Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File:                     pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier:          LXbJNezbYkIf0IUiVwlD8ChnoK6vy3Z8BVLWMPQTkKo=
Subject key identifier:   65:B7:44:7A:AB:0B:72:8D:A4:AF:E0:33:87:ED:22:98:A1:39:D5:02
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer:       /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial:       01A001DD6B3C71BA4B3A6ED06002D20D01BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number:          9E
Signing time:             Fri 14 Aug 2026 20:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:22 +0000
Files and hashes:         1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
                          2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: oHlIzatuq1qXmKjA/IpPjRmcJx2eJh+KK8O5UEDPe/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6b:3c:71:ba:4b:3a:6e:d0:60:02:d2:0d:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
        Validity
            Not Before: Aug 14 20:01:22 2026 GMT
            Not After : Aug 15 20:01:22 2026 GMT
        Subject: CN=65b7447aab0b728da4afe03387ed2298a139d502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:9f:8d:d6:82:71:e1:ab:fd:41:70:74:4a:
                    e1:7d:9d:ad:eb:34:4e:67:e1:cd:26:eb:55:e6:d5:
                    8b:f6:5e:04:e2:d3:a5:bf:b5:e4:47:50:d1:31:9d:
                    0d:0c:27:9a:bd:a1:28:8c:58:91:84:9e:59:23:46:
                    ae:cd:e2:49:bc:b0:61:8e:6c:81:19:bc:1b:a1:b4:
                    67:b5:fe:50:64:c2:b6:9f:51:87:b0:a0:2e:af:71:
                    1c:ab:0c:f2:38:5e:aa:15:df:9b:3b:8e:f3:06:84:
                    46:98:16:27:d7:db:be:04:71:7d:4c:9d:bc:83:77:
                    9a:f6:9c:f8:93:8f:3a:8a:7f:3d:6e:f6:b6:ef:0e:
                    45:08:4b:e9:15:df:42:0f:cb:63:f1:95:db:c0:68:
                    10:28:09:d1:1f:26:42:02:57:26:81:c8:39:c0:a1:
                    9d:f2:9b:fe:7a:a9:07:7c:27:e7:45:71:30:8a:95:
                    2d:f4:12:fa:f0:82:f4:97:02:48:d4:9d:8b:41:ac:
                    2f:c3:0a:8c:7d:af:5f:39:5d:63:1b:25:3a:67:fd:
                    e2:8b:97:9f:29:5d:3b:e4:1a:62:59:0c:c6:d7:71:
                    ff:70:3c:e3:2f:01:aa:90:66:75:a7:8d:8f:ee:f0:
                    96:04:fd:99:ec:81:ef:08:58:d4:53:47:59:17:f9:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B7:44:7A:AB:0B:72:8D:A4:AF:E0:33:87:ED:22:98:A1:39:D5:02
            X509v3 Authority Key Identifier:
                keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:18:07:35:d0:56:b3:cd:a1:1e:99:65:22:2e:26:b1:3e:79:
         7e:8c:dd:46:0c:3f:29:cd:84:4e:a5:d8:89:f1:98:6d:0e:8a:
         f8:bb:be:48:06:62:8f:10:85:3b:12:59:a0:51:19:66:af:c3:
         27:83:62:57:b5:58:f5:39:0d:cc:40:ac:e2:31:65:24:60:6a:
         8a:cf:3c:4b:b4:80:13:23:fd:44:d0:f8:44:66:f8:c2:b5:e5:
         38:c3:8e:58:27:9c:76:7b:20:4a:1b:ca:6e:23:3d:54:18:e8:
         fb:16:e9:23:ba:6d:d0:65:3b:2d:dc:4e:f1:67:ce:ef:6a:fe:
         6a:5d:2f:bb:d3:34:fe:63:27:14:50:f4:3a:74:7a:b7:61:e3:
         26:37:76:0d:20:a3:67:40:d4:5b:14:4d:aa:70:bd:e0:d3:fc:
         99:f8:60:78:21:58:6e:46:ba:0f:4c:b3:4b:13:4d:cf:ca:07:
         61:8e:f5:3f:51:46:87:8a:9a:a6:30:2d:cb:d2:3f:1f:a1:0b:
         7f:f0:9e:12:5d:22:a9:42:3f:70:17:99:fc:4d:ab:bd:12:5f:
         82:1e:7c:58:6d:66:f6:4b:bc:56:41:f6:79:0e:2c:f9:68:86:
         91:28:bc:dc:c5:b5:85:af:9d:af:27:e6:76:e3:a3:ce:45:b3:
         28:27:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:21 2026 by rpki-client