Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
File:                     aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json)
Hash identifier:          guIUUVKEm4o+cqdQUDuWrP/IrVrfVqwJEwiIbcowtXY=
Subject key identifier:   B8:40:0F:7A:24:23:88:CD:60:B7:EE:29:9D:35:3C:A3:A8:2D:16:37
Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
Certificate issuer:       /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Certificate serial:       019F9F283EDECAA5BD182058357FC59DD98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
Manifest number:          1409
Signing time:             Sun 26 Jul 2026 16:00:42 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:42 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:42 +0000
Files and hashes:         1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: iMlNJeTHBt9D+cSvu5OFbmZegrIY/q2pWFyB3DqZKz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:3e:de:ca:a5:bd:18:20:58:35:7f:c5:9d:d9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
        Validity
            Not Before: Jul 26 16:00:42 2026 GMT
            Not After : Jul 27 16:00:42 2026 GMT
        Subject: CN=b8400f7a242388cd60b7ee299d353ca3a82d1637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:ab:1c:ca:b5:d7:51:75:42:d3:ca:9c:58:
                    2c:14:41:ad:28:00:42:14:96:c3:de:8d:a9:29:23:
                    19:a2:bd:09:73:44:92:85:3f:04:87:bc:ac:a9:23:
                    c8:cd:0f:a0:87:a7:bf:9d:0c:bf:2f:62:9d:f6:5d:
                    8f:33:f0:bd:f6:ab:6a:25:11:d4:a5:69:c7:5a:c7:
                    77:8f:b2:d2:a4:39:8a:89:97:20:20:57:b4:76:1e:
                    0c:b1:11:c2:7f:f8:de:65:7e:eb:fb:5f:22:7e:ba:
                    12:19:90:8b:6d:1a:7f:2e:2c:72:ec:ce:75:b8:08:
                    7d:e5:0a:18:bf:2e:6b:4c:8f:f6:e1:c1:08:9c:77:
                    4e:d1:f7:5e:04:1c:fe:0d:a7:c5:92:9a:b2:4d:53:
                    22:c1:50:ce:4f:b8:b1:3c:36:bc:da:39:5c:00:db:
                    16:df:07:67:86:af:ed:9a:ff:79:1a:78:17:5d:b8:
                    43:1a:62:99:0f:12:29:42:95:7e:48:61:6d:d8:8d:
                    41:f3:eb:57:8b:8b:8a:8e:43:64:16:bf:8f:64:cc:
                    b7:76:90:24:5d:eb:ff:27:7f:9f:88:bd:0a:c0:2c:
                    f4:81:8e:f0:69:f8:17:b9:48:f7:23:84:ad:0c:59:
                    b9:58:47:30:48:62:a2:71:78:4c:55:b0:af:c5:8a:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:0F:7A:24:23:88:CD:60:B7:EE:29:9D:35:3C:A3:A8:2D:16:37
            X509v3 Authority Key Identifier:
                keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:87:7e:b0:55:78:be:08:fb:77:7e:f0:9f:aa:cb:8b:30:c2:
         f3:4c:8b:ed:37:d1:68:9a:4b:f3:28:ac:88:00:d2:e5:08:ff:
         43:58:3c:3e:cd:84:21:72:d7:46:d8:8c:91:1c:92:08:3a:1c:
         1d:47:9b:2d:0a:f1:84:38:15:d2:c0:27:e9:0f:47:8c:2d:1c:
         cf:41:c6:c0:ad:14:44:b2:89:61:99:60:b2:79:34:c4:96:09:
         19:92:18:0e:e9:70:07:da:b4:eb:e4:4d:5a:4e:5b:44:17:19:
         d5:d2:bd:3c:9c:a0:ea:c1:8a:bb:46:bb:6b:57:f5:af:4a:d8:
         ab:a5:9c:37:57:d2:8a:1f:4d:51:29:4e:a1:ea:2b:c1:10:0b:
         74:53:e4:fe:a7:df:b5:64:58:e1:67:bd:a7:3d:f1:ef:77:69:
         58:5e:fd:e4:c3:a5:67:bf:d4:da:49:a4:17:3f:e7:2e:2f:59:
         35:f1:e3:3e:63:24:45:95:0d:fc:5a:73:8f:32:8f:fe:a0:cd:
         b7:5a:ce:a7:74:ab:71:d4:14:72:66:d9:68:36:48:dd:b8:40:
         81:72:1e:9f:2b:f9:41:5f:0d:da:07:1f:ec:9a:e7:78:f3:fb:
         f7:af:f4:0c:e7:9f:a0:92:ec:6a:c1:7b:44:98:f4:09:35:23:
         18:63:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:44:58 2026 by rpki-client