Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File:                     cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier:          FzCVhUIgVT9L1PlmBQyOAMfOJDU73lhsMN7HEU5zaVU=
Subject key identifier:   11:C7:A1:5D:9D:4B:6F:84:8D:D8:18:7E:BD:56:5C:09:71:7F:EB:E9
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       019FF8DA1D0C6E14459FE907BFAC73ED90E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number:          0264
Signing time:             Thu 13 Aug 2026 02:01:11 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:11 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:11 +0000
Files and hashes:         1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: vbCVKOlaU6ZdMMthaXx7kxyNYlkdPZPJQV3xYtkx2Os=)
                          2: cwaVlyUcrRob1yQGfrzbyd4SXY8.asa (hash: hxp7g2uf5EIcMdBETFCVoZR6vdDL2LqgNsCC4ZPPusU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:1d:0c:6e:14:45:9f:e9:07:bf:ac:73:ed:90:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Aug 13 02:01:11 2026 GMT
            Not After : Aug 14 02:01:11 2026 GMT
        Subject: CN=11c7a15d9d4b6f848dd8187ebd565c09717febe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:3b:e4:de:d7:77:bb:10:c0:7d:c2:bb:57:
                    1f:16:11:8e:aa:24:8b:50:c0:d9:dc:87:9b:22:d9:
                    3c:91:95:6e:09:b8:88:49:02:6e:a3:f0:1f:86:07:
                    7e:71:8a:f0:c9:dc:09:fd:72:8f:fa:92:9e:ba:57:
                    cb:37:1a:78:46:d9:22:8a:7f:e2:a4:ec:c3:b1:74:
                    71:8b:99:f1:9d:5f:93:48:85:33:22:90:45:a7:28:
                    d4:96:89:47:ed:68:c1:1c:3a:43:ee:92:64:1a:25:
                    1a:9a:88:48:a7:22:34:23:29:f9:be:cf:32:50:6d:
                    07:85:dd:62:1c:86:5f:64:69:94:b5:83:9e:3e:53:
                    be:14:50:25:c7:c5:b9:f1:f0:b0:b4:1b:52:74:23:
                    e8:37:69:42:5f:56:26:cf:03:17:f3:ba:06:6b:c4:
                    ac:c8:83:59:ff:51:50:d7:96:ef:d0:db:28:d0:8f:
                    3d:b0:9c:05:0c:38:77:79:07:33:30:3e:68:b2:3e:
                    05:89:69:e2:7b:ff:1b:32:ee:04:59:d1:c7:46:a7:
                    56:26:92:58:6f:32:47:da:16:3c:ea:60:5c:92:57:
                    b8:6f:b9:9c:2f:ce:c3:8f:73:a4:5b:f1:17:dd:53:
                    2a:ca:dc:a0:6f:12:d2:b0:68:50:28:3e:20:e9:ac:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C7:A1:5D:9D:4B:6F:84:8D:D8:18:7E:BD:56:5C:09:71:7F:EB:E9
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2e:b1:09:e2:55:b1:f4:d0:f3:8c:86:f5:09:0c:f4:fd:39:
         bd:79:f3:c8:29:dc:1d:71:b7:31:e1:d5:10:27:fe:0e:cd:23:
         a5:74:38:77:0b:ad:fd:aa:f0:d2:24:9e:6d:f5:83:3c:77:55:
         fc:bd:b2:d3:18:87:4d:91:69:2c:2b:6c:76:73:4f:1c:32:ac:
         50:9c:cb:ee:03:e0:12:1d:cd:1d:25:37:23:40:ec:f4:32:b2:
         e2:40:28:d7:0b:aa:03:3d:7c:85:9f:fc:79:9e:82:a1:28:18:
         9c:3c:64:70:26:44:1c:30:f1:79:58:6e:12:c2:75:99:c4:83:
         d4:e9:5f:aa:d8:58:47:4d:35:9a:a0:6f:17:e7:e8:f0:2d:ce:
         81:43:cd:65:73:c3:03:af:a5:e7:25:a2:4b:25:e0:db:9b:43:
         a5:c0:00:9c:35:6f:2c:89:8a:b0:12:45:1b:dd:a4:38:4f:8b:
         13:59:28:37:9f:d1:35:cb:5d:37:ed:84:fa:b2:3f:ce:64:92:
         81:d6:b5:bc:a8:ef:3f:83:5f:a2:ce:0c:6d:18:72:72:c2:a0:
         29:6b:6c:44:5c:9f:c0:32:1a:44:fa:8b:47:22:aa:0b:8f:ce:
         ac:93:c2:af:88:15:3f:76:e7:0a:b9:76:9f:d9:9b:08:e3:43:
         29:e4:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:12 2026 by rpki-client