Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File:                     tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier:          fOnTi6DoQDgatJNo8wgAXYfJCltmC05CoW7sMOCYx1g=
Subject key identifier:   1D:34:5C:2F:BB:55:2A:C6:15:8F:13:16:CF:64:FE:14:A0:0C:F4:CA
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer:       /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial:       019FCBCB1061AE1AF8E3EDC12CC18DFC2FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number:          0CD8
Signing time:             Tue 04 Aug 2026 08:01:50 +0000
Manifest this update:     Tue 04 Aug 2026 08:01:50 +0000
Manifest next update:     Wed 05 Aug 2026 08:01:50 +0000
Files and hashes:         1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
                          2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: L/mUTe9VrnHhPzehk6OaDm52PY756B4eIiU/rB8qSvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:cb:10:61:ae:1a:f8:e3:ed:c1:2c:c1:8d:fc:2f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
        Validity
            Not Before: Aug  4 08:01:50 2026 GMT
            Not After : Aug  5 08:01:50 2026 GMT
        Subject: CN=1d345c2fbb552ac6158f1316cf64fe14a00cf4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:7f:b9:3e:d4:3d:7e:48:c6:ac:7a:b8:50:
                    27:fc:45:73:63:c1:93:e9:e2:43:22:49:cf:16:ce:
                    a2:95:37:c5:ab:67:56:5e:37:ad:3c:7d:27:65:ab:
                    9c:73:52:27:04:8b:39:28:9c:49:a2:09:12:5a:81:
                    a4:31:b0:0a:a8:51:ad:23:5f:84:98:07:42:f1:52:
                    34:2d:8b:32:87:7f:ef:b0:99:5f:d4:37:fb:1f:d8:
                    d1:82:4e:69:9a:57:2e:67:0a:1f:e4:46:48:50:b4:
                    a7:2f:1a:ca:01:0b:8f:c4:ab:ee:4e:4b:11:6f:d6:
                    59:16:cd:c5:81:e8:6e:ef:10:4f:8d:39:11:02:1c:
                    0d:53:a0:d6:df:63:75:fb:d9:6c:6a:e2:c4:d6:16:
                    60:68:52:b8:27:51:3f:46:86:22:05:c2:c1:f9:87:
                    ce:34:15:8a:a9:3b:98:da:0e:4c:df:c9:b9:1b:b6:
                    f5:31:48:61:6c:c7:06:c0:8a:0c:93:b3:79:dc:da:
                    4f:2c:4b:94:68:e6:02:fa:c1:97:e6:7d:2c:41:57:
                    e6:f5:12:8c:93:21:80:a2:34:7c:b4:f0:d2:31:f1:
                    5d:85:a3:af:2a:38:db:cb:e6:e2:e2:ac:5e:36:ab:
                    17:d2:9a:00:8c:8b:7c:3d:78:80:dd:fc:3e:3a:23:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:5C:2F:BB:55:2A:C6:15:8F:13:16:CF:64:FE:14:A0:0C:F4:CA
            X509v3 Authority Key Identifier:
                keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:69:fd:8c:5a:57:57:9b:ee:3d:0f:71:76:ed:ee:61:d4:48:
         bb:77:2d:12:0a:9c:c3:ba:e7:d8:91:28:8f:2b:08:4a:38:92:
         28:53:c9:10:2c:9e:8d:e5:e0:37:ee:a4:31:e2:df:b4:65:75:
         ff:3e:30:35:6c:b6:c3:5f:42:18:38:a4:a5:a4:1e:92:63:5d:
         70:49:2a:d9:8e:96:28:08:ab:f2:90:89:b9:f8:cb:47:14:8d:
         16:94:c4:ea:b6:b6:1a:6d:00:63:35:74:af:11:5b:06:27:53:
         c5:04:ea:a1:fb:6c:ac:f9:71:f6:63:ac:fb:8c:38:28:ae:f3:
         8b:11:de:c1:3d:29:c5:dd:d4:3d:cd:c7:ed:1e:0d:2d:c6:2b:
         e5:07:ea:dd:3e:f0:92:16:42:8e:59:70:7c:c0:51:c3:1b:3b:
         2d:c7:18:4c:2a:d6:e5:53:42:a9:85:27:57:26:e8:71:ef:c3:
         75:ff:5e:10:f2:ac:24:6f:53:76:0c:b1:74:7a:76:a1:62:bc:
         c3:db:6a:d8:0d:b6:d3:9e:5d:98:ce:b0:33:1f:d2:de:c9:79:
         a0:6d:ff:3a:cf:9d:ba:63:25:8c:98:d4:70:cd:02:ee:16:eb:
         a8:2a:97:84:98:b8:1a:a4:c9:1e:b3:18:fd:8b:37:cc:d7:50:
         6a:e3:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:00:50 2026 by rpki-client