Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File:                     pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier:          tgmNIezoRrCrkUoXSGNc9PrkYBoM+HMNVKj5mlUa+H0=
Subject key identifier:   A5:12:41:60:62:06:27:52:6E:99:70:B0:55:61:48:16:D7:5B:3F:B4
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer:       /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial:       019FE62F17EF76CE8C6F547A1FF791FC6410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number:          19F2
Signing time:             Sun 09 Aug 2026 11:01:13 +0000
Manifest this update:     Sun 09 Aug 2026 11:01:13 +0000
Manifest next update:     Mon 10 Aug 2026 11:01:13 +0000
Files and hashes:         1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=)
                          2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: eNDIRZFrtgFN+9zpVqPgVI8CZJyvJX9T6rHqbdUpGQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Aug 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:2f:17:ef:76:ce:8c:6f:54:7a:1f:f7:91:fc:64:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
        Validity
            Not Before: Aug  9 11:01:13 2026 GMT
            Not After : Aug 10 11:01:13 2026 GMT
        Subject: CN=a5124160620627526e9970b055614816d75b3fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:b5:31:a0:a7:36:a5:b6:15:60:fc:b2:87:
                    3d:25:e8:97:cb:14:41:d8:34:2f:a2:55:23:1b:94:
                    36:fc:2b:9d:ec:39:14:14:59:8a:5f:1b:01:ac:dd:
                    cb:8f:52:ee:99:24:37:e6:00:04:a8:23:fb:69:e0:
                    06:92:21:a6:c0:a8:64:00:31:d0:4c:8e:15:7c:2f:
                    f5:08:33:43:6b:a8:a8:a3:59:5d:4f:f4:6c:0f:d6:
                    23:95:a7:17:86:70:35:ef:2f:28:89:6f:0a:6e:39:
                    60:f2:6d:d1:a3:76:c7:5f:68:dd:c3:a2:71:da:7a:
                    f9:45:47:22:10:06:4b:bf:1e:0e:37:06:0f:82:38:
                    e1:74:7f:0e:78:ca:ab:d8:99:bf:2a:08:75:e2:13:
                    25:34:14:36:48:38:b8:e2:c8:cb:02:83:22:89:23:
                    0b:64:6f:59:a9:8c:ff:b2:66:4b:53:a7:2f:e1:b3:
                    90:7f:90:ba:62:71:71:05:ec:a1:c1:a2:95:30:5b:
                    39:0a:8e:85:d2:ac:a9:29:cc:da:28:e8:5e:0f:b6:
                    7b:4b:1e:19:0d:3f:98:cc:c1:01:dc:94:76:b8:83:
                    d0:44:c3:f0:5b:af:0e:a5:93:b9:91:76:79:1a:fb:
                    70:0a:70:61:2b:f4:95:a2:4a:bc:da:24:13:24:b7:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:12:41:60:62:06:27:52:6E:99:70:B0:55:61:48:16:D7:5B:3F:B4
            X509v3 Authority Key Identifier:
                keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:2f:4d:78:82:f7:4f:45:fc:dd:fe:10:9c:ee:64:1f:69:
         62:70:b4:89:05:42:9b:7e:38:16:7c:0e:08:9f:9d:9d:5f:e4:
         31:fc:6a:16:cf:13:c1:10:5c:ea:15:1a:20:bb:77:f1:68:73:
         61:bb:b8:20:21:e6:7a:bf:4f:89:76:74:13:7a:14:52:17:4e:
         ac:4e:0a:3a:3b:f2:39:b4:0f:8b:bf:a4:43:6d:4c:0a:6f:c7:
         74:d5:3e:34:aa:6e:bf:c9:33:11:47:39:06:51:ec:20:7d:e2:
         60:a4:07:cf:7a:98:cb:f9:c2:73:8b:0d:63:c4:24:f3:fc:39:
         a4:61:6f:91:67:e9:f7:78:e0:85:26:71:fc:c7:7f:ee:05:46:
         ef:41:9b:cc:67:15:78:c8:bc:20:d2:dc:2e:72:d0:d4:f5:be:
         02:28:0c:4c:01:dd:f4:76:0d:96:dd:c7:82:94:d5:f5:2e:b2:
         e9:fd:cb:ee:e8:66:cc:9e:f6:ba:da:c2:e3:1b:43:af:a4:1b:
         ae:18:f6:62:26:94:c6:da:d7:75:fb:22:73:37:ea:fd:30:00:
         e7:88:32:be:a8:17:93:40:e8:fa:db:45:c6:a3:2e:9e:79:10:
         d2:c1:18:47:88:ee:1d:36:fe:8b:53:c7:66:3b:c1:4b:3f:56:
         51:26:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 18:04:14 2026 by rpki-client