Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          O4q0zE5Cgd7gKKk/Qq6GUqFoU2nSmFj9Cp14QWwVq3k=
Subject key identifier:   FE:DB:B7:D9:BB:03:CD:1F:6C:8C:B2:E1:8B:18:28:0D:55:5B:BB:F1
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       01A001DCAD101079E097814BFF7511146146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 20:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:34 +0000
Files and hashes:         1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: dDmc+M7wXr9btOooVA0AO7VlAuZ1sjd/77K2nlSuj4Q=)
                          2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:ad:10:10:79:e0:97:81:4b:ff:75:11:14:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: Aug 14 20:00:34 2026 GMT
            Not After : Aug 15 20:00:34 2026 GMT
        Subject: CN=fedbb7d9bb03cd1f6c8cb2e18b18280d555bbbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:fb:ba:de:b3:16:cd:56:67:eb:89:c6:55:
                    d7:3c:f0:cd:17:a8:3c:6b:d8:21:ac:67:0b:2a:b7:
                    ab:ee:cb:a6:a1:42:c7:56:76:dd:bd:90:c2:70:1f:
                    d4:43:c0:3d:13:4d:a7:81:82:89:26:c2:11:8b:7b:
                    27:20:b2:74:e0:c4:03:29:b5:20:7b:da:a5:c9:51:
                    17:29:7c:95:d6:c9:d7:01:ce:d9:fe:91:00:f7:33:
                    e4:f2:6d:9c:73:20:f2:b5:47:bc:ec:55:c6:95:37:
                    f3:5e:be:0a:91:59:93:80:ef:31:b9:58:f0:a4:8a:
                    9f:80:d4:c4:4c:8f:42:ef:57:79:aa:f6:7b:e9:08:
                    d8:60:62:99:7c:3a:f6:1b:96:69:9a:68:6b:43:96:
                    30:ba:54:ed:39:12:1b:ee:49:5f:1e:f1:49:4e:3e:
                    f1:e2:99:72:f0:c8:e3:df:a6:0c:98:b3:a6:a5:81:
                    f2:84:45:26:4e:a9:f6:1c:01:62:3d:2e:e6:3f:fc:
                    d2:79:d3:0f:ec:9b:4d:1c:bd:08:1e:e2:99:4c:18:
                    5e:01:f1:12:7c:7d:19:bd:4b:15:8a:0f:c2:8d:a3:
                    42:06:b4:66:28:73:8c:1e:7f:4b:85:af:0b:df:66:
                    6e:42:8b:75:26:22:b8:1e:9b:ba:28:da:58:9c:66:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:B7:D9:BB:03:CD:1F:6C:8C:B2:E1:8B:18:28:0D:55:5B:BB:F1
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b4:ff:c4:88:0a:15:b8:bb:0e:b7:9a:a0:ea:bd:a7:98:5d:
         ad:7f:d5:06:94:7a:2e:52:ca:69:b3:3b:6d:22:27:d3:1d:f0:
         28:7e:4c:5e:1b:70:38:56:a6:d7:0e:9b:1d:62:b4:f3:f4:a2:
         be:51:c5:a8:c2:9f:ba:a7:0f:a0:1c:2b:d8:d9:aa:91:0e:87:
         e6:6f:8d:43:85:b1:fd:f8:46:d7:f4:e6:33:86:74:29:a6:57:
         52:9f:3a:03:9b:e6:99:36:e2:f1:32:6b:39:f0:1e:b6:58:7d:
         71:47:aa:b2:5c:6a:bc:08:21:5c:6a:66:91:10:1d:3e:ee:70:
         c5:9f:80:a8:0e:06:0a:c8:ac:c6:87:55:4b:ec:3d:9e:06:a0:
         1f:89:8b:76:60:8d:81:47:51:a5:06:34:6a:22:02:0c:fb:e0:
         94:23:e7:09:c8:42:45:95:27:e3:ad:47:71:18:4c:53:15:88:
         65:2e:a7:f0:5e:e2:ca:64:d7:fd:72:a3:95:3e:95:d2:22:3a:
         11:cb:12:ba:95:6e:c1:8b:5f:f3:d6:47:5f:70:e9:47:29:b8:
         af:e2:79:b8:e4:31:11:3a:86:a0:e7:b7:d4:0f:60:62:ea:cc:
         ab:a8:ea:16:2c:40:2b:b7:06:57:76:be:03:4a:7a:13:48:2f:
         73:6d:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:59 2026 by rpki-client