Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File:                     CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier:          vD/HOlvEQ7S371sXeyisfTd+Q4MnVZ25DgQRlJx7vas=
Subject key identifier:   9E:62:AD:14:5A:C0:BD:45:84:E6:AC:FF:0B:26:E4:FA:91:7D:77:86
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer:       /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial:       01A0024B8F03E4CD2FEA645578E5D1F19053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number:          1742
Signing time:             Fri 14 Aug 2026 22:01:41 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:41 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:41 +0000
Files and hashes:         1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: aTwDqe1DY1OS7hnrNx98qUP2y7CahUmSvhbB4snMS74=)
                          2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:8f:03:e4:cd:2f:ea:64:55:78:e5:d1:f1:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
        Validity
            Not Before: Aug 14 22:01:41 2026 GMT
            Not After : Aug 15 22:01:41 2026 GMT
        Subject: CN=9e62ad145ac0bd4584e6acff0b26e4fa917d7786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:78:81:23:ba:68:75:1a:88:c5:73:c9:13:
                    7a:b7:59:f4:21:fa:25:2e:51:13:f2:53:cc:a7:71:
                    b6:a4:c4:45:b6:9d:5a:92:39:d8:4f:a8:ed:2b:28:
                    21:ff:67:0e:2d:ad:d0:b3:c2:dd:ef:58:f2:c6:5f:
                    86:07:26:01:53:df:9b:fd:c4:c6:97:2b:32:4a:7a:
                    4b:2d:57:2c:9e:5c:62:3e:dc:53:06:f4:84:36:fb:
                    96:5d:c4:70:15:53:da:1d:33:72:0d:92:51:62:86:
                    af:78:a6:28:95:7a:6a:48:c5:90:c0:3d:f0:c6:cc:
                    5c:20:61:6c:29:75:03:b8:1f:dc:a2:dd:24:8f:54:
                    d2:1f:ca:ba:48:9d:04:2d:67:f4:cc:91:db:b5:fb:
                    c9:57:91:18:86:6f:0d:55:f2:d2:1b:7c:bd:94:b9:
                    26:d4:57:56:c8:41:a0:4b:f0:77:d9:bd:a9:62:2a:
                    33:81:fa:44:0a:01:e0:3b:31:3d:36:4f:95:a5:26:
                    7d:99:e9:55:01:fc:de:e3:ac:30:e4:67:b5:37:0e:
                    d2:44:d9:d8:39:3e:a7:f8:3c:41:04:66:c1:5f:10:
                    e0:a9:6a:96:26:9a:00:45:89:b3:90:f7:aa:41:2d:
                    b5:d9:e4:5f:e6:49:e0:75:6e:18:a8:15:3d:0a:e6:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:62:AD:14:5A:C0:BD:45:84:E6:AC:FF:0B:26:E4:FA:91:7D:77:86
            X509v3 Authority Key Identifier:
                keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:19:cf:f2:3d:22:a8:30:0f:1c:92:4a:24:8d:06:97:b5:d2:
         fd:0c:4d:60:8b:bc:46:2f:28:2b:5c:b3:50:25:c7:bb:ff:a3:
         97:ef:4a:1a:d4:fa:bd:4c:65:6d:15:94:e1:ef:2f:25:fb:e1:
         90:c9:c9:50:ed:2b:8c:28:39:89:35:d4:dd:81:5c:a1:68:95:
         f6:f3:62:83:fe:e5:a2:5d:6e:96:0b:46:9c:2a:57:62:f2:6d:
         10:8f:7c:f9:ec:b2:f0:f0:61:5f:1a:1a:1f:04:22:2d:83:0a:
         36:b8:c3:7a:5a:d7:c2:44:19:bd:1c:53:8d:a8:64:a9:6e:bb:
         d7:16:37:36:9d:b3:3e:73:6c:51:f0:0e:ee:82:a6:47:e0:2e:
         c6:e2:5f:63:0e:c8:9e:d4:27:c1:13:34:e1:52:0a:07:62:0d:
         65:6a:95:b1:a2:76:19:97:98:29:17:d9:53:bd:e7:e7:33:7a:
         d3:d7:2d:7a:5f:5c:f8:6e:89:63:7f:53:a1:65:7a:00:47:16:
         02:14:95:3c:2b:52:70:02:10:ba:9d:8d:9d:4d:2b:4c:91:9d:
         1c:37:f0:47:d1:3b:6d:29:a3:0b:51:fe:11:8d:76:c1:7c:f9:
         48:8e:fa:1f:c0:16:de:d9:b8:92:87:13:55:b7:a0:6e:2f:cc:
         20:63:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:27 2026 by rpki-client