ca:5d:0f:5b:
         a4:97:b4:af:a1:ee:df:40:42:f6:21:dd:1a:d2:ca:34:a9:21:
         b2:88:81:94:50:98:b7:f6:8c:57:2c:c0:24:9c:51:0a:e1:2e:
         1a:14:a3:44:dd:65:5a:67:52:f3:dc:5d:b5:81:ac:8b:43:8c:
         0c:dd:ed:47:89:a9:bb:d3:67:d3:7e:32:13:fc:84:0f:c3:3c:
         57:83:18:0b:40:c3:d7:0c:e6:dd:44:d0:d5:00:a0:5f:85:51:
         a4:ca:84:6c:73:96:ff:3e:1e:9a:20:77:b3:32:1c:60:9c:e8:
         7a:4a:cd:e7:12:0e:ab:fb:78:aa:bb:cd:f7:91:ac:13:ee:3c:
         b6:8e:cd:25:7b:dc:71:ac:7e:16:7f:b8:f7:a5:83:92:1f:d0:
         ef:ff:d7:19:cd:e7:ab:ce:6d:0e:69:45:00:3e:27:b2:b3:f7:
         15:a5:13:b2:0d:89:09:eb:73:a2:87:6b:cb:3d:1c:3b:37:53:
         52:e9:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:52 2026 by rpki-client