Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          +Qw9gk2hE4tKl8cufO2pgXxfvXV4rpwJX33a0Ewkmis=
Subject key identifier:   10:17:6D:40:33:B6:89:48:DB:C5:E2:23:F4:65:0E:49:AE:29:43:F8
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       019FCD820DD38A3AD263371BEC2212477048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          10CF
Signing time:             Tue 04 Aug 2026 16:01:20 +0000
Manifest this update:     Tue 04 Aug 2026 16:01:20 +0000
Manifest next update:     Wed 05 Aug 2026 16:01:20 +0000
Files and hashes:         1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: U4b0uBQN6AAv8pNVdKPeRlv91/piZ+MeVljjVMttFQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:82:0d:d3:8a:3a:d2:63:37:1b:ec:22:12:47:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Aug  4 16:01:20 2026 GMT
            Not After : Aug  5 16:01:20 2026 GMT
        Subject: CN=10176d4033b68948dbc5e223f4650e49ae2943f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:71:46:18:75:a8:a5:bd:f6:32:a6:f3:4a:
                    aa:41:71:17:0c:6d:c5:7d:17:5a:df:2f:91:7e:5b:
                    87:9e:54:de:74:f2:7c:39:4e:73:b3:14:33:09:c4:
                    90:c6:9b:81:8f:86:5b:25:fb:16:38:80:9e:ce:2d:
                    b8:26:b0:49:50:5d:b0:90:d0:81:22:04:c3:e9:48:
                    4d:29:bd:22:be:2e:7e:f3:6e:8c:34:94:62:7f:43:
                    31:2b:17:cb:eb:e4:b7:4a:d8:55:ee:1f:b4:7e:3f:
                    cf:75:16:5c:43:8b:95:b6:05:bc:29:fe:30:70:4a:
                    da:e6:0b:e3:17:8a:a1:fa:26:a3:a0:5c:d3:9b:8a:
                    f2:42:0f:61:0a:a4:5d:c5:9c:28:54:84:6c:9b:b2:
                    b2:50:97:07:0d:e1:48:34:0f:69:98:3d:f3:a7:7d:
                    1c:32:60:3b:88:a1:47:5d:1c:29:d8:21:e2:ad:a2:
                    81:59:f6:a1:db:53:4b:01:48:e9:78:67:51:2f:05:
                    fd:f5:e8:f1:ad:bd:08:20:95:30:64:ba:c0:78:5e:
                    b1:6c:44:3d:87:72:2e:62:2f:11:9a:df:09:63:04:
                    db:77:12:43:ab:a4:be:92:22:c7:8e:fc:d8:c9:b7:
                    b3:a2:31:19:cb:5c:bc:c1:df:77:57:70:64:ca:a6:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:17:6D:40:33:B6:89:48:DB:C5:E2:23:F4:65:0E:49:AE:29:43:F8
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:f2:67:51:4e:79:80:36:35:b3:a2:0a:49:38:d5:2c:5f:
         59:99:00:fa:92:6e:2d:6a:01:99:c2:9f:bf:83:e0:5c:e4:bd:
         26:00:8f:16:bd:af:7c:c5:22:87:4b:f0:f8:ac:5b:db:4d:23:
         15:1f:af:ac:9b:2d:2b:08:71:95:29:4b:86:a0:67:4d:a5:ed:
         8f:c1:bb:b5:be:47:64:10:84:ce:83:1a:fd:4b:7d:84:bf:db:
         fc:55:5d:ce:32:ac:c6:5c:49:4e:2e:8f:9f:86:76:a9:87:b0:
         b2:27:c9:8d:01:3a:ec:cb:d1:55:35:cc:ff:cc:0c:01:80:27:
         bd:35:ec:55:77:68:d6:af:3e:59:13:1e:59:54:7d:12:55:73:
         ea:12:98:d4:05:56:dc:e5:03:25:86:03:74:46:32:fd:20:c6:
         4c:5d:72:d6:de:cf:0e:d1:e5:57:fe:40:e9:fb:f0:8f:f6:15:
         4d:cd:3b:eb:28:f9:ab:28:4c:a3:57:51:08:b9:c4:4b:c7:be:
         61:2e:55:d4:1c:5f:75:6e:b0:01:98:16:4c:bb:ff:7a:88:fe:
         c7:12:70:e7:17:a4:e8:7f:28:46:2f:52:fb:56:a3:28:06:0b:
         f1:b4:b7:5c:f7:a9:cc:b0:ff:b9:b9:d9:94:e7:d5:b3:a7:96:
         47:76:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:30:45 2026 by rpki-client