Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          pm5zuPgfcO5audp0StuM1qaRaUhWv9pmdlwTQZomkZw=
Subject key identifier:   B3:A6:51:54:68:EA:25:FD:4D:3F:62:4A:CB:9F:26:C5:82:65:7B:14
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019FA9E2C94B2AB988FBFB1D07D40CDD4C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          16EA
Signing time:             Tue 28 Jul 2026 18:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:39 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: bdxyv6SPv89ECqatUk2mVdphSstqtLDXfSy8peZy/Rk=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:c9:4b:2a:b9:88:fb:fb:1d:07:d4:0c:dd:4c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Jul 28 18:00:39 2026 GMT
            Not After : Jul 29 18:00:39 2026 GMT
        Subject: CN=b3a6515468ea25fd4d3f624acb9f26c582657b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:b0:c9:e1:a5:60:67:88:54:74:2a:42:09:
                    d0:d0:15:a2:49:f8:8e:26:c2:cd:d4:9a:cd:9e:32:
                    89:93:ba:c9:f7:6c:c3:0e:f3:37:99:27:ff:26:c7:
                    85:10:04:8d:77:08:bf:b9:54:30:27:00:bf:b4:15:
                    63:2d:7b:c7:44:69:78:aa:51:4d:ec:4d:1f:cd:67:
                    9e:28:a3:49:36:35:90:32:69:80:3c:5d:1b:45:16:
                    3b:32:79:ab:a4:01:03:f4:4e:0c:fe:de:b3:45:37:
                    c8:5a:db:e3:26:cb:52:22:b8:6f:a9:20:71:9d:f3:
                    20:6c:ba:26:25:af:7c:6e:08:ea:b1:74:5c:99:f8:
                    a5:c3:16:f5:28:b5:29:a2:81:29:84:a8:9d:1d:20:
                    ee:93:3e:74:b6:99:fb:4b:bf:27:cb:57:99:0a:32:
                    90:7d:ff:e0:8e:b3:da:cf:94:e0:b2:80:45:61:11:
                    30:5c:7b:89:d4:c1:b4:04:bb:ed:df:60:05:b7:1f:
                    e8:ec:d9:f2:b7:0d:9e:47:e4:ff:13:aa:48:4f:b9:
                    7b:c4:68:05:bf:a9:41:3e:c8:69:81:8e:62:ac:17:
                    74:80:8e:75:bd:8a:d5:5f:75:70:78:c2:81:25:90:
                    9b:26:fa:31:34:5d:60:37:df:9c:2e:6c:75:bf:bf:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:51:54:68:EA:25:FD:4D:3F:62:4A:CB:9F:26:C5:82:65:7B:14
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:06:c0:6a:fa:aa:a0:68:a7:30:fb:3c:71:de:27:6c:3f:aa:
         a5:40:ba:b3:39:49:16:2b:01:5b:71:f6:ad:b1:b1:2c:19:bb:
         1a:4e:f6:df:17:1a:89:75:8e:5e:84:9a:da:ff:04:dd:7d:23:
         e0:5e:4d:65:76:ab:89:f3:eb:29:0b:60:4a:75:70:f1:d0:24:
         69:c4:89:84:0f:7c:2a:64:7c:a1:6e:c4:b7:b2:6e:03:35:96:
         b6:11:ce:f2:f0:7d:27:b3:60:a5:ee:35:58:3d:28:14:0d:55:
         53:14:2c:1e:8e:3b:25:60:78:91:2b:47:06:31:a3:22:ea:38:
         c7:19:5d:95:6a:26:03:2a:f4:cb:38:c5:1f:05:73:86:cb:b2:
         de:fe:6e:b6:ef:ed:21:44:df:2f:33:83:7a:05:f6:0f:89:6a:
         4e:15:84:f6:86:42:d1:3d:c7:bf:e8:96:52:92:03:36:12:c9:
         66:aa:0a:79:18:6d:a5:7c:a9:a4:cb:18:f6:54:6f:30:7c:31:
         6a:eb:75:06:72:e5:9c:ad:20:8a:37:80:bd:86:bc:3a:d3:00:
         ad:bf:89:c3:55:ba:a2:b6:b1:5b:7e:ec:a1:09:8b:53:39:d7:
         fe:bf:5e:ef:53:8d:71:3e:96:56:44:98:29:25:cc:49:5e:3d:
         c6:d5:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:48 2026 by rpki-client