Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          PN+S3VvcmU6BRqTYuEBvCHXByr62rFknAjFUNW+ZYVk=
Subject key identifier:   8D:A3:62:92:0D:B2:04:89:1C:AF:B4:79:CE:DB:E0:E7:0F:F1:97:3B
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       01A001389E764301684DA23CC37F572EB8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          0748
Signing time:             Fri 14 Aug 2026 17:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:22 +0000
Files and hashes:         1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: ACjIMtLUCYXvTuOeUfDuRuwdEvCyv2jjZrg8ginVw5Y=)
                          2: iz9gbVygmSBHL3t3PdATnT2zJmk.roa (hash: mrKo3a/hS44Co32MTqj4k1lL3E23S3iMQm9u18Qtexo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:9e:76:43:01:68:4d:a2:3c:c3:7f:57:2e:b8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Aug 14 17:01:22 2026 GMT
            Not After : Aug 15 17:01:22 2026 GMT
        Subject: CN=8da362920db204891cafb479cedbe0e70ff1973b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:51:4b:81:11:fd:f4:dd:ce:93:8f:27:12:
                    6b:05:69:88:6d:20:ff:e3:9a:5d:ff:9c:8a:ba:fe:
                    eb:e4:b2:c3:d0:c4:41:af:ff:f1:9d:47:3a:03:92:
                    a6:78:45:0c:72:6c:14:76:a9:43:d3:2f:08:ab:07:
                    5d:0b:58:66:0b:87:96:d6:42:db:77:9c:0b:d0:44:
                    a1:01:7b:3e:69:51:de:ce:b0:ef:b2:c9:9a:78:17:
                    1f:b5:66:87:4c:18:0a:57:43:a1:4e:bd:34:c1:ed:
                    11:48:33:6c:af:b2:3c:48:84:ba:89:28:f7:7d:59:
                    b5:80:98:79:87:55:1b:97:dd:72:19:8f:47:e6:44:
                    7b:80:14:62:57:f5:e5:51:40:73:06:fe:91:75:a8:
                    7b:43:01:7d:01:64:9c:cd:42:8f:e4:13:2c:41:1d:
                    b0:27:d0:da:f3:dc:42:96:d7:91:0a:f3:26:ed:60:
                    30:a3:67:ef:65:73:b9:a3:72:b4:ec:d7:7e:7a:77:
                    e9:cf:00:60:09:92:f0:05:49:38:d7:7d:ff:98:32:
                    34:0e:fc:19:f9:6f:4e:e7:1b:c3:9d:35:8f:f2:f9:
                    08:22:70:3b:c1:dd:9f:d1:b6:69:13:c9:d6:0c:46:
                    9f:51:63:52:ec:7f:b9:8d:84:b4:dd:d0:cd:29:e4:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:62:92:0D:B2:04:89:1C:AF:B4:79:CE:DB:E0:E7:0F:F1:97:3B
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:ac:e8:a6:f8:ec:2f:4a:43:6c:28:84:c4:b1:21:7c:54:
         6f:05:60:e4:fc:ae:9c:9a:c5:a3:74:33:93:24:7d:0b:05:46:
         cd:b7:6c:94:65:b4:57:0e:25:81:ef:59:8c:36:77:86:a4:c1:
         f0:8e:51:09:b9:ba:26:61:82:1f:be:a4:ae:08:6c:49:19:29:
         a2:b8:de:e0:0f:83:fa:0b:ee:6e:a0:9a:d1:dc:fb:5d:e3:e2:
         4b:06:30:e7:9d:56:2d:25:d3:da:eb:89:f6:c0:d6:1c:bc:3b:
         cc:b3:92:45:7b:14:f3:ff:d8:4f:66:38:6a:6d:73:ec:41:5c:
         17:a1:79:8c:c9:df:06:b5:fd:07:c1:04:29:83:a6:e7:2a:00:
         09:27:84:40:ae:d1:5f:90:12:5a:33:1f:2c:0e:9e:35:6f:ac:
         4d:79:7d:88:26:e0:0b:04:9b:d9:7a:e4:14:e0:c9:41:24:87:
         09:85:53:1e:17:84:ba:44:20:cb:61:82:e4:35:e7:3d:b3:9a:
         a8:28:0a:5f:de:d9:8e:6b:aa:50:28:d7:e5:04:8c:f7:0c:c2:
         a7:21:02:3a:9c:19:7c:25:41:e9:6e:7d:2e:4f:cd:c8:22:4c:
         d2:15:2b:a8:bc:d9:f9:cd:5d:3f:32:0b:3c:69:88:c9:36:02:
         4e:e8:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:18 2026 by rpki-client