Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File:                     335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier:          lC9ZYtePEk+Q54FOMAFwRK38V9nBSmaWRPNzkKgm7iY=
Subject key identifier:   2A:F2:24:10:26:87:A8:00:F6:4B:28:E3:B3:69:A1:57:B1:46:51:A0
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer:       /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial:       01A0024AC95DDFA72CAF166F5CA05C922B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number:          0F09
Signing time:             Fri 14 Aug 2026 22:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:50 +0000
Files and hashes:         1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: BlkquCsvKMb4fJ4GkEAgeZJNVUWA/MBIJURhb4oSgLY=)
                          2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:c9:5d:df:a7:2c:af:16:6f:5c:a0:5c:92:2b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
        Validity
            Not Before: Aug 14 22:00:50 2026 GMT
            Not After : Aug 15 22:00:50 2026 GMT
        Subject: CN=2af224102687a800f64b28e3b369a157b14651a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:6e:38:e3:54:ec:6a:71:57:c0:2e:b3:7e:
                    b3:cd:35:55:90:81:18:0b:d7:81:07:ac:30:93:3f:
                    8f:49:48:19:02:4d:d5:91:0d:3f:37:01:06:5e:07:
                    63:84:19:22:fe:2f:14:dd:64:61:e1:7b:2b:26:49:
                    00:da:0f:83:1e:1d:2d:2f:48:cf:bd:04:55:3f:0f:
                    1d:87:49:4d:c1:78:31:84:86:bb:55:24:75:be:c2:
                    03:95:3b:ce:1e:05:c4:e3:40:08:7d:2f:8f:98:ff:
                    3b:a4:77:75:08:6e:16:5c:dd:7e:f4:bf:43:cb:19:
                    e4:1f:c5:78:49:c4:a7:47:33:a3:a4:c2:8a:78:78:
                    d9:ea:f3:00:5a:e1:46:80:9e:c5:47:1d:1d:c7:b5:
                    62:e3:fc:c7:76:ee:0e:5b:a5:d3:7b:14:f1:15:79:
                    b6:c3:e3:ce:8e:32:13:f8:67:51:a4:b2:ce:7b:65:
                    55:76:28:c2:52:be:2e:a9:54:22:05:43:e8:c7:0a:
                    7b:95:f1:38:bf:b3:70:1d:3d:d2:94:48:79:00:a5:
                    f4:b2:1d:82:4a:6e:fa:4c:09:46:49:d4:8b:1d:fd:
                    c8:9c:f9:7b:d8:10:96:0f:24:0b:0a:73:e2:28:47:
                    6d:19:a6:6d:e7:b7:96:53:db:7f:80:78:60:40:ad:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F2:24:10:26:87:A8:00:F6:4B:28:E3:B3:69:A1:57:B1:46:51:A0
            X509v3 Authority Key Identifier:
                keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:b7:29:f8:6e:3c:a8:a8:fa:9a:23:74:7f:29:da:d1:ed:
         1b:fb:bf:3a:5a:b6:b4:7f:d6:da:aa:14:c6:8b:c9:1b:01:32:
         30:11:60:d9:0c:74:e4:9e:cb:1b:f2:31:d1:b7:79:57:f8:83:
         41:df:4c:b9:b5:e6:3a:e7:23:9a:b1:df:29:0b:92:18:70:1f:
         a8:3b:e4:7f:65:a0:e3:90:8a:f3:ed:dc:1d:52:59:2e:63:5a:
         57:53:f5:7c:98:e1:7f:4d:1f:81:9b:21:01:a8:5a:5b:4a:2e:
         88:1a:e1:44:38:7f:0c:d0:d7:96:2f:2c:f6:42:0e:79:7f:d6:
         58:33:ee:63:3d:25:8a:ba:bd:0a:20:01:b5:2c:39:36:95:76:
         c1:d6:2b:95:8c:6c:55:bf:1f:6a:eb:00:34:f2:b2:c9:8f:46:
         fb:62:fd:02:e3:d8:86:83:61:28:95:5f:a5:9d:5d:e5:05:c4:
         ec:5c:68:50:f7:d3:30:7c:95:28:06:45:54:4f:8c:e9:14:4b:
         54:f1:ab:7c:b0:44:d1:cc:05:b8:bd:b3:fa:a1:83:25:27:bd:
         13:14:ab:15:4c:a9:20:48:d4:3b:d1:94:2c:0f:5e:21:ed:d7:
         33:eb:01:7a:8a:b7:6b:b7:71:1f:07:5e:56:6e:d8:0e:18:a9:
         a4:7c:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:59 2026 by rpki-client