Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          tN5Nh+2TZjJk0sv7tjvL6wMcrCWH0JkDn6/XuEgrevc=
Subject key identifier:   EF:B8:12:83:23:7E:FB:69:32:E6:36:0E:13:5F:C5:9A:34:DF:7A:0B
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       019FCCDD4314E0EE0B585074E90DDF07E68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          14C1
Signing time:             Tue 04 Aug 2026 13:01:20 +0000
Manifest this update:     Tue 04 Aug 2026 13:01:20 +0000
Manifest next update:     Wed 05 Aug 2026 13:01:20 +0000
Files and hashes:         1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
                          2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
                          3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
                          4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: 61DxpTGiiB/DM+zrhBHxph+MeaSlbUQbR2HERytUcpE=)
                          6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:dd:43:14:e0:ee:0b:58:50:74:e9:0d:df:07:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Aug  4 13:01:20 2026 GMT
            Not After : Aug  5 13:01:20 2026 GMT
        Subject: CN=efb81283237efb6932e6360e135fc59a34df7a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:25:76:34:e9:e2:91:f0:46:16:26:e3:8f:
                    d8:cb:dc:73:80:f4:e7:59:a4:ef:5e:f5:1d:6b:bc:
                    c9:92:8e:18:b3:25:19:7c:b3:8c:87:76:b5:3a:b0:
                    bf:1e:ac:f6:ee:5d:f9:ac:e1:15:bd:12:22:43:53:
                    09:5d:5e:63:e9:94:95:5e:bd:de:69:10:45:e8:08:
                    31:3c:41:3b:14:32:82:f1:ca:00:b1:8c:89:12:31:
                    ff:63:86:c2:e2:9e:01:04:c1:42:88:4b:f9:bc:cc:
                    c6:6f:72:b4:bb:80:ee:53:fd:13:0a:7b:22:df:91:
                    b9:35:17:3a:2a:fb:d1:4a:dd:2e:85:01:bf:89:42:
                    be:13:2a:03:8d:4c:6f:24:19:68:e0:48:5a:29:05:
                    81:97:09:b8:db:66:b3:7d:4e:29:de:0c:bf:11:b3:
                    45:3c:28:80:d8:38:dd:24:2a:65:fa:72:f1:7b:b6:
                    fc:5a:96:12:8f:08:03:a9:1d:49:af:c3:fa:59:aa:
                    7c:ca:5b:8a:32:16:aa:5b:89:f2:6f:63:86:91:df:
                    9c:56:59:31:c2:63:b5:61:25:73:f2:cd:55:41:a5:
                    33:01:8c:95:93:42:6d:04:8d:db:2a:62:70:89:ee:
                    bf:58:64:4f:3d:69:54:d9:e5:e0:19:b4:dd:9c:95:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B8:12:83:23:7E:FB:69:32:E6:36:0E:13:5F:C5:9A:34:DF:7A:0B
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:29:c6:b5:b3:b2:26:ef:a0:a9:fe:83:ee:5c:de:38:81:71:
         12:eb:13:7b:83:dd:a9:fd:56:91:a1:ad:e0:35:58:8f:15:37:
         07:d1:05:71:dc:ea:45:af:c6:d5:81:d3:94:df:f2:96:bd:ef:
         cf:ac:bf:3b:5b:96:e1:29:bb:72:59:08:21:f7:b4:2e:46:5e:
         ca:b2:f2:8a:53:fc:9c:28:0e:33:bf:49:12:dc:ed:0e:f5:5e:
         db:80:ee:a5:d7:23:9a:36:4d:57:6d:6c:24:0f:dd:ba:b3:6b:
         b5:02:95:84:a0:6c:78:e1:77:d4:3e:cc:c6:6b:c5:7d:fb:6d:
         f2:24:ca:17:e0:7e:75:45:56:a3:7b:de:c4:d9:73:5e:94:e6:
         1e:e0:7a:66:bb:13:9a:c6:0a:45:83:e3:7e:3f:85:e3:fc:1a:
         21:7d:7e:58:fc:c0:96:d3:e4:72:b7:ad:dd:58:3b:be:ea:a8:
         29:43:ab:a1:51:2a:95:92:89:61:e3:3f:0e:fe:66:06:e6:18:
         69:6f:e4:0d:5a:1d:51:df:a1:98:12:3e:e5:20:02:4d:2b:3d:
         a7:8a:4e:3a:d1:01:18:6e:17:04:ce:13:e6:62:e6:06:0e:0b:
         a5:08:b6:4b:29:37:a1:00:dd:1e:04:3d:b2:ec:16:e8:f1:5f:
         0d:23:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:04:18 2026 by rpki-client