Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File:                     MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier:          3u9XW5Wi/rd6RbmRMmtw+6x5FjVrKfwF3G8ZiYFa5o8=
Subject key identifier:   3E:22:DB:B5:3E:E2:5D:AF:77:80:79:4A:EB:20:36:DE:50:6F:61:AE
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer:       /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial:       019FF9ED65430D49FF4ECE2F612EC0C867EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number:          0728
Signing time:             Thu 13 Aug 2026 07:01:52 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:52 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:52 +0000
Files and hashes:         1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: JpixwjIkf1Vt2fRZhWOmC9mxAmK175ydFszl+OkWmS8=)
                          2: kiYvW45_WESo09z9DDPWp3aMKvk.roa (hash: o2aI0HzhoCPi6LjvBwdhvtbnQjp7uz8yNBS4PhNW0AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ed:65:43:0d:49:ff:4e:ce:2f:61:2e:c0:c8:67:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
        Validity
            Not Before: Aug 13 07:01:52 2026 GMT
            Not After : Aug 14 07:01:52 2026 GMT
        Subject: CN=3e22dbb53ee25daf7780794aeb2036de506f61ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:b8:b2:77:74:68:b2:80:13:9a:ce:e5:35:
                    c8:4d:c5:10:64:f9:a2:50:b0:16:26:48:44:9a:dc:
                    be:e2:5a:c2:ff:f3:b8:ac:c5:76:10:13:fb:6e:71:
                    7a:92:bf:1a:83:9a:33:00:bd:86:45:d0:23:25:22:
                    7b:2e:99:53:1f:89:28:fe:25:b8:ad:65:20:c4:74:
                    86:f5:0e:7c:1f:96:61:38:cb:03:01:a2:c5:97:39:
                    72:81:80:31:25:dc:c8:71:89:4a:4e:7b:66:7e:dd:
                    5e:b8:a0:23:f0:38:07:9c:3d:d9:37:48:ae:31:bb:
                    3b:3d:b4:5f:78:d7:ce:1c:a4:ab:ce:f0:a5:3f:d6:
                    ad:56:5e:ba:83:e5:57:a8:d0:c3:e5:b4:70:8d:72:
                    d1:3c:ea:3b:ad:bf:d0:bf:47:c5:43:c4:33:da:b0:
                    12:e1:e2:9b:14:81:38:ca:5b:f5:66:7a:86:e6:95:
                    af:b6:73:db:b6:99:51:83:ba:63:44:c2:f7:f8:c5:
                    3a:21:75:12:56:de:6b:ae:3c:48:72:16:13:24:a9:
                    fd:b4:dd:61:37:5a:40:c9:6b:19:0f:43:70:ab:15:
                    ac:53:07:3d:e9:88:49:b1:b5:d8:05:f7:a5:bc:d8:
                    f0:93:f9:c1:c4:15:4e:e5:9e:3e:41:3f:b7:c9:76:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:DB:B5:3E:E2:5D:AF:77:80:79:4A:EB:20:36:DE:50:6F:61:AE
            X509v3 Authority Key Identifier:
                keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:54:79:2e:39:ea:2a:13:01:92:3e:39:3b:12:9f:20:f4:
         a9:56:d1:18:38:96:5b:7b:b5:d4:06:6b:fc:68:3c:70:1b:3e:
         1b:cb:e8:98:4a:0a:37:58:11:db:3f:5d:53:0b:18:b1:e0:6f:
         ed:2f:71:60:b3:ba:6d:e9:c0:9a:88:7b:96:d9:28:bc:f5:1f:
         ee:98:52:c5:6f:04:93:e3:f3:39:e2:84:b4:1d:e2:67:0e:ad:
         fd:7d:67:5a:e6:a1:ae:7f:1f:2a:92:53:f9:07:04:38:69:a4:
         3e:f9:11:f9:be:a2:43:82:44:f9:1d:51:43:f1:e6:c1:d6:78:
         99:83:28:42:56:57:b4:f2:f9:d1:42:dd:dc:5b:3c:c3:e8:c2:
         99:b1:1f:2f:8f:30:ac:0d:3a:25:a9:29:10:99:80:74:a2:c3:
         7b:22:3d:c2:93:40:03:28:32:2a:5f:66:ba:4b:52:d0:b1:51:
         51:63:6a:68:ff:85:19:db:5c:a0:fc:ed:be:2c:2a:e6:b5:fd:
         b6:84:42:b1:ea:5b:4d:02:e6:24:8b:35:70:6e:27:25:6b:2f:
         17:c4:a8:e4:bd:2a:2f:18:02:32:35:e0:3d:60:f9:03:69:bc:
         31:fc:e2:85:d3:89:1e:88:e1:9e:9d:43:7c:47:d4:5f:76:56:
         69:8e:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:48:49 2026 by rpki-client