Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File:                     9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier:          fPP5vO2XW0tPJdTdf1Dttjv+Kk7xeZAo5vIUzyp/V1Y=
Subject key identifier:   E6:B8:C2:A1:27:A4:20:2E:F9:52:E2:85:BB:48:02:4B:5C:87:D7:26
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer:       /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial:       01A0005C3E9E9C64661C134A794552A537E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number:          112D
Signing time:             Fri 14 Aug 2026 13:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:40 +0000
Files and hashes:         1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: RZFPwW+hIn0dDT5ZpBNPHQMaW+FYcsHv9FaZBFjCAbI=)
                          2: ylsyREe54U569Cbya5kHu3je-G4.asa (hash: 6/SDvz7I7Rk9Q9eges7LMoyhQg8zkiVuxvYbU53cDDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:3e:9e:9c:64:66:1c:13:4a:79:45:52:a5:37:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
        Validity
            Not Before: Aug 14 13:00:40 2026 GMT
            Not After : Aug 15 13:00:40 2026 GMT
        Subject: CN=e6b8c2a127a4202ef952e285bb48024b5c87d726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:7c:c1:a3:5d:c5:32:c1:29:24:0f:5d:21:
                    7b:47:3a:74:93:25:67:db:fd:36:20:50:a5:d4:6a:
                    85:e8:09:07:fd:67:27:6c:b2:d5:0d:18:9d:fd:53:
                    7d:ff:3c:c4:01:d2:8b:eb:af:94:27:f3:94:9b:18:
                    55:b7:9e:d0:12:04:81:dd:1f:8d:d2:4a:c3:2e:83:
                    7c:5a:c5:00:5b:d4:68:6f:d2:ab:94:31:b1:d1:ca:
                    98:43:87:30:ba:50:42:35:f0:b7:0e:94:f4:e2:31:
                    de:55:e6:3b:7e:b4:00:4a:4c:16:6a:a4:68:63:41:
                    20:b9:49:88:e7:17:fd:fd:12:d2:1a:05:8d:f6:11:
                    03:7e:ee:39:ab:db:a5:15:63:a5:f4:78:13:cd:3e:
                    42:eb:e2:02:b5:54:2c:99:f3:dd:0c:b7:a7:f3:ec:
                    31:76:e8:03:79:7b:3e:fc:0a:ce:5a:39:0e:20:4d:
                    57:67:f8:20:f1:51:c8:3b:a1:cd:4c:1c:b1:0f:e0:
                    79:90:c5:ec:9a:56:8d:c1:0b:e4:90:96:2a:13:22:
                    9e:f6:1c:87:4a:09:43:ec:13:e0:4a:17:eb:eb:40:
                    ec:fa:b5:5d:5a:6b:0f:01:bf:d1:f7:91:ca:6e:3c:
                    4e:c3:60:a7:b3:e1:48:5b:37:b5:0d:59:01:84:95:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B8:C2:A1:27:A4:20:2E:F9:52:E2:85:BB:48:02:4B:5C:87:D7:26
            X509v3 Authority Key Identifier:
                keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:75:56:f9:3a:7b:d3:2e:dc:7d:eb:1c:cb:80:2c:16:b4:24:
         68:45:d2:27:9c:3b:b7:43:79:9f:3c:3d:ba:de:6a:f5:6a:99:
         67:b6:a1:16:9a:0f:45:84:27:9f:0c:ac:1c:8d:5a:13:f8:d0:
         2e:58:f6:23:b3:15:72:e3:d2:2e:98:11:15:43:2b:15:72:d0:
         68:36:a4:d2:16:5d:60:ec:a2:b0:7c:be:70:88:86:ce:07:ae:
         06:84:58:14:e3:72:03:8e:a4:99:d1:c6:c4:0c:09:db:7f:70:
         82:32:cb:a3:53:28:3c:31:3c:44:3c:d7:51:01:9e:18:14:0a:
         11:76:2d:ed:c5:8d:24:e3:bc:54:d9:54:d9:2a:87:0e:ab:9a:
         3d:12:ee:67:13:81:c6:d0:15:ec:bc:92:0c:98:3b:2a:b0:52:
         60:c9:17:cd:3f:89:d7:11:32:fe:92:25:43:8f:77:e8:df:7a:
         05:bd:dc:1a:a2:12:10:aa:4c:5b:14:f1:fd:60:43:af:45:e0:
         76:10:24:90:52:c3:4e:a2:c2:25:dd:b3:33:12:aa:5f:49:93:
         3f:5a:b2:dc:f0:b3:d7:bf:c1:0b:ea:a9:ad:e6:24:91:28:86:
         d4:3b:1e:03:c2:9e:6b:8f:55:bc:fa:4f:38:25:7a:88:99:9a:
         7b:bb:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:43 2026 by rpki-client