Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          MK+0ZvpyEKVDcrBGHYyjPR+L6Ae4ztcF6oKxXKa1Xu0=
Subject key identifier:   CD:AF:9F:ED:7F:19:C3:89:29:AE:90:60:58:DF:18:67:89:68:68:79
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019FACE37242F0A708E5C9918B3057318EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          1080
Signing time:             Wed 29 Jul 2026 08:00:14 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:14 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:14 +0000
Files and hashes:         1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: y98Fop9mnuPCBb2bfGtexVhpmGzP7iafSkBAGAeyIUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:72:42:f0:a7:08:e5:c9:91:8b:30:57:31:8e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Jul 29 08:00:14 2026 GMT
            Not After : Jul 30 08:00:14 2026 GMT
        Subject: CN=cdaf9fed7f19c38929ae906058df186789686879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:68:82:82:14:cd:0f:ce:dd:7c:ac:cf:f1:
                    f3:fc:74:72:c7:69:25:83:c5:80:06:f0:df:a1:f7:
                    84:10:2e:c9:77:92:b1:21:f8:d8:ea:41:8f:bb:76:
                    78:6d:e8:d8:55:64:aa:9c:9e:34:37:f4:70:ae:6f:
                    66:6c:0b:98:f4:b7:70:d9:0c:7b:e9:2c:7e:82:5b:
                    b2:47:fe:1d:fa:a1:31:65:77:42:35:0d:59:96:2c:
                    77:a0:68:26:3c:34:c9:82:9d:fe:59:f9:de:8d:fa:
                    cd:17:50:0b:50:71:76:05:99:a2:67:29:ff:ee:c8:
                    31:b5:c3:16:ef:c1:74:ed:e5:fd:23:de:da:56:a2:
                    0d:0e:21:3f:68:03:e1:ba:bf:2b:fa:97:98:9e:86:
                    04:be:5c:1c:84:4c:00:b2:5a:71:40:7b:92:30:ac:
                    a7:5c:7d:a7:e6:bd:64:2b:6d:b6:0f:e4:7e:05:1f:
                    8d:e8:2c:d7:32:c2:01:6b:e3:c7:91:89:63:5f:9c:
                    e5:69:36:97:9a:36:c5:69:c1:44:55:96:2d:4a:df:
                    a3:8e:6d:74:5d:5e:03:af:d3:13:61:35:52:73:b1:
                    9f:d1:a4:cf:f8:23:37:ab:1e:d7:6b:75:1f:45:9d:
                    17:b8:09:4a:7d:bd:1f:37:7f:73:97:05:48:24:6a:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:9F:ED:7F:19:C3:89:29:AE:90:60:58:DF:18:67:89:68:68:79
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:e9:e0:7c:46:c5:14:fa:36:47:3d:7c:9f:9a:4a:32:71:3c:
         98:24:7e:fd:3e:8d:d5:a1:16:89:cc:a5:bf:38:cc:39:50:87:
         7d:d0:5f:23:3d:dd:8f:2b:66:d4:d1:d3:57:e5:41:c7:8e:cc:
         be:6f:f5:76:e8:eb:19:1a:e0:05:fd:5f:cd:b5:c3:84:0b:26:
         87:53:8e:15:a9:63:f0:ba:2c:93:84:bd:3a:89:d5:87:4d:ea:
         3c:58:6e:dd:28:c7:34:5e:c3:5b:be:83:30:60:32:8d:ea:53:
         b0:eb:70:b6:0e:b6:4c:eb:ef:32:f5:03:db:04:02:76:da:57:
         4d:99:b4:42:3a:d7:b6:aa:de:60:47:75:a9:b0:79:9e:e4:fd:
         47:23:f6:3d:97:73:99:cb:10:a9:f9:62:fc:e9:04:9f:79:32:
         6a:86:2a:a6:1a:2d:30:f9:ac:9c:fb:df:5f:49:3c:be:45:de:
         01:da:f7:90:e7:08:76:9d:dd:e3:68:93:3b:f9:44:66:aa:03:
         e7:01:47:c7:3a:6e:01:28:d6:5b:fe:08:86:99:93:00:8d:c8:
         34:4e:8c:71:a6:df:f6:62:5f:fd:54:73:e6:d9:07:dc:41:21:
         d0:95:05:70:fd:24:83:72:a6:c1:4c:97:1c:c8:8a:6a:f4:e5:
         5a:c0:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:20 2026 by rpki-client