Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          ti1zYv5z8Z3chCZJSB40KjKd0UpxPAsmyjFrW3wZuAk=
Subject key identifier:   C7:78:55:F7:9F:1A:B7:FE:5B:C4:34:A7:A9:46:AE:7F:3F:25:C6:5B
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       019FCB9422FE1F2AC4CD4EB9078409614405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          19E4
Signing time:             Tue 04 Aug 2026 07:01:50 +0000
Manifest this update:     Tue 04 Aug 2026 07:01:50 +0000
Manifest next update:     Wed 05 Aug 2026 07:01:50 +0000
Files and hashes:         1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: EZb1fN+SssE/xIBoRVDDCu/tvptM4k61uaGlRdnGF8I=)
                          2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 07:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:94:22:fe:1f:2a:c4:cd:4e:b9:07:84:09:61:44:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Aug  4 07:01:50 2026 GMT
            Not After : Aug  5 07:01:50 2026 GMT
        Subject: CN=c77855f79f1ab7fe5bc434a7a946ae7f3f25c65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:25:81:ac:2b:e2:2e:c6:db:15:e2:c5:99:
                    58:9c:ba:fb:ca:09:93:4d:c8:bd:1f:7a:25:0f:08:
                    38:20:85:e0:f7:21:09:92:26:4a:7d:08:eb:dd:3d:
                    cb:99:0e:c6:ef:28:47:ab:20:b0:af:ca:35:01:0d:
                    03:8a:4d:51:3b:82:52:cd:0e:8f:ab:50:70:9a:96:
                    01:7a:ab:71:4a:21:06:be:37:6d:55:64:47:12:8c:
                    8d:2f:36:93:29:a8:f8:95:54:53:ba:d1:6f:13:46:
                    15:90:64:a6:d3:a9:70:31:dd:cf:61:a9:4f:ef:7c:
                    bd:dd:0a:f3:b4:f9:ab:c2:45:54:38:d5:59:45:31:
                    9b:cf:ed:d4:d3:c4:5d:40:28:a7:84:6c:90:c8:62:
                    bc:07:3e:6b:1b:07:06:3f:40:d5:e3:99:f6:e3:9d:
                    f1:03:06:b8:6c:11:7f:f2:e7:50:04:9d:d4:15:63:
                    1f:7f:a9:42:8d:05:fb:50:52:6e:3c:43:09:ac:b5:
                    99:17:4a:3a:26:64:2e:17:93:bc:4b:1a:62:e5:f8:
                    02:ad:a7:45:44:45:ee:7c:b9:a0:a4:e4:02:84:dd:
                    80:67:10:99:d6:38:e0:ae:49:e2:e1:3d:27:02:14:
                    f6:08:c4:ac:40:46:f5:b0:98:ca:a3:57:ec:94:5d:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:78:55:F7:9F:1A:B7:FE:5B:C4:34:A7:A9:46:AE:7F:3F:25:C6:5B
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:eb:3e:c0:ca:59:14:8a:e7:f3:3b:b1:d6:4e:ff:72:72:
         64:1d:51:e6:aa:16:23:f0:c5:13:bc:e3:49:94:71:df:7f:36:
         0d:74:ea:f0:7e:04:05:bb:85:12:c6:06:b1:33:59:40:4b:b7:
         4a:03:6e:91:ff:40:36:fb:62:25:40:87:67:6a:33:cb:89:52:
         da:47:aa:cc:c6:ab:7b:d3:15:1c:55:51:78:48:ee:b1:34:20:
         dc:b0:f2:8f:79:ec:0c:00:78:3d:c6:9a:75:87:ec:33:64:57:
         9a:32:69:44:74:b9:53:5b:e6:16:14:1f:7c:fa:fb:29:89:ba:
         3c:94:52:38:70:1b:46:3a:e3:56:86:95:0a:f3:4c:0c:a3:fc:
         41:50:2f:42:94:47:af:05:99:13:89:36:75:4a:76:09:8f:25:
         90:bb:7f:ef:ab:07:43:a1:be:dd:b3:5c:e1:98:dd:74:7b:76:
         ee:1b:3f:6d:65:9a:07:ca:c0:01:39:67:86:87:d0:7b:c7:b4:
         75:22:af:23:65:00:16:61:c3:5a:42:25:b7:99:0f:c6:ac:e3:
         95:9e:01:8b:74:d6:63:e7:df:88:67:5a:87:14:23:cf:60:0c:
         67:9b:29:02:33:41:3d:ef:14:26:fc:5c:6a:96:95:bf:4b:0d:
         89:57:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:03:30 2026 by rpki-client