Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
File:                     rd0Ub21v9nQIRevKnN_kDHFViD0.mft (raw, json)
Hash identifier:          /x+/hO6lhql2aFpVlF1Mel4xfnTxpg3ySGvVv3uKlhM=
Subject key identifier:   A8:85:04:78:74:A2:C7:EE:58:B8:6D:8E:72:21:BA:C4:68:B4:43:E3
Authority key identifier: AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
Certificate issuer:       /CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Certificate serial:       019FA975740831867107265E62A04989E089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
Manifest number:          0106
Signing time:             Tue 28 Jul 2026 16:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:14 +0000
Files and hashes:         1: d8grn2wXk9vmfr4CPR5GIGOguek.asa (hash: GujxxEhlnqGN/956zXiB0ryPh7UxwhtfLKl2I7TE640=)
                          2: rd0Ub21v9nQIRevKnN_kDHFViD0.crl (hash: wYYMQ22CyHXDj/LvEEXUNZ3RIn8BQujFHDZaHRxYBxA=)
                          3: zzfUeVmLO32C_ObHNHjJVH4U69M.roa (hash: ZfmRsyH3zUInl36WXMdR2VHEdQrA8f5h8j3VKz/Y+TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:74:08:31:86:71:07:26:5e:62:a0:49:89:e0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
        Validity
            Not Before: Jul 28 16:01:14 2026 GMT
            Not After : Jul 29 16:01:14 2026 GMT
        Subject: CN=a885047874a2c7ee58b86d8e7221bac468b443e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:24:d4:fc:5c:8d:f4:05:be:e3:a5:3d:d5:
                    a0:02:40:37:a9:8a:4c:6d:2c:f4:91:b3:04:89:76:
                    81:cb:db:d5:d2:ae:1e:9c:8d:1f:ee:a8:af:f0:1c:
                    08:44:c6:c6:fa:dc:c2:d5:c7:d4:b6:9e:13:4e:e2:
                    3d:83:d7:67:e4:2a:7f:53:a6:07:56:f9:c0:2b:34:
                    3d:f4:41:15:9a:62:cf:e9:84:c8:c4:57:12:9c:a1:
                    32:07:13:0c:9b:7b:2c:1c:e8:55:eb:51:77:5a:68:
                    ff:3e:a0:1a:33:24:a8:41:cd:45:b4:97:90:e7:d9:
                    8c:5f:35:1f:75:90:1f:5c:95:59:7a:12:59:a4:fd:
                    d4:46:a0:4b:80:e0:08:16:a8:ff:47:ff:75:20:e7:
                    77:ea:c7:45:27:6c:41:f2:fb:fd:2b:9a:40:68:a8:
                    c0:2f:0c:69:cb:58:d5:b0:a5:23:61:44:ac:da:17:
                    83:98:17:48:7e:5f:0c:6d:41:79:c6:4e:66:0e:dd:
                    45:95:1d:68:da:2d:2d:2d:36:69:ff:76:72:81:dd:
                    e0:7c:b0:01:8f:a5:4a:c9:67:7c:1a:9a:6e:c3:c4:
                    41:2a:36:d6:95:04:31:90:3a:bc:82:30:ae:12:61:
                    3d:e6:76:02:8e:94:4d:2d:59:29:6c:cb:0f:6c:7b:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:04:78:74:A2:C7:EE:58:B8:6D:8E:72:21:BA:C4:68:B4:43:E3
            X509v3 Authority Key Identifier:
                keyid:AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:cd:49:92:4e:3f:a5:5d:fd:22:0c:ee:73:6d:82:ab:56:
         73:01:6e:55:89:cf:8c:97:10:7b:bc:aa:67:a3:4a:9f:53:c4:
         3d:79:fe:d9:49:84:42:46:62:2f:69:80:55:2f:90:8b:f0:c9:
         fb:42:70:cf:83:d4:8b:f6:8b:36:30:f2:d8:23:f2:d5:ac:97:
         84:bb:25:0e:73:14:c2:12:57:52:98:9a:58:e1:44:a9:3e:f5:
         e6:b8:59:e1:06:41:3b:b9:de:46:b8:3c:c2:bd:2a:d2:5c:4a:
         a1:00:f3:55:a6:3a:3f:57:0a:ca:7e:5b:26:15:7c:ed:67:af:
         3a:b8:e9:73:aa:c6:31:63:11:00:b6:1f:33:36:d6:dc:a2:af:
         03:d2:16:49:27:89:0c:a9:7a:f8:78:35:41:37:fd:b1:ea:a5:
         7a:5c:39:2f:ec:3b:e1:78:77:5e:4b:5a:4a:ef:1e:5f:85:15:
         58:59:31:88:e9:94:0c:e2:e9:60:85:72:f5:0b:3b:cc:13:4e:
         ec:5b:b1:33:74:dd:88:19:dc:f9:9c:44:f6:a3:4a:9b:1c:10:
         24:53:73:09:ac:77:3f:fd:05:9b:24:4a:32:d0:43:87:69:27:
         48:81:de:42:5a:d1:ef:58:85:58:ef:0e:9d:d2:13:45:21:54:
         9a:f2:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:24:05 2026 by rpki-client