Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File:                     2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier:          BB1Dk/B/Tma+gh9B0ILLCfQ/uqw/gYefw45KlHG6+Tc=
Subject key identifier:   79:72:0B:A2:31:08:91:F3:BA:04:F2:C6:BE:CC:AB:75:A3:9C:6A:B2
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer:       /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial:       01A001DD7EC66B7ADFEC0F3230871A2D5243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 20:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:28 +0000
Files and hashes:         1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: jRUxn/JG4AwmB01rD8JMxH4E3hfrcgso/FuTYrVPQWM=)
                          2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7e:c6:6b:7a:df:ec:0f:32:30:87:1a:2d:52:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
        Validity
            Not Before: Aug 14 20:01:28 2026 GMT
            Not After : Aug 15 20:01:28 2026 GMT
        Subject: CN=79720ba2310891f3ba04f2c6beccab75a39c6ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:f7:d8:dc:41:ac:c0:cf:69:de:92:ef:d7:
                    ae:65:20:4e:e7:d4:ef:63:fe:a9:af:a6:1f:1f:ba:
                    05:a1:d5:aa:d0:1c:76:44:e2:4e:d1:fc:af:b6:08:
                    e8:79:16:bd:92:5a:95:65:43:81:cb:c0:0b:18:8a:
                    c8:71:3d:ff:d2:ef:e3:6b:ca:20:a3:1b:67:fc:35:
                    fa:76:42:1f:ca:60:4b:bb:c5:06:b0:88:21:9c:bf:
                    32:1e:5c:3a:7c:6e:65:cd:f1:f7:fc:2a:fe:d7:19:
                    77:f6:4a:3c:e4:d7:ca:a9:62:3b:9f:cf:14:b4:68:
                    7c:cf:4f:36:8f:b6:80:a1:14:4c:c9:46:ea:7f:21:
                    5e:b8:32:83:b6:62:0d:a8:10:89:47:e6:04:13:50:
                    4d:ba:32:c3:82:bb:62:59:37:73:2a:e3:53:e2:cc:
                    fc:13:4f:cd:90:5f:f4:4d:0b:b7:95:78:38:15:59:
                    68:fd:23:3d:e7:40:2c:c7:6d:00:b8:3b:39:b3:28:
                    04:61:c3:39:c3:fe:ef:9b:b7:55:63:ab:c2:f2:49:
                    5c:7e:d0:02:50:62:14:3f:5a:a1:24:06:d9:5c:25:
                    f5:bb:34:cb:7f:a7:48:61:13:d1:6a:06:cf:e0:2a:
                    65:ab:52:fc:71:12:28:0f:e3:48:a2:38:16:ff:7b:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:0B:A2:31:08:91:F3:BA:04:F2:C6:BE:CC:AB:75:A3:9C:6A:B2
            X509v3 Authority Key Identifier:
                keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:9f:ef:bc:59:a8:30:3e:02:33:17:92:a4:2a:e5:db:e2:
         9d:41:1a:ec:81:17:6a:23:b3:54:fb:1f:bc:74:7e:9a:99:cf:
         da:d9:27:e6:49:16:53:1f:9c:f1:3b:9e:69:5a:68:dc:78:00:
         a1:e9:42:35:21:12:f7:7d:6e:0d:5a:6f:5a:49:b6:47:ef:21:
         c1:53:7d:53:36:dc:0b:c9:25:41:95:be:b7:52:bd:5f:19:e7:
         43:18:88:0c:89:ce:85:4d:62:42:8e:cd:86:0b:a3:73:dc:0f:
         04:f4:b1:4e:65:68:30:4b:62:fa:f4:0a:b1:6b:41:03:f1:9f:
         af:88:32:30:f6:69:cb:bd:5b:00:83:26:f4:1a:9f:b8:18:7f:
         82:d6:fc:f0:d9:53:ae:c9:e1:17:1a:8c:89:b5:4f:ff:56:2f:
         16:38:6b:81:74:c4:67:4c:b3:13:84:aa:4e:e6:e1:dd:eb:94:
         3b:bf:37:6e:43:f4:55:41:02:1f:92:48:c2:63:ea:6d:a3:d0:
         8c:5a:cb:68:38:65:e8:0f:52:1a:d7:5b:b6:d7:f7:8b:f2:6a:
         2e:83:6d:a9:51:03:03:5f:cc:8e:36:a9:31:eb:9e:80:f7:3e:
         f1:d9:fb:16:a2:94:a4:2b:ad:53:4a:ef:51:de:ad:f1:8a:d4:
         e2:64:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:59 2026 by rpki-client