Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
File:                     71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft (raw, json)
Hash identifier:          btbnhP8gIqsmThqKG+Y/eaLxHeqme2ZYZe8LgU5F618=
Subject key identifier:   D5:B9:5D:43:62:EC:98:10:21:F7:82:58:3C:97:CB:E8:D9:2F:89:B3
Authority key identifier: EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
Certificate issuer:       /CN=ef51b3875262fa416d8eede9b9012e482e86e908
Certificate serial:       019FF610495708CD6F0FBE1FF169F3156FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
Manifest number:          010C
Signing time:             Wed 12 Aug 2026 13:01:30 +0000
Manifest this update:     Wed 12 Aug 2026 13:01:30 +0000
Manifest next update:     Thu 13 Aug 2026 13:01:30 +0000
Files and hashes:         1: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl (hash: 5FzfERDvaduj2TQLTPebqOa2tI1K3iIyIldfCVjbgj0=)
                          2: WE6dCj7x0gJX4CBgsBBV4qD6kks.asa (hash: Ik9fu30Prhl5cLZ5Dpjdp1/bctc/vb9Xl0Pi2G12sXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:10:49:57:08:cd:6f:0f:be:1f:f1:69:f3:15:6f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef51b3875262fa416d8eede9b9012e482e86e908
        Validity
            Not Before: Aug 12 13:01:30 2026 GMT
            Not After : Aug 13 13:01:30 2026 GMT
        Subject: CN=d5b95d4362ec981021f782583c97cbe8d92f89b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:47:79:b6:dc:dd:f3:74:83:b4:cc:82:2c:
                    bc:96:bb:93:88:f4:86:b8:b0:a8:25:8f:8e:7e:74:
                    3c:b9:b2:32:52:25:94:04:02:11:22:41:b1:0a:b7:
                    a1:ba:96:a0:07:a9:c9:e9:a6:7d:3c:5e:a9:ea:4b:
                    fb:93:3d:37:50:38:71:98:02:ab:3b:9f:b1:96:ab:
                    cd:79:79:af:e7:79:c6:0b:9a:23:cd:81:d7:11:05:
                    ad:92:01:94:ab:58:2c:9a:13:44:74:45:4d:43:eb:
                    4f:aa:73:d5:9b:52:3b:27:cf:93:cd:ff:e9:dc:32:
                    6e:9c:d2:a1:26:82:80:60:fe:e0:13:ad:11:65:33:
                    f2:63:5b:8a:29:03:0e:74:f9:ce:ae:b9:b8:97:3f:
                    8a:54:35:49:44:e2:aa:8e:77:d7:93:89:86:2f:7a:
                    3a:e2:27:5e:d5:2f:41:bf:a3:85:53:5b:c4:8d:1a:
                    f8:92:5c:ef:fa:f1:61:8f:ea:57:d8:c9:7f:72:26:
                    f0:d5:31:bf:77:9e:e8:74:50:9d:5a:1a:b9:29:ff:
                    d3:d5:b5:b5:ad:03:dc:33:7a:31:e6:f0:5b:f7:bd:
                    6a:a8:ee:5c:1e:e6:e0:08:a2:69:bc:92:32:c3:3e:
                    9e:f1:bf:61:a1:cd:17:f6:51:4e:72:88:dc:32:d2:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:5D:43:62:EC:98:10:21:F7:82:58:3C:97:CB:E8:D9:2F:89:B3
            X509v3 Authority Key Identifier:
                keyid:EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:5b:d5:f7:0e:28:fa:ee:60:4a:51:e3:17:c5:24:31:e0:
         23:be:f2:dc:aa:29:29:89:8b:01:9e:63:d7:a5:8c:79:f4:83:
         80:b7:fb:14:22:55:e3:ae:18:60:ee:c5:2b:34:40:c7:8d:71:
         68:82:8a:9d:c2:fe:99:7e:c9:43:79:de:24:d7:81:b9:31:02:
         d6:0b:a3:0d:ae:c4:f5:c0:88:2f:39:4f:3c:e2:08:cc:18:71:
         b2:19:77:d6:9a:fe:48:b3:8b:db:1d:76:58:bd:27:6b:65:be:
         9d:80:be:a4:43:63:e7:50:07:10:0c:95:6d:8b:e6:cd:9c:5b:
         75:9d:83:43:45:9d:ef:c7:ae:1c:e0:a6:54:e1:3f:5f:ed:cf:
         01:83:7c:25:40:67:ce:20:01:39:de:19:58:7d:25:b4:6b:b4:
         b0:ed:9c:eb:d4:99:82:0f:b6:9c:6a:b8:c8:ae:b2:85:e3:9d:
         6d:b0:dc:1a:43:97:57:68:2c:b8:5c:95:58:95:fc:fa:29:77:
         8f:0b:55:84:a2:19:43:18:9a:00:7f:0f:50:79:53:c5:90:ab:
         b5:e2:48:83:61:70:3c:7a:1e:73:64:dd:b0:a7:b5:75:99:33:
         15:83:49:96:8a:97:3b:1e:b7:70:12:1e:28:b3:de:c1:f4:59:
         9f:91:92:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:42:07 2026 by rpki-client