Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          TwJkIlcbgoFnZw/HV6bISqaIf3bQsZqgOcDJNcq+NKk=
Subject key identifier:   DB:D1:5C:1D:B3:35:84:86:1D:A6:7C:13:8F:8F:66:05:A4:27:93:E4
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019FA7BDB97D7998D028F0A5F975E3F7DDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          04C8
Signing time:             Tue 28 Jul 2026 08:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:56 +0000
Files and hashes:         1: eHftEtrVJeK48pS78ZHucZUehcs.asa (hash: ijuGTjfu0G7KPysUosHsMD3fkqH2j9Y0uGe3akSkoZs=)
                          2: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: ciNd8CSQW923STKzmmud+eThZda3CoGTphUrV2M4dgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:b9:7d:79:98:d0:28:f0:a5:f9:75:e3:f7:dd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Jul 28 08:00:56 2026 GMT
            Not After : Jul 29 08:00:56 2026 GMT
        Subject: CN=dbd15c1db33584861da67c138f8f6605a42793e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:32:28:91:3b:4a:16:12:02:be:aa:6d:07:
                    1d:6c:34:aa:be:80:49:6b:a2:48:6c:73:ba:0d:58:
                    1f:a6:a0:40:a6:fd:07:a5:9f:43:a6:fe:08:7e:33:
                    49:5c:57:a1:4c:d1:4e:84:cd:b1:30:5c:24:d7:b4:
                    5e:0d:10:50:07:00:c5:2d:05:93:e1:25:16:4c:73:
                    57:d1:78:67:b7:c4:15:05:30:66:95:76:f9:ab:18:
                    25:5c:7e:6a:db:e1:1d:5b:16:b2:ba:ff:b4:ca:80:
                    d7:04:9c:b3:64:fc:6e:dd:68:bf:ae:59:e9:66:7d:
                    42:99:48:ef:9a:80:5e:ca:85:b0:99:8e:b7:0b:b5:
                    83:b8:9d:6c:1a:d2:c7:db:76:0d:c9:83:b9:54:f7:
                    d8:e3:c3:56:73:8d:21:f6:69:db:19:30:31:2f:92:
                    c7:ff:17:d4:67:44:f4:5f:92:24:8f:b4:24:80:a2:
                    50:62:6e:e5:0b:d7:b8:e4:cb:19:62:b5:5e:ec:b4:
                    1c:eb:a4:28:03:88:19:7f:26:3e:5e:10:42:a2:09:
                    7b:53:5b:84:31:0c:08:f8:00:94:14:c5:af:11:1e:
                    e1:e1:b2:23:04:99:20:95:5c:46:7c:24:fa:58:ba:
                    19:cc:0d:2a:1a:e8:9b:e3:06:03:67:73:09:d4:10:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:5C:1D:B3:35:84:86:1D:A6:7C:13:8F:8F:66:05:A4:27:93:E4
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:22:4a:f5:8c:2f:b1:02:71:75:2f:4c:79:28:20:9b:d5:a7:
         35:41:ff:7d:d3:48:69:64:7f:47:60:c4:49:35:b0:f8:bb:2b:
         16:83:c4:f8:61:de:c3:43:c3:99:6b:4e:ee:1b:06:b7:f3:83:
         9e:ee:27:40:3f:4e:52:2b:ed:ad:be:52:04:dd:d8:17:3d:75:
         21:70:90:3e:e8:60:b1:f9:3d:3a:ba:48:c8:75:b5:94:4f:5b:
         b3:17:d3:bb:ea:35:67:6b:1f:16:a9:7b:0f:59:ac:90:60:9c:
         30:c2:d3:51:ab:8a:13:cb:e3:3e:29:a5:e0:35:73:6d:53:db:
         28:f3:ea:85:3f:4a:b7:66:2a:5b:99:5e:02:9b:65:d2:ed:d6:
         93:66:8e:43:47:d2:58:2c:77:f4:1f:fe:8c:85:c7:6c:4a:fc:
         83:a6:c3:17:03:7d:cd:86:64:fa:aa:54:bb:00:bd:ae:01:79:
         ff:91:c9:02:ff:c7:b0:80:5a:c7:12:f0:f1:da:9d:fb:54:c2:
         2f:1c:b7:4c:85:11:41:ea:09:9f:cb:81:89:89:25:50:ec:d7:
         bf:31:dc:1e:c0:ff:8f:ab:c4:7e:82:c4:ab:2a:7d:3c:37:67:
         d2:98:3c:8d:c8:15:67:ec:90:79:3a:c4:6f:8a:f8:71:bc:33:
         de:68:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:42 2026 by rpki-client