Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File:                     1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier:          dAVDqilRGSXWbUwQTJ+Glx4vo0Q2MyhYsRXzOLn4dCI=
Subject key identifier:   28:FA:23:C4:1B:C6:15:45:F1:29:78:BB:13:B6:E5:00:EF:1C:4E:72
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer:       /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial:       01A0005C7BB642F61499AB92ED15037E3C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number:          0789
Signing time:             Fri 14 Aug 2026 13:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:56 +0000
Files and hashes:         1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: YJyVxM5G2UbrAoLeJYv2HhwsllDtGlTDbAICf7wqR6g=)
                          2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:7b:b6:42:f6:14:99:ab:92:ed:15:03:7e:3c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
        Validity
            Not Before: Aug 14 13:00:56 2026 GMT
            Not After : Aug 15 13:00:56 2026 GMT
        Subject: CN=28fa23c41bc61545f12978bb13b6e500ef1c4e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:73:46:69:49:aa:65:38:75:97:b4:80:a0:
                    31:28:af:c5:6f:05:c0:05:81:2b:54:cc:25:fc:63:
                    23:25:10:74:3d:df:05:48:0f:73:56:57:a9:77:fc:
                    43:72:df:b5:cf:ad:30:16:10:a5:d4:9d:30:9b:cf:
                    ba:40:b2:95:ba:71:b8:c6:0b:c5:6f:7a:8f:15:08:
                    ab:bf:ea:9c:e4:65:a0:09:3f:df:4c:61:e1:0b:b7:
                    c6:7b:d8:2e:4f:14:6d:97:dd:14:f6:67:9b:c2:b7:
                    9a:0b:60:21:4f:c2:31:9c:d2:09:75:ec:bc:14:45:
                    c9:11:e1:03:f4:32:10:66:a1:00:cf:34:7d:d8:fb:
                    23:63:ce:5e:71:44:01:b9:cb:7f:08:dc:38:1f:f1:
                    cc:3f:28:24:18:38:ce:4f:a0:bb:bf:68:e0:12:3b:
                    fb:18:3e:f3:fe:b7:d5:08:89:bd:83:25:f6:7d:57:
                    76:02:eb:ba:66:37:f0:91:a8:af:fa:b6:27:d2:af:
                    52:ea:f1:21:23:25:b0:37:ae:97:a9:11:7a:17:04:
                    2a:39:bc:14:93:fb:93:ae:c6:ef:88:36:99:0a:00:
                    7f:c1:40:4d:ec:7d:60:85:6b:5d:21:d7:b8:1d:32:
                    20:59:76:12:c3:86:63:78:92:fd:9e:cf:da:3c:05:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FA:23:C4:1B:C6:15:45:F1:29:78:BB:13:B6:E5:00:EF:1C:4E:72
            X509v3 Authority Key Identifier:
                keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:34:ac:95:ee:07:ad:c7:e1:cd:ee:1e:89:95:00:3b:db:13:
         95:40:bd:84:af:93:e9:af:7f:cf:80:85:16:83:26:b7:60:a4:
         a6:25:ce:cd:67:6d:72:80:92:f4:5c:2d:31:b4:5e:ec:58:1c:
         1d:11:13:f9:18:b9:f8:bd:bd:f3:88:b5:40:6c:d1:c4:f5:1e:
         c2:5b:6c:99:31:43:6e:5e:38:26:d4:2a:b2:21:78:2e:92:19:
         14:7c:b2:63:e9:f6:a7:b9:e6:d4:0b:75:30:c6:0e:95:4b:42:
         b9:02:4b:64:b8:3d:44:5a:b1:a6:ff:2c:ce:ba:22:d8:9a:02:
         df:b9:66:a3:41:a4:eb:c1:f0:2c:1a:ba:84:ad:82:74:c9:da:
         64:71:bc:18:27:77:57:9b:e1:72:82:e4:82:f4:d0:b2:17:c5:
         32:6f:05:ab:53:fd:0b:84:f8:af:15:46:9b:44:f1:44:f0:b2:
         13:d6:25:ef:54:cc:ee:b1:0a:c8:49:f3:cb:e5:27:2e:c1:a8:
         aa:f0:b4:98:9b:70:3e:48:a6:86:4e:51:7b:7b:8a:9f:e3:74:
         e0:6c:0a:fb:c4:a0:a7:d2:40:1a:e4:6b:65:d4:07:03:53:3d:
         c5:82:65:d3:8d:52:67:96:7f:90:cc:4f:5c:5c:51:52:d7:a6:
         d7:06:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:56 2026 by rpki-client