Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File:                     41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier:          CZ+JWP1uIv/shIxtUwy/2XS47rA8E/GngycSP8IjxAo=
Subject key identifier:   A3:AD:4C:90:35:F2:B3:61:88:5E:68:D6:7C:C1:B6:DB:93:24:80:24
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer:       /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial:       01A001018C9B2C145196FC989DAA13751A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number:          1738
Signing time:             Fri 14 Aug 2026 16:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:13 +0000
Files and hashes:         1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: Ukn6cSb5PGuEaZMc2l6Eq5/TY0PBXYenqq4rk/n86es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:8c:9b:2c:14:51:96:fc:98:9d:aa:13:75:1a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
        Validity
            Not Before: Aug 14 16:01:13 2026 GMT
            Not After : Aug 15 16:01:13 2026 GMT
        Subject: CN=a3ad4c9035f2b361885e68d67cc1b6db93248024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:19:76:42:fd:6a:08:7d:da:23:e0:cd:8f:
                    79:a9:c8:aa:13:a2:95:d6:6f:b1:3b:f8:62:f6:a5:
                    67:37:78:27:97:b0:96:34:4a:42:5c:e5:29:00:f6:
                    2c:e2:09:17:bd:f6:f8:78:4b:8e:29:f7:8d:54:5f:
                    54:29:ac:d0:32:eb:55:20:37:a8:df:9c:50:a8:b4:
                    83:ac:55:c0:d0:b5:0f:52:42:ab:eb:a7:4b:2c:a3:
                    d3:2c:95:ba:d7:98:e4:f6:22:3f:76:27:12:55:37:
                    ed:e9:d5:04:f0:27:f6:e7:e0:9b:7c:85:89:7e:2e:
                    12:8d:2c:db:f8:cf:68:a1:40:01:80:31:7f:32:82:
                    e8:8d:05:a3:dd:95:05:91:95:3d:05:0d:43:81:f8:
                    49:20:b0:37:01:7e:48:05:aa:57:16:49:7d:0e:60:
                    12:59:d4:c0:15:d0:be:05:fa:eb:e9:12:d0:ea:87:
                    39:d7:99:b9:a6:e5:c4:3b:7e:17:a8:cc:63:24:be:
                    49:ba:a0:40:45:2e:bd:c0:7b:99:ed:be:d8:8a:f6:
                    53:54:15:bc:9e:10:f7:1c:1b:7a:d3:2e:b6:d1:13:
                    1b:41:84:34:49:a7:02:f7:93:60:52:35:f8:69:11:
                    5f:df:d8:0a:91:c1:f9:ae:a5:f2:05:4e:9b:9a:3c:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:4C:90:35:F2:B3:61:88:5E:68:D6:7C:C1:B6:DB:93:24:80:24
            X509v3 Authority Key Identifier:
                keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c2:a7:39:01:3f:0c:59:83:ed:ff:6e:75:10:36:26:4c:27:
         b2:ef:eb:40:74:5e:cd:22:0d:91:b0:6d:40:7c:20:4f:3d:ad:
         4c:09:ea:d3:47:b6:8a:c1:2b:b5:4d:20:38:ac:bd:9d:cf:66:
         fd:ea:ec:55:d4:36:bc:d7:40:3f:fd:cb:00:17:22:21:63:88:
         a5:d1:15:ac:c9:ff:80:7e:88:de:63:90:fb:3a:72:76:92:81:
         1c:40:c4:29:64:bc:f3:b7:ff:02:71:e2:d4:ac:8c:b1:bc:32:
         09:16:00:dd:9d:ee:9e:00:41:ed:fb:f8:2b:00:e6:8f:8c:1c:
         c6:1b:54:39:b1:42:e1:eb:3b:48:ee:0b:cf:f3:12:2e:f8:f1:
         b2:59:c1:61:26:93:e8:14:1f:62:e8:60:0f:56:ec:26:29:e6:
         0e:e4:d4:e6:fd:eb:25:9b:f4:cb:b5:42:d8:5b:9b:70:fe:e0:
         a2:a8:b3:39:43:c2:bf:bc:4b:e6:1a:41:96:4e:9d:74:c2:c2:
         ef:25:6d:b9:4c:4d:6d:d8:73:c2:02:ed:de:41:72:82:27:c1:
         1b:79:fe:cd:5f:bd:5a:00:54:51:bd:b6:7f:c7:90:db:27:e0:
         6f:1d:3d:3f:07:69:00:14:2c:15:a2:45:c7:1d:18:3e:21:1a:
         69:d6:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:17 2026 by rpki-client