Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/325908-e936-48e9-96d2-89ec99f012fa/1/dJHikzZqUY4hg3fE7YacNxYWPcU.mft
File:                     dJHikzZqUY4hg3fE7YacNxYWPcU.mft (raw, json)
Hash identifier:          xhGZZbzgJjJf/mYWB65lBk4jHYX+oCF1B88t8Wk88EE=
Subject key identifier:   AD:FE:4F:6E:D5:5F:4A:A7:E4:5E:C3:0A:35:6B:81:53:28:C9:97:4C
Authority key identifier: 74:91:E2:93:36:6A:51:8E:21:83:77:C4:ED:86:9C:37:16:16:3D:C5
Certificate issuer:       /CN=7491e293366a518e218377c4ed869c3716163dc5
Certificate serial:       019F81FA7088F23175F5845DD36323BAC35E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJHikzZqUY4hg3fE7YacNxYWPcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/325908-e936-48e9-96d2-89ec99f012fa/1/dJHikzZqUY4hg3fE7YacNxYWPcU.mft
Manifest number:          51
Signing time:             Tue 21 Jul 2026 00:01:41 +0000
Manifest this update:     Tue 21 Jul 2026 00:01:41 +0000
Manifest next update:     Wed 22 Jul 2026 00:01:41 +0000
Files and hashes:         1: dJHikzZqUY4hg3fE7YacNxYWPcU.crl (hash: 3cwjwy1hTSXatI9GcbI1w8QuzmmHoy0OW2Vmst8Zh58=)
                          2: nguU51ge5VNURWoHEY76bYuUOm4.roa (hash: 1hzNHuXc2A/baj/e0gVczcXF17PEHkibaNmVXmHpnpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/325908-e936-48e9-96d2-89ec99f012fa/1/dJHikzZqUY4hg3fE7YacNxYWPcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/325908-e936-48e9-96d2-89ec99f012fa/1/dJHikzZqUY4hg3fE7YacNxYWPcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJHikzZqUY4hg3fE7YacNxYWPcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:fa:70:88:f2:31:75:f5:84:5d:d3:63:23:ba:c3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7491e293366a518e218377c4ed869c3716163dc5
        Validity
            Not Before: Jul 21 00:01:41 2026 GMT
            Not After : Jul 22 00:01:41 2026 GMT
        Subject: CN=adfe4f6ed55f4aa7e45ec30a356b815328c9974c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:ba:c9:65:a6:8a:b7:5c:83:06:c9:da:ef:
                    d6:43:7f:d3:a5:a4:f9:a6:07:84:5f:23:75:83:65:
                    97:8c:d4:4c:d7:e7:de:50:ef:98:f6:b2:e0:aa:ab:
                    2d:74:d7:db:85:db:de:03:15:69:02:73:3c:2b:04:
                    af:94:e9:cf:2b:7e:58:d7:a7:00:0b:da:8c:a4:48:
                    69:b8:d8:f3:1e:8f:1b:1e:a2:fd:41:ca:f6:a5:9a:
                    6b:cf:9d:17:12:0b:8b:08:46:90:48:d8:c1:e8:40:
                    f9:80:ba:0d:16:2e:ed:ca:74:9d:c0:3d:57:1d:6a:
                    1b:e4:0a:47:c3:f5:11:cb:12:88:26:7c:d4:18:8d:
                    ca:ac:97:08:a7:8b:e5:8a:0b:dd:10:13:94:38:ad:
                    d4:40:d1:0a:8e:31:bc:03:aa:59:4f:61:c4:64:b8:
                    2b:af:21:0e:f2:04:34:ef:63:91:64:8d:b5:0b:25:
                    f9:b6:7c:d6:bc:34:1f:a8:be:1f:e6:9c:8d:67:21:
                    cd:d4:19:96:21:75:7e:fd:a2:3f:2f:dd:e2:f0:3c:
                    71:eb:68:1b:e7:cb:ba:73:5c:ea:ca:be:55:83:00:
                    4c:86:0a:1a:cd:78:ce:3e:62:84:8e:a6:58:6f:d3:
                    54:8d:67:59:b6:eb:09:c2:be:70:27:4e:8d:86:2a:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:4F:6E:D5:5F:4A:A7:E4:5E:C3:0A:35:6B:81:53:28:C9:97:4C
            X509v3 Authority Key Identifier:
                keyid:74:91:E2:93:36:6A:51:8E:21:83:77:C4:ED:86:9C:37:16:16:3D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJHikzZqUY4hg3fE7YacNxYWPcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/325908-e936-48e9-96d2-89ec99f012fa/1/dJHikzZqUY4hg3fE7YacNxYWPcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/325908-e936-48e9-96d2-89ec99f012fa/1/dJHikzZqUY4hg3fE7YacNxYWPcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:04:f3:19:09:80:13:ff:60:3c:58:c7:9d:d8:b2:6d:9a:
         1c:7f:f2:b6:d9:42:aa:8e:64:ae:12:04:7e:5c:28:ad:8e:c7:
         d5:53:b0:20:7d:be:12:b1:a6:c3:e7:f7:29:7d:c7:31:33:c4:
         bd:a2:42:be:18:af:39:c6:03:95:08:42:25:dd:d5:9c:e5:66:
         1b:89:88:89:b2:e6:97:cb:fa:a1:9f:1d:8b:f9:1f:bc:c0:d3:
         a1:c9:d9:f7:f5:0b:91:3d:52:89:26:af:24:a3:e2:9c:ea:6d:
         b1:df:59:c2:ba:cf:30:21:d1:02:88:b3:4c:02:77:20:f7:83:
         18:53:9d:24:46:0b:54:4f:ea:b6:e3:ce:72:16:4c:be:91:0d:
         f5:fa:10:ba:c5:cf:bb:2f:12:0a:2a:9f:b6:1c:8a:87:02:10:
         d6:75:55:48:3f:a4:ea:7a:5b:dd:60:5c:fb:e5:6f:44:53:fa:
         64:a4:8b:5e:89:50:45:c1:54:39:42:80:5a:c1:36:25:f0:6d:
         7f:2f:a2:ff:bb:47:84:15:3b:6a:da:68:4b:44:58:db:33:0a:
         05:e7:3d:a1:d1:d8:85:0d:33:90:39:11:13:87:21:08:99:b3:
         a3:50:dc:c7:c8:0a:92:35:49:91:ed:28:d1:70:bf:35:af:19:
         28:49:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:02:32 2026 by rpki-client