Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
File:                     A8rxExkhh6RIXy4twOzIt2ZCSU8.mft (raw, json)
Hash identifier:          MMHcGYDLrz72+AOl3VetgZiEropG2yC31GL79HQuLtQ=
Subject key identifier:   B1:78:47:B9:D7:A0:B9:2B:75:FE:A6:DA:67:33:BE:46:38:08:DF:35
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Certificate issuer:       /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial:       019FF5A27895AC249CAD89A5269B68F8147B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
Manifest number:          74
Signing time:             Wed 12 Aug 2026 11:01:33 +0000
Manifest this update:     Wed 12 Aug 2026 11:01:33 +0000
Manifest next update:     Thu 13 Aug 2026 11:01:33 +0000
Files and hashes:         1: A8rxExkhh6RIXy4twOzIt2ZCSU8.crl (hash: JSsEqXJ12K/y0JyCYV+GHREH6vYOwhVsRcF81vPQDYs=)
                          2: BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (hash: uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:a2:78:95:ac:24:9c:ad:89:a5:26:9b:68:f8:14:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
        Validity
            Not Before: Aug 12 11:01:33 2026 GMT
            Not After : Aug 13 11:01:33 2026 GMT
        Subject: CN=b17847b9d7a0b92b75fea6da6733be463808df35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:a7:09:c9:c1:b4:1e:2a:de:fe:e8:3f:04:
                    89:52:8a:e5:5d:3f:ae:4b:90:75:29:c2:5c:00:55:
                    59:2f:79:fc:d5:e7:e6:bd:c4:da:46:cb:aa:31:ce:
                    73:4f:19:74:d0:50:72:d5:36:9c:be:fb:f2:9a:4b:
                    35:27:88:f5:b4:b4:26:ae:44:64:ae:83:7d:b7:38:
                    76:11:bf:a9:39:f3:c7:8a:11:f0:0d:06:a5:a1:d1:
                    bf:3b:ec:4f:f9:a9:f7:d3:10:a3:cd:3d:22:a2:02:
                    12:ff:ab:e2:35:0c:54:27:58:88:38:6d:c2:eb:59:
                    9d:34:a2:54:f5:d6:a7:38:fc:28:ee:17:08:01:45:
                    e1:b2:53:1d:b4:30:ae:2e:69:9a:ae:73:87:7d:f9:
                    ce:46:6f:e0:d1:fb:51:96:7f:88:d8:08:c7:c9:7c:
                    69:af:12:0b:12:01:5e:17:d9:80:f7:e1:10:89:0a:
                    de:66:80:06:b8:ea:35:d9:fe:25:cb:e8:94:65:38:
                    5e:f4:e1:01:65:8b:d7:8c:3b:d0:4d:81:50:0e:05:
                    90:a0:97:c5:62:97:ba:77:19:32:1c:be:3b:78:3c:
                    7f:4b:a4:a9:a2:98:89:40:a2:e8:fc:15:59:ae:16:
                    28:0a:a8:65:1d:db:95:45:b6:d4:5b:f3:06:24:37:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:47:B9:D7:A0:B9:2B:75:FE:A6:DA:67:33:BE:46:38:08:DF:35
            X509v3 Authority Key Identifier:
                keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:92:33:fa:1f:70:6e:35:f1:a1:f5:af:8a:42:37:93:2f:71:
         36:11:a5:ff:e6:03:b7:55:3b:1f:da:ca:82:c0:d9:60:36:f6:
         36:c7:b5:04:0d:28:ca:59:d2:d8:e4:b7:9e:0f:d5:2b:01:28:
         33:8c:bc:c9:c9:f3:30:34:fd:e5:7b:70:9b:27:66:62:79:bb:
         cd:3b:35:f7:65:9a:45:a8:0c:1f:00:08:70:42:4d:56:dd:b1:
         37:51:f3:a3:42:69:82:c7:91:e0:ba:af:5c:f1:69:f7:1e:a1:
         22:83:5a:fc:0d:d4:75:08:ae:70:58:d7:a7:c2:05:a8:bd:4f:
         af:1a:be:dd:b5:31:0d:4d:79:24:1f:f1:14:fe:74:24:91:cd:
         92:49:01:4e:cd:50:27:b0:2b:9f:dd:bc:12:7c:09:a0:a8:e2:
         1b:54:31:8f:20:99:93:87:31:17:3c:31:94:f4:3c:4a:db:bb:
         6e:06:ae:49:bf:64:e2:2c:93:29:f1:1d:98:5d:8e:ca:1f:88:
         05:c2:c4:d8:71:3d:49:bd:e2:1a:3e:01:86:2c:11:50:73:94:
         76:2a:e3:95:84:0e:6e:0e:ab:b4:64:e7:bb:db:aa:e4:20:9a:
         57:17:ed:6f:d4:ec:27:d5:03:3b:94:2e:a4:3e:55:0f:fb:bc:
         3a:8d:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:17:29 2026 by rpki-client