Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File:                     0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier:          8F3vBOkM6D86QYl9g+6b+wIS+EEzFuEpdTbn4wBujQ8=
Subject key identifier:   F1:6F:64:89:4D:61:95:BC:AE:FD:E0:F2:90:DB:4D:7D:F7:56:E6:1F
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer:       /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial:       019FFE6DC08A3D084CB5E6D9E5501A5F100B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number:          072E
Signing time:             Fri 14 Aug 2026 04:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 04:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 04:00:33 +0000
Files and hashes:         1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: 2FW0xLFxz874gTsdOj2UOygSOrQb0DoYhyQv5YvRpH0=)
                          2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
                          3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:6d:c0:8a:3d:08:4c:b5:e6:d9:e5:50:1a:5f:10:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
        Validity
            Not Before: Aug 14 04:00:33 2026 GMT
            Not After : Aug 15 04:00:33 2026 GMT
        Subject: CN=f16f64894d6195bcaefde0f290db4d7df756e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:2d:a2:46:ee:45:77:3a:7f:45:6c:d5:13:
                    af:7a:3a:3e:84:ea:71:ab:68:74:bb:af:36:40:73:
                    80:9d:b1:51:5e:58:6a:c3:5c:f2:de:a7:c8:11:2a:
                    af:bf:f8:47:d0:9d:fc:05:8d:ed:00:eb:70:42:85:
                    40:9d:44:7d:fe:30:f4:9c:04:cb:ca:34:82:d4:50:
                    4b:2d:7e:0e:50:6b:86:d5:51:51:b6:89:db:78:7f:
                    c3:76:f0:fb:d2:2b:d1:6d:97:16:e6:1e:5d:39:4a:
                    1b:f8:28:9d:2c:70:6c:86:c0:3b:dc:0e:66:31:2c:
                    21:d5:c1:40:36:85:0a:4d:fd:c2:39:f5:f0:2a:e8:
                    54:94:8e:29:18:7c:b4:fd:27:54:4b:10:eb:b3:44:
                    90:be:45:a7:d1:aa:00:ec:14:ce:a3:43:42:58:9e:
                    af:ab:74:4d:73:a4:1d:2e:a7:71:85:e7:66:69:70:
                    4f:a2:e6:ab:6b:fe:57:ac:1d:09:73:81:e3:6c:55:
                    ef:60:62:df:47:6d:7e:35:b2:28:e0:3a:d0:e1:21:
                    26:98:f0:55:b9:b0:13:c1:59:9d:17:13:eb:09:19:
                    e2:4a:fb:84:81:cd:0b:eb:78:5b:59:ed:6b:34:20:
                    4a:64:8d:8c:c2:81:54:d4:da:77:a3:d3:63:e0:f4:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6F:64:89:4D:61:95:BC:AE:FD:E0:F2:90:DB:4D:7D:F7:56:E6:1F
            X509v3 Authority Key Identifier:
                keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:63:a1:19:05:c7:35:58:73:98:63:0a:17:de:66:52:8a:56:
         47:e3:30:9d:e1:0e:60:54:7f:e8:2f:4b:af:cc:ce:21:85:67:
         f9:e1:44:d9:28:3c:85:20:d5:9e:e7:b5:cd:03:7f:01:85:93:
         72:b3:c0:ed:11:e6:fe:f8:85:4c:f3:66:b2:46:79:35:e5:21:
         1e:9f:b3:74:7e:c2:13:fa:b7:e2:83:fb:20:7d:25:71:f4:8f:
         06:ad:52:2b:1a:a6:70:b3:01:14:b6:be:c3:31:41:7a:86:ea:
         8b:81:38:77:5f:a2:d3:cf:62:60:e8:97:33:b8:7f:e8:99:b4:
         d9:82:37:c7:e5:a9:94:34:61:7f:fe:6d:38:fa:54:ea:f0:3d:
         a4:0d:03:ff:82:cd:fc:c4:5d:e9:2a:ec:b4:0c:8f:9c:4f:b2:
         f1:bd:04:83:e4:2d:46:da:37:6f:24:3c:07:49:17:fd:b3:b6:
         e4:fe:83:78:f6:57:7b:5a:5d:4f:f8:08:9e:03:17:4d:95:a2:
         4d:f0:00:42:11:79:29:73:45:dd:61:77:8d:94:fd:a1:22:e8:
         0f:68:3a:37:76:fa:8c:e8:4c:6b:7f:3a:29:d0:29:c0:4a:78:
         d7:ff:41:97:42:e6:b2:60:d5:d8:20:bb:f6:b9:dc:ba:c9:b2:
         40:c3:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:12:56 2026 by rpki-client