Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File:                     1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier:          xcYDdVNeuFm25Sg4gG4Suh8fRyrROdqDd+rmHf2uLyo=
Subject key identifier:   24:AA:67:95:23:83:5B:94:69:F1:09:82:D8:9C:32:3C:DF:1B:22:7B
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer:       /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial:       01A001DCAE2F8C42470F81B8403DF5A985B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number:          1945
Signing time:             Fri 14 Aug 2026 20:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:34 +0000
Files and hashes:         1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: hfNTKMEGO3xoe8x1W0VOfwHL+FDRMB/Rl0/yKVslf30=)
                          2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:ae:2f:8c:42:47:0f:81:b8:40:3d:f5:a9:85:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
        Validity
            Not Before: Aug 14 20:00:34 2026 GMT
            Not After : Aug 15 20:00:34 2026 GMT
        Subject: CN=24aa679523835b9469f10982d89c323cdf1b227b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:35:17:60:13:27:55:ec:33:71:0c:73:55:
                    7e:f4:3d:8d:66:8d:77:79:0d:e6:4c:51:3b:41:76:
                    c6:38:ab:f6:fb:68:08:e4:93:08:88:09:66:c6:80:
                    ac:7c:a7:c2:67:eb:64:91:4e:62:c1:42:ed:29:b2:
                    da:e6:bb:15:ee:79:be:cf:bd:59:04:78:48:7b:bf:
                    80:b0:66:71:18:41:09:52:64:66:df:8c:22:f1:02:
                    8f:fa:45:ca:b6:c8:1d:f3:05:5d:07:ae:44:d9:d0:
                    b9:97:7d:08:24:7d:d8:0d:dd:53:91:bc:93:48:89:
                    99:3e:3f:c5:70:28:08:3f:ce:cb:cd:6c:e8:66:19:
                    62:c9:a2:14:44:eb:c7:d5:32:ba:04:5d:98:56:33:
                    84:a3:22:e0:29:f4:04:e0:7b:ab:3a:f8:01:e4:99:
                    74:58:8c:86:8c:84:97:39:0e:8f:df:e2:d0:08:42:
                    b7:56:4c:eb:2c:71:07:9c:35:05:85:9c:80:1a:99:
                    ce:9e:ca:b7:58:c9:69:f8:8f:f4:15:21:e4:4e:21:
                    1f:c6:9f:cd:3d:5f:3e:fb:64:0b:ff:09:dd:58:72:
                    ba:b0:c0:44:ab:a5:e8:b2:aa:73:0c:5c:4b:6e:47:
                    98:6c:94:78:9a:f8:d4:d9:cf:21:40:08:4e:38:ce:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AA:67:95:23:83:5B:94:69:F1:09:82:D8:9C:32:3C:DF:1B:22:7B
            X509v3 Authority Key Identifier:
                keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:69:95:b5:88:13:f9:8f:1b:8a:05:d6:bb:82:39:53:5c:f9:
         4f:e7:ea:11:18:5d:2e:c8:ae:04:7a:27:a5:56:89:ad:7e:61:
         e8:b1:4f:dd:4c:27:b3:fe:df:d3:5a:0c:b2:11:10:c2:39:fe:
         6e:3a:ac:8e:ac:64:c1:64:8f:8d:cf:e5:38:09:c3:26:56:10:
         f7:b0:55:13:f8:bf:af:ba:b5:ab:ec:7f:8d:21:97:19:07:bd:
         54:0d:ab:ed:80:4c:c2:4b:1a:02:8d:85:79:03:d7:bf:f2:17:
         e2:62:b2:b2:36:3f:5b:d4:19:51:51:96:8d:57:e2:73:3d:09:
         84:05:42:d2:b1:fa:b3:e4:2b:14:ae:48:3c:b6:b6:42:09:0e:
         8b:d2:c6:01:6d:f1:5c:8a:44:ff:80:38:1d:8f:b1:3f:05:3f:
         50:5a:67:fa:09:ec:12:08:23:0f:34:d8:27:77:f3:7d:cd:75:
         34:21:15:aa:0e:ba:6e:95:da:8d:c6:99:70:40:ae:64:af:08:
         46:41:ee:ef:23:4c:7e:5c:8d:3c:7f:da:08:0f:64:6e:9f:83:
         d6:3c:1f:46:21:6f:fd:b2:e1:e9:29:5a:94:82:59:7a:18:03:
         8e:67:f6:03:e2:08:5d:bc:1f:24:b5:c5:00:ca:6f:c4:ba:32:
         26:96:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client