Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File:                     Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier:          bMnmQv+/MwRwD2B4XYgoLB8KAjf/GI0G+LGG6AikTHA=
Subject key identifier:   35:AE:FF:D2:E0:8C:B7:2A:74:8A:96:C1:79:E6:E2:B8:4D:86:D8:CC
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       01A001A61F07A78FEF7E0F27726048BBE819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number:          0B31
Signing time:             Fri 14 Aug 2026 19:00:59 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:59 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:59 +0000
Files and hashes:         1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: v/jmywM11SlIRGKtsPwlgW/6elPeLMqjwv6ZESppGYA=)
                          2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:1f:07:a7:8f:ef:7e:0f:27:72:60:48:bb:e8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: Aug 14 19:00:59 2026 GMT
            Not After : Aug 15 19:00:59 2026 GMT
        Subject: CN=35aeffd2e08cb72a748a96c179e6e2b84d86d8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:c1:00:da:c8:c9:8e:fe:ad:d9:1f:0b:2a:
                    2d:15:bf:92:ca:72:36:3c:58:1b:9a:ad:2a:ca:29:
                    92:38:27:a2:28:57:a0:54:64:3a:d9:5a:8f:68:93:
                    fd:25:51:3f:ae:83:fa:4d:bb:51:70:25:f7:eb:19:
                    da:aa:46:d0:fb:1b:78:1f:5b:1f:1f:1c:62:e8:5b:
                    e4:7d:70:a7:93:64:82:d2:86:d8:35:ad:a5:42:1a:
                    1a:cd:33:12:e9:a4:eb:4c:bc:4e:fb:fa:2b:34:01:
                    63:d4:b3:45:c3:2b:d7:61:60:8e:b4:aa:84:0b:0d:
                    f9:fe:3c:aa:3d:c0:a0:26:12:a4:6c:26:2d:87:8c:
                    16:3b:44:ae:9e:03:8a:0b:24:d8:f2:62:af:d5:29:
                    de:de:e6:1c:64:bc:0f:92:2b:82:88:dd:f6:1b:95:
                    22:3a:89:c1:e3:32:1f:dc:d5:80:6f:3e:5e:16:65:
                    0d:98:cf:97:82:89:90:73:98:dc:a4:ae:31:11:7c:
                    52:19:1c:fd:7c:cb:9b:75:03:3b:5a:48:91:20:74:
                    66:a1:a0:6b:08:bb:af:0f:9c:55:7f:2f:19:78:fd:
                    8a:d6:05:b7:06:37:04:75:76:b8:9e:66:e8:0b:29:
                    da:4c:cf:5c:7f:77:fb:a7:25:ee:5e:f8:97:b6:39:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AE:FF:D2:E0:8C:B7:2A:74:8A:96:C1:79:E6:E2:B8:4D:86:D8:CC
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:62:a8:a2:b4:f8:9a:d0:41:b0:9e:7a:d0:07:37:33:ee:
         93:a7:7d:37:ec:5a:99:b3:dd:c9:a5:c7:11:99:76:fa:52:ae:
         73:b1:d9:cd:ed:c3:6b:32:f7:c6:1c:95:8e:fa:89:b2:1a:d0:
         dc:72:bf:1d:5d:ab:ac:24:d7:68:28:3e:4c:2e:3e:87:a2:71:
         00:19:fc:f4:5d:3a:8d:8e:80:61:32:0d:21:40:86:15:24:3d:
         f6:2c:f0:7b:79:1e:18:81:b1:46:ad:6f:0a:93:f3:8f:9a:0c:
         79:07:16:a7:01:3f:ba:5c:7b:fb:83:22:7c:ce:99:85:3d:6b:
         c6:d3:1c:36:f5:5b:85:ac:0d:13:91:cf:de:01:28:45:1f:3a:
         f0:2f:41:fd:2f:69:48:71:15:c7:bb:8b:f6:5d:cd:ea:00:87:
         43:2a:4d:36:62:d8:ba:79:a9:f1:9d:74:aa:29:00:05:f9:b9:
         3d:64:05:b8:a6:7e:5f:9d:86:3d:33:cd:3e:b2:74:cd:5a:d3:
         ef:1c:57:2d:6c:fa:17:c0:19:7c:5b:a5:70:95:bf:bc:ee:5d:
         fb:d5:83:11:d3:ad:29:c9:34:17:9e:7d:a1:c3:60:59:5c:bb:
         5e:b0:42:2c:ba:72:e5:8d:3b:bd:d0:3b:c0:35:71:97:4e:db:
         a3:3e:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:07 2026 by rpki-client