Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          e72uyfxJnW60CxzPD9kJjJVfPGyM8QRqfVtd8DLc15k=
Subject key identifier:   45:D9:88:0A:EB:45:C3:52:3F:F0:59:DE:14:0D:53:35:36:D3:D6:0F
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       01A001DD9C1304F4C8A2B53F45268D766556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          1995
Signing time:             Fri 14 Aug 2026 20:01:35 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:35 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:35 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: 1IhYUwdRCqv2ylw4aTM0F1ov2KfQbgTBt8vbusjAZPY=)
                          2: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (hash: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:9c:13:04:f4:c8:a2:b5:3f:45:26:8d:76:65:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Aug 14 20:01:35 2026 GMT
            Not After : Aug 15 20:01:35 2026 GMT
        Subject: CN=45d9880aeb45c3523ff059de140d533536d3d60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:37:52:4b:82:0f:b2:2a:26:75:8b:0f:f8:
                    5c:76:e6:eb:bb:32:e9:0f:81:e3:e4:10:b7:04:d3:
                    83:bd:b7:62:1a:0f:42:4a:4a:62:7e:8d:ed:2f:81:
                    9e:b3:b0:68:cc:13:ba:5c:00:25:28:83:c1:66:a9:
                    6e:c0:10:6a:7d:b8:74:cd:e3:99:f8:88:84:20:79:
                    19:86:4f:bd:3c:8e:9f:d9:1a:70:21:38:8b:82:67:
                    b2:32:a6:f6:ef:e8:a7:43:c2:81:6d:85:1b:c5:73:
                    14:4c:6a:e5:7d:7b:9a:25:08:c3:24:7e:88:76:0d:
                    45:a9:96:37:15:e0:3e:ce:af:82:b7:e2:d4:91:57:
                    57:12:9f:22:b2:b4:96:17:b8:9b:24:01:34:14:42:
                    f9:6f:f5:7a:e7:c2:6d:73:19:55:46:c4:55:a9:87:
                    80:88:5c:57:1d:4f:98:65:4f:f6:b6:5c:9f:07:20:
                    b4:14:e1:fe:fb:41:dc:c2:ea:c6:c4:21:76:9b:22:
                    c8:b7:c1:0e:39:61:27:e9:76:d2:b3:40:27:6d:23:
                    6a:84:ac:e9:52:00:c6:3a:6d:2e:39:1b:17:95:2a:
                    dc:45:30:9e:4b:6d:27:6b:2b:b1:ce:ac:05:0a:57:
                    2b:d1:cb:bb:37:db:22:6a:c6:20:05:ca:50:aa:a1:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D9:88:0A:EB:45:C3:52:3F:F0:59:DE:14:0D:53:35:36:D3:D6:0F
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5b:72:94:77:9b:1b:35:2a:03:00:a2:7e:dc:21:eb:ed:ad:
         0c:da:2a:60:6f:4b:63:4a:0e:98:a0:df:63:c7:c5:cc:c6:90:
         ab:81:17:53:75:1e:e0:ae:a4:1b:74:76:ee:fb:f4:f5:ea:8c:
         ee:f9:c4:28:05:f7:20:16:50:34:b9:a0:69:59:83:15:4b:80:
         e4:02:fb:6c:af:5f:ff:8b:fe:69:86:53:e7:f1:5a:aa:e9:2d:
         c2:f8:31:cc:e5:df:0b:c4:f6:55:8f:ca:f8:d5:61:bd:a0:94:
         65:2f:12:a8:1e:2e:2a:99:92:b6:7d:4c:bf:e5:ff:bb:54:dd:
         70:fe:f9:ce:41:3b:3d:da:02:75:85:77:06:3e:47:8a:ff:73:
         65:b8:29:88:e3:0f:c6:c9:4d:a3:73:27:16:45:19:20:a1:8e:
         43:22:cb:17:d7:f2:88:b3:ce:bb:48:d7:2f:a2:c8:d0:5f:ae:
         ee:f8:ef:18:46:2d:37:cf:fa:1b:df:67:6e:cb:8f:d3:42:8e:
         59:82:d3:b9:d2:59:39:77:3d:33:d8:b3:c0:40:1a:53:b1:cf:
         13:f7:05:6d:2e:dd:85:05:97:8c:71:ee:81:96:a4:74:ec:c5:
         1d:dc:59:68:90:97:0c:0f:13:5e:93:9d:35:da:af:82:e6:84:
         65:4a:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:39 2026 by rpki-client