Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File:                     1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier:          dkfJhd1mN5AjnFkx96A6JI3/b0nruVC3ams9VwpdgB4=
Subject key identifier:   1D:ED:AD:68:BF:25:B0:94:3C:8D:0F:56:CC:76:36:E0:49:E8:E8:EE
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer:       /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial:       01A04017879D9355C6E57F2A9379A63F68AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number:          021C
Signing time:             Wed 26 Aug 2026 22:01:18 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:18 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:18 +0000
Files and hashes:         1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: XDHhWv/SmWTuASoISw2hHEPr6G305Mk86LSIrbT/nC8=)
                          2: RkMX5Ozt-aBvg83tpif5dYWlIs8.roa (hash: sE97AqRK+jdlW0OvHBvltFQHWQ2HKYV5m9H+8L8sv/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:87:9d:93:55:c6:e5:7f:2a:93:79:a6:3f:68:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
        Validity
            Not Before: Aug 26 22:01:18 2026 GMT
            Not After : Aug 27 22:01:18 2026 GMT
        Subject: CN=1dedad68bf25b0943c8d0f56cc7636e049e8e8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:3c:9f:a9:de:33:cc:fb:00:85:1c:b1:75:
                    38:56:2d:f5:c7:da:97:4c:6b:16:9d:f4:19:a1:e0:
                    ce:f6:de:ec:02:6a:5b:fc:37:35:75:c1:e4:dd:44:
                    41:d9:78:ff:ee:cd:7c:4c:f1:dd:85:d7:8a:d2:a2:
                    af:9a:f0:47:4b:4f:b4:d2:16:40:41:93:a9:fe:13:
                    dc:8b:3e:82:ad:f3:e3:c2:93:91:1a:b8:a7:bb:6c:
                    ae:68:d1:49:80:55:d3:37:47:69:04:16:c4:c4:0b:
                    01:83:aa:25:28:1e:b7:f4:32:ca:41:47:d9:41:db:
                    fd:ef:27:1c:24:ee:86:de:77:db:44:53:0f:29:16:
                    41:dc:98:ae:9f:05:d8:17:d1:a7:16:e8:af:61:77:
                    e3:d4:1a:25:d1:80:39:1f:10:45:ec:bf:bf:a9:7d:
                    76:e2:03:4e:84:31:4e:23:f8:04:51:6d:b8:e7:a0:
                    2c:bb:7c:9c:f6:6d:22:d9:e8:85:3c:cb:1d:c5:e9:
                    e1:a6:2e:95:fd:74:23:f5:63:5a:ea:95:19:c6:03:
                    10:6b:0f:b5:20:89:1f:fe:09:af:38:4b:f2:8b:28:
                    86:59:6b:fe:3f:9b:65:80:a8:71:1f:cf:03:ae:0b:
                    06:5e:c9:e6:8e:28:b4:9b:87:5a:bc:62:f8:14:42:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:AD:68:BF:25:B0:94:3C:8D:0F:56:CC:76:36:E0:49:E8:E8:EE
            X509v3 Authority Key Identifier:
                keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:40:8d:58:c6:f2:68:e7:c0:aa:f0:9b:00:9c:d2:fe:0e:92:
         33:ae:98:64:cf:35:10:04:4c:2a:ec:b7:39:5c:6a:55:44:38:
         7f:a7:d3:e6:a6:64:f5:0c:26:64:cb:35:71:e5:e6:83:99:d4:
         09:91:96:48:fc:96:12:fa:81:e6:57:6b:2d:1d:73:85:9d:b3:
         53:74:c3:de:02:23:c2:5d:b4:2d:ff:fc:7e:bb:ed:02:df:df:
         cf:1a:de:17:4c:6e:d0:12:0b:29:eb:b7:0c:b0:eb:4d:2f:6a:
         c0:f4:11:8c:e2:89:16:bd:61:7e:ce:a5:97:ad:be:90:25:18:
         c4:9c:78:0a:8b:ad:09:3a:67:08:9d:52:d0:6b:51:f3:c8:98:
         0d:10:b1:e3:b9:6c:af:18:2b:66:b5:99:97:4f:a9:9a:ce:5b:
         f8:a2:54:67:88:a0:13:cd:d1:6d:fe:aa:0b:89:1b:3f:49:a0:
         b9:5c:86:c3:b1:92:79:8d:26:14:35:84:e6:13:33:55:2a:6c:
         f1:af:9a:ea:b6:a6:0e:b6:69:c7:07:31:d3:fc:8a:0c:13:a9:
         d2:b8:58:d7:47:d9:78:3c:63:24:e6:6b:e8:b0:b1:c5:b0:a5:
         d7:fe:13:7e:ae:f4:23:31:1a:70:06:0e:ef:48:8a:29:cf:cd:
         36:55:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:05 2026 by rpki-client