Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File:                     CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier:          K556EzkltCXCvv6eR4vzc1nTJfvsn5tpRg1Sgulp1jc=
Subject key identifier:   0C:78:3E:DB:C5:09:8E:90:6A:66:26:E4:68:01:35:48:FD:18:72:15
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer:       /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial:       01A001A65D7FED9470F1D930F30C2CA5D6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number:          078A
Signing time:             Fri 14 Aug 2026 19:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:15 +0000
Files and hashes:         1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: njBqLfP/vSW9ahYJeULGjKFT0+zsZkRhFdRDBAteR5k=)
                          2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:5d:7f:ed:94:70:f1:d9:30:f3:0c:2c:a5:d6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
        Validity
            Not Before: Aug 14 19:01:15 2026 GMT
            Not After : Aug 15 19:01:15 2026 GMT
        Subject: CN=0c783edbc5098e906a6626e468013548fd187215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:cf:a9:75:64:a0:14:9a:31:98:86:99:a2:
                    54:e4:96:bd:f5:de:98:1d:17:25:fa:60:ad:2a:24:
                    3b:af:bc:16:8a:80:bc:ae:fa:c1:9a:54:26:76:6f:
                    cd:40:48:50:a8:9e:6f:a8:9a:cd:4e:74:75:a6:0a:
                    56:0e:5f:aa:03:0a:6b:f0:0b:43:f1:38:66:ce:38:
                    df:cd:f0:36:c5:88:50:e1:32:6e:ed:4c:cc:8d:b7:
                    fb:9a:8e:dd:1e:4b:0a:78:8a:88:ca:1a:13:22:32:
                    cc:90:99:fe:67:e5:56:98:ed:6d:39:1e:88:06:bb:
                    f1:1d:ea:3d:4e:55:e8:21:fc:5f:59:67:0b:c4:86:
                    4b:7c:b8:a1:8e:5d:2e:df:ff:32:ee:ff:96:d1:f4:
                    29:7c:06:f7:17:2a:2b:16:3b:58:19:3a:35:b9:da:
                    85:0d:fa:be:a7:f2:5c:95:55:45:f2:ff:37:1d:3f:
                    20:ab:c9:25:ae:18:f0:ff:36:3d:d5:56:51:7b:c9:
                    0b:62:49:7e:2c:b4:cb:2b:db:2f:13:21:e8:32:4b:
                    72:b5:05:81:8d:bd:63:26:53:11:f7:8d:f5:71:78:
                    2b:ea:90:39:30:88:fb:f0:61:fb:7c:d4:0b:b4:eb:
                    85:04:9b:1e:c0:f8:d3:50:1a:e0:9b:c6:19:f6:5a:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:78:3E:DB:C5:09:8E:90:6A:66:26:E4:68:01:35:48:FD:18:72:15
            X509v3 Authority Key Identifier:
                keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4a:9a:d1:bf:44:98:94:a2:b2:b6:7f:ad:13:0e:ac:44:02:
         42:d6:5d:dd:f3:ab:92:cd:e2:e6:1d:08:e8:a1:67:41:a8:75:
         f7:16:c7:c2:8b:8d:71:ac:38:a4:e1:f0:5c:e2:62:ae:27:ed:
         4a:90:42:64:41:f2:b6:79:33:b8:0f:62:88:ac:77:8e:41:45:
         9c:b5:06:0a:d2:4d:a7:9e:40:97:52:98:1a:c4:ff:75:aa:a3:
         f4:1d:17:1a:56:a9:a6:ae:c3:bb:29:90:a3:a1:b0:11:14:a5:
         f8:75:21:a2:5c:15:de:7e:ba:bf:dd:f3:33:c2:85:46:4c:ab:
         6e:c2:d1:1e:21:1f:d2:ef:c9:fd:ba:a5:43:e3:3c:40:59:8b:
         bf:e2:57:c4:3b:86:38:50:2b:2a:db:a0:89:96:f8:22:2b:cf:
         fd:de:7e:fc:77:39:44:c3:87:cb:b3:a0:57:7b:52:86:e5:18:
         e1:51:46:14:ef:d4:56:6a:b3:ca:74:33:12:04:0a:c0:a7:28:
         17:0a:e5:b7:99:c8:50:40:fd:72:1e:45:5f:bd:d7:5b:04:25:
         3f:a4:10:00:6a:be:7a:e4:86:06:d4:65:7c:be:89:63:4a:14:
         95:55:b1:ba:e8:5c:ab:23:85:a8:bd:63:34:1b:ee:96:d7:cc:
         5c:9f:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:42 2026 by rpki-client