Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File:                     sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier:          XXLV1Y6IgV8Vx/+dfF9TU3ZM8WwCxS7c5PfjTntITAc=
Subject key identifier:   69:2E:38:20:78:F9:43:ED:BC:19:49:67:E8:12:1A:AE:7D:21:43:04
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer:       /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial:       019FFDC95A74F7B3CC93F8046AF91065BB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number:          184C
Signing time:             Fri 14 Aug 2026 01:00:59 +0000
Manifest this update:     Fri 14 Aug 2026 01:00:59 +0000
Manifest next update:     Sat 15 Aug 2026 01:00:59 +0000
Files and hashes:         1: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (hash: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE=)
                          2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: hiV7IsxrS1uYEM8IC2jUd07iRClsHg6SALvJGBmujvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:c9:5a:74:f7:b3:cc:93:f8:04:6a:f9:10:65:bb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
        Validity
            Not Before: Aug 14 01:00:59 2026 GMT
            Not After : Aug 15 01:00:59 2026 GMT
        Subject: CN=692e382078f943edbc194967e8121aae7d214304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:48:25:3c:65:51:e5:1c:8e:ce:6d:8e:ee:
                    47:7a:ee:24:1f:38:7c:6b:73:a7:a2:da:ad:fd:2e:
                    e0:13:49:9b:f8:35:af:07:cb:c1:cb:c3:b9:5a:3d:
                    71:a4:36:9e:f1:a4:0f:b3:2e:0f:e7:1e:c4:1e:c9:
                    67:4f:0f:2c:93:ad:b9:14:80:8f:8a:fa:81:1e:d2:
                    77:81:66:c7:32:59:d4:df:b1:ca:3e:0a:59:bb:36:
                    7d:1a:46:56:a6:18:58:f7:bf:bd:57:24:51:79:62:
                    af:e5:9c:00:d4:62:d6:76:e1:fa:6b:0f:f3:87:5f:
                    af:4a:eb:3f:d4:d7:20:3b:9a:59:38:6c:6f:1f:d4:
                    f9:b1:8a:73:50:a7:64:04:90:f2:99:1d:e8:bf:c4:
                    03:8f:c1:7b:8a:fb:4d:29:48:99:64:92:0e:16:3d:
                    66:0e:44:a2:3d:89:64:d1:46:d1:19:31:75:93:cf:
                    41:44:c0:54:e0:2d:b1:88:a3:57:35:dc:9d:61:97:
                    21:e2:98:b8:06:78:20:6e:2f:42:c1:06:d2:15:17:
                    aa:8e:74:14:3c:e2:e5:51:ce:5b:5c:59:29:8c:58:
                    28:f8:c8:3f:d8:0c:96:de:bd:05:32:f6:0e:6c:03:
                    75:d5:72:f2:f5:7e:1f:7d:ae:e1:e3:e6:df:29:c0:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2E:38:20:78:F9:43:ED:BC:19:49:67:E8:12:1A:AE:7D:21:43:04
            X509v3 Authority Key Identifier:
                keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:10:c0:9b:62:32:14:48:fd:4d:0b:40:21:67:51:ad:9d:f8:
         3e:e6:78:b0:9f:82:c8:0d:06:2c:9c:f9:1a:4b:bd:e9:6d:12:
         f7:08:34:a5:1e:c6:fc:9b:55:50:37:0d:28:0a:f6:78:fb:09:
         97:c6:7e:d3:5b:8f:f4:9e:3b:63:cc:aa:1b:c2:a8:42:42:a4:
         2e:b6:48:72:55:56:10:e2:0a:45:4b:07:3b:2d:12:06:0c:4d:
         3b:67:49:a3:d8:92:55:28:4f:04:b0:b7:97:50:d5:9c:86:2f:
         6c:2b:3c:1a:17:5b:3a:8d:11:d5:54:59:2d:61:ff:5c:00:4c:
         a3:c6:fa:4d:61:b5:46:83:f8:f1:9d:61:9d:34:ec:5f:04:02:
         02:40:c7:75:30:b7:82:26:4c:b4:3d:42:83:35:93:ec:e8:ca:
         63:6a:30:00:62:06:68:4b:5b:ae:ba:03:73:b7:74:ac:00:b8:
         d1:e4:33:0e:23:c7:62:d5:f7:66:57:83:91:a7:54:a3:04:27:
         6a:e5:9d:bb:62:32:45:10:ae:cf:13:61:eb:d1:a4:5c:14:f3:
         96:67:46:a2:68:62:5a:81:a5:e8:7f:92:0d:31:18:b2:6c:df:
         6e:06:38:54:59:48:26:99:79:14:95:28:55:48:ce:92:29:a5:
         f9:f2:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:17:05 2026 by rpki-client