Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          x30NeYaZp7RhqqPIdoJzI7hWeAGPuW0b4HTuiVRKZ78=
Subject key identifier:   E8:84:0A:37:7A:23:DB:51:BB:83:BC:C6:F0:98:78:72:D4:7D:62:E9
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       019FCB9386C31715DB0F60ADE5CD4FADB47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          0D40
Signing time:             Tue 04 Aug 2026 07:01:10 +0000
Manifest this update:     Tue 04 Aug 2026 07:01:10 +0000
Manifest next update:     Wed 05 Aug 2026 07:01:10 +0000
Files and hashes:         1: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (hash: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=)
                          2: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: WtiP8RZceXUcB7U3R6PaUGpGQ15JjexUaRYjGYS0IEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:93:86:c3:17:15:db:0f:60:ad:e5:cd:4f:ad:b4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: Aug  4 07:01:10 2026 GMT
            Not After : Aug  5 07:01:10 2026 GMT
        Subject: CN=e8840a377a23db51bb83bcc6f0987872d47d62e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:59:0c:0a:67:4a:24:a6:f6:7d:48:2e:36:
                    e5:85:e3:d3:ea:20:f8:dd:b3:9a:6e:ee:49:dd:7c:
                    cb:65:c8:2a:17:29:27:2f:f2:c5:c4:d1:34:f0:18:
                    f7:3c:f9:55:bc:43:cc:c8:85:5e:cd:12:2d:3f:fa:
                    df:90:13:ee:e9:f0:29:21:48:a9:83:6c:5a:ea:42:
                    e9:a8:28:81:25:d2:37:d5:5d:74:81:bb:83:73:dd:
                    32:7b:32:92:d2:26:71:c5:dd:33:2f:35:a9:3f:b6:
                    aa:b1:ff:26:fa:42:06:be:9a:d1:f2:85:04:eb:19:
                    f7:4a:7d:33:e0:84:b4:77:f8:03:ee:b3:d6:60:52:
                    62:68:47:84:ae:cf:a8:b3:6a:07:62:ea:2f:f7:23:
                    8b:28:da:52:65:ce:c9:99:d6:d6:a6:e0:07:eb:9c:
                    e1:be:1b:1a:70:8f:34:2c:13:aa:21:61:cb:81:b9:
                    b1:f6:88:34:44:db:f2:ea:c6:44:c2:f8:21:77:a9:
                    5e:50:d6:90:76:18:31:23:b7:ab:a4:98:69:b3:34:
                    5f:35:a3:ba:31:05:13:d4:1a:7b:87:f5:8d:db:0d:
                    b7:25:08:18:e2:5b:00:93:ab:2b:ab:2a:ef:c0:ba:
                    91:16:51:0c:75:46:ff:f5:02:0f:d7:27:10:70:b7:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:0A:37:7A:23:DB:51:BB:83:BC:C6:F0:98:78:72:D4:7D:62:E9
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:65:a1:78:9b:8f:e0:d6:a7:36:b7:73:79:f8:13:e0:6c:
         00:4e:17:a7:fa:12:21:c5:58:a9:d4:70:87:ab:11:33:76:27:
         52:57:2d:f3:12:77:2e:f6:38:8e:58:76:35:40:9d:8c:06:93:
         4b:1f:4f:4f:26:b1:4a:bd:96:34:25:d5:07:f2:3c:80:fd:a8:
         69:ca:49:99:b8:ec:57:90:ed:50:7a:8d:d2:05:69:7a:34:b3:
         1b:f7:3e:7f:4a:79:04:71:d0:9e:49:81:01:58:e8:90:6a:a4:
         ad:4b:36:b3:9f:ee:60:c6:06:8d:b2:e9:51:d1:7d:69:90:cc:
         aa:f1:7b:12:eb:3c:77:d3:82:d7:fa:99:2f:66:40:03:e0:11:
         ef:1b:c8:a4:9a:e3:4d:90:d6:f4:7c:b5:22:9c:56:87:a7:68:
         86:ef:59:35:f6:81:5b:98:45:51:78:a4:fe:42:22:4d:03:d6:
         fb:0c:cc:f4:49:55:f6:3e:07:13:95:90:7b:8f:6d:be:fb:d3:
         7a:68:a3:dd:9c:f8:39:02:df:c6:7d:71:98:7b:f6:c9:88:a7:
         51:d0:fb:bc:1c:aa:52:0f:86:55:79:39:bf:32:af:ba:54:bd:
         7c:de:ad:91:56:e2:9a:f5:34:2d:5d:4a:f0:b5:83:35:d2:ad:
         19:5d:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:56:58 2026 by rpki-client