Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File:                     3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier:          ma8QHNWtBouHzKMVUdIOdF6qAlKV0hp8iIJzk6GAgo8=
Subject key identifier:   66:C9:CE:42:F9:8D:93:BA:E1:1E:78:51:77:0F:4A:08:64:17:E3:14
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer:       /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial:       01A0401798EE8616FEB4D233BFDAE7695304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number:          047D
Signing time:             Wed 26 Aug 2026 22:01:23 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:23 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:23 +0000
Files and hashes:         1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: GMtQG3Bbdvz7fDa0bBPwuuacU9W9GpkMhP1QpLumRko=)
                          2: BNslYYnyJbQUX-hm0CSR2lkEI-c.roa (hash: ccskpB9Iw7RlPpaSvm887XUkgOImLelHDmM6zJHbDaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:98:ee:86:16:fe:b4:d2:33:bf:da:e7:69:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
        Validity
            Not Before: Aug 26 22:01:23 2026 GMT
            Not After : Aug 27 22:01:23 2026 GMT
        Subject: CN=66c9ce42f98d93bae11e7851770f4a086417e314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:85:84:65:5a:66:13:b8:c6:03:cf:3f:3d:
                    8f:61:5e:34:d5:20:0e:b9:ae:31:ff:a3:0a:2e:13:
                    3c:71:d5:be:d0:b6:54:5e:c3:87:b7:fc:f3:a7:81:
                    87:7a:88:58:9f:90:1d:ef:fc:05:83:50:07:b5:d7:
                    39:ac:fd:3e:5c:6d:94:d8:a7:6e:6d:21:81:26:01:
                    7e:a2:ca:25:2c:95:e2:c8:ad:28:3a:2b:ea:1b:a8:
                    73:df:1b:c7:fe:98:97:bf:b5:97:66:b6:68:76:8f:
                    ea:a3:71:5f:62:bd:8e:bf:48:60:9d:1c:7b:bb:aa:
                    35:29:96:06:14:ea:ac:af:23:30:03:bc:74:ca:a4:
                    92:39:63:ab:cf:25:b8:ca:66:98:99:18:14:fe:ed:
                    ec:11:b7:3c:8c:eb:16:6f:f9:10:e8:32:bc:c2:fe:
                    fd:16:e6:89:d5:b9:ac:6c:7c:cf:2e:fd:e2:0f:22:
                    8c:ee:f8:de:a8:83:ee:e3:f5:9b:cb:53:ed:dd:9e:
                    16:39:84:7a:5e:c9:af:29:81:e9:d7:dc:fc:c8:e2:
                    6a:48:27:40:8e:44:07:04:66:a1:28:ec:32:42:49:
                    d3:05:f7:7e:94:5c:0d:93:57:1a:a7:23:c3:51:5b:
                    c4:37:57:d0:ed:72:47:43:49:cd:15:7e:cd:e3:f6:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C9:CE:42:F9:8D:93:BA:E1:1E:78:51:77:0F:4A:08:64:17:E3:14
            X509v3 Authority Key Identifier:
                keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:16:e4:7f:29:21:9c:ed:32:9f:65:fd:1d:5f:c5:57:56:53:
         46:fc:bd:62:41:3c:2a:0e:d9:05:ff:cf:77:d6:10:ce:86:55:
         96:25:87:1f:93:22:ad:f5:09:33:49:3c:61:f8:1b:9f:7c:ef:
         41:3e:f5:fe:33:7b:cc:8d:18:6a:13:80:ec:ec:87:1e:33:37:
         33:9b:2b:26:80:3d:0b:bf:36:f8:3b:dc:71:d5:b8:43:cf:d8:
         14:c6:0d:74:d9:91:77:e5:e7:4a:12:d6:2b:41:0c:a2:f0:94:
         42:38:d2:67:c6:b2:a7:c5:50:a9:10:dc:b4:7f:d5:96:d8:70:
         5f:64:ef:8c:73:9e:de:9d:18:11:2e:fa:fe:d7:9b:aa:1d:7a:
         c3:03:f3:6d:e3:d1:15:83:29:14:0a:95:b8:c3:43:73:6b:3b:
         4b:ce:26:b5:95:60:71:62:9d:91:c2:b1:a8:f9:71:16:d1:86:
         82:27:28:7e:71:da:42:b2:69:08:5a:0b:f9:85:3e:fb:8d:24:
         55:47:39:24:90:44:1d:b3:da:f2:72:5f:5e:ba:de:f1:a5:a1:
         1d:9e:94:2d:48:10:00:44:ba:65:be:d1:93:6e:0f:b1:43:d6:
         89:e5:65:8e:41:a6:a4:7b:d9:91:2c:e1:7a:38:57:a8:2f:4d:
         a9:45:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:01 2026 by rpki-client