Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          1z9MtwvsnwD2g4X8WukGeq3/ly0xfSyqnBbSCA4pyiQ=
Subject key identifier:   BF:B5:CF:DF:E3:3B:3B:32:02:95:1D:82:99:F2:EA:FE:FD:59:36:DA
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       01A002EF704599FF1EAC739C048FE57EB50A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1A01
Signing time:             Sat 15 Aug 2026 01:00:41 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:41 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:41 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: hqWZVstqIgSTxmVLTe5Y6M36LblPd1r5DjVG8cu3rbI=)
                          2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:70:45:99:ff:1e:ac:73:9c:04:8f:e5:7e:b5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Aug 15 01:00:41 2026 GMT
            Not After : Aug 16 01:00:41 2026 GMT
        Subject: CN=bfb5cfdfe33b3b3202951d8299f2eafefd5936da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:59:01:50:5e:5f:05:61:d8:c4:6f:69:16:
                    d3:ce:b7:96:21:72:80:84:21:28:4b:1b:b4:ef:df:
                    9d:8d:00:d4:69:5b:37:f0:97:0b:7f:1a:c7:49:e2:
                    11:e0:30:1a:a3:a3:fc:65:c5:8c:72:d9:ac:2f:a7:
                    d6:9e:d7:5c:3a:d8:72:0f:24:aa:e1:7d:49:c7:ad:
                    a5:ff:63:23:44:9c:21:f1:7c:77:17:6c:35:5a:b9:
                    e0:e1:d8:a8:dd:e1:18:14:18:18:9d:90:1e:6c:d7:
                    20:2b:b8:3e:1f:9d:94:92:1d:ab:92:68:63:bf:ad:
                    f1:60:30:ef:51:c4:93:41:09:06:66:66:70:09:51:
                    7b:19:b5:94:91:42:43:9a:c1:f7:ea:6f:84:32:cd:
                    3b:2a:39:3d:f6:fd:21:5c:65:df:52:9d:04:b5:ab:
                    f2:e9:77:1a:18:56:8a:b8:7f:a2:fe:ed:a1:37:06:
                    cc:ad:56:4e:75:2d:66:b6:6d:00:75:ae:80:bb:8e:
                    11:98:e0:16:64:8b:f8:d3:0d:df:7f:a8:4a:f1:c3:
                    a0:54:d9:7e:96:6e:70:c4:30:fc:3c:25:1f:15:fc:
                    c6:62:b5:14:9a:71:b6:7e:85:91:7c:89:e2:b0:2b:
                    38:be:4f:fc:25:aa:a1:95:6f:85:16:b8:90:20:97:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B5:CF:DF:E3:3B:3B:32:02:95:1D:82:99:F2:EA:FE:FD:59:36:DA
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:40:4e:0b:53:5f:94:fa:f9:a7:75:dc:f3:6f:aa:1e:86:e4:
         7f:6d:f2:0a:a6:46:de:8a:db:d7:d1:29:da:6f:dc:d0:66:4a:
         f8:0f:fd:b9:63:d4:95:32:3e:28:4c:bd:6b:c0:07:8a:2c:6a:
         60:ca:f9:ff:52:9d:64:5a:1a:d2:63:56:33:a3:a6:29:31:99:
         64:98:10:d3:3d:90:49:ad:f6:af:24:ec:4d:b3:46:47:f4:21:
         7c:ec:23:4e:bf:ee:90:38:7e:0f:1d:af:96:a9:85:f0:7b:7c:
         8f:5b:27:a9:c4:87:28:01:86:ce:20:ed:f2:b9:43:9a:23:55:
         37:6f:9e:6b:0e:ec:f7:6c:ac:9a:a6:5c:84:c2:d5:5e:6a:8d:
         94:02:24:8e:06:1e:2a:2a:17:2e:ae:78:f9:d0:16:d9:41:b6:
         c2:8e:b5:b2:a9:ab:02:93:4d:70:3c:6c:aa:09:bc:43:c3:c6:
         3a:25:cc:f1:0f:ce:6f:a6:44:72:b1:80:26:e8:6f:5e:8b:b3:
         77:33:70:7e:23:43:20:3d:d6:13:79:90:07:d6:d6:b9:8f:fc:
         92:97:97:2b:f7:77:e5:82:2e:74:86:d8:a7:d4:d4:dc:7d:2b:
         84:d5:b4:73:9d:c1:5e:6e:47:8e:7f:c8:c6:dc:a7:81:d9:62:
         a6:1b:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:46 2026 by rpki-client