Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File:                     d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier:          7FfE5+ovXC1jJenCscx220viG37dRX2X8RjWw4d6V00=
Subject key identifier:   74:0E:3E:BB:4F:69:94:87:50:59:68:5F:0F:DB:9C:46:FD:6F:63:C4
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer:       /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial:       01A03F72570D5E2D7099CB50329D136900B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number:          08FD
Signing time:             Wed 26 Aug 2026 19:00:53 +0000
Manifest this update:     Wed 26 Aug 2026 19:00:53 +0000
Manifest next update:     Thu 27 Aug 2026 19:00:53 +0000
Files and hashes:         1: GZzLxFCp1bVkiSpEsTLVVr4H9XI.asa (hash: ivqvyTFoXDuekBB8qUC8sgSfxDY8iNPCYAvAp+TmOlY=)
                          2: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: Z+Kyvc8FXob6ABzsIC5UnbXbbvq3jhRCnP7VQiqra6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:72:57:0d:5e:2d:70:99:cb:50:32:9d:13:69:00:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
        Validity
            Not Before: Aug 26 19:00:53 2026 GMT
            Not After : Aug 27 19:00:53 2026 GMT
        Subject: CN=740e3ebb4f6994875059685f0fdb9c46fd6f63c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:e9:f6:af:df:8d:e8:04:6a:73:69:3d:fd:
                    22:4c:eb:df:ae:fe:39:ac:c1:6b:16:d5:92:80:ef:
                    e5:10:18:a5:5d:89:a0:85:b0:79:98:31:37:01:5a:
                    51:67:1c:25:26:b0:26:1e:1e:49:b0:2f:89:30:1b:
                    15:39:48:d8:49:91:3d:c0:ff:ba:da:11:e7:70:e4:
                    61:fd:85:10:38:dc:6f:1a:a4:9c:2a:c2:f9:c8:20:
                    34:3e:a3:0e:b8:3a:e4:20:fe:0a:12:a7:d6:63:3e:
                    71:d7:2d:7c:94:13:a0:1a:de:20:1f:78:58:c2:13:
                    3c:88:b6:5c:e5:8b:2a:ad:34:28:1d:21:7e:7a:b5:
                    47:fd:44:bf:89:b3:67:be:c4:4f:39:bb:e5:f3:0b:
                    39:06:77:16:d0:59:aa:ed:38:09:71:35:57:6a:94:
                    e9:4f:18:b8:ca:15:31:1b:62:df:2a:c7:60:a4:9f:
                    02:a3:92:66:28:00:d3:6d:a1:c6:64:60:30:e6:61:
                    66:83:16:d8:2a:17:9c:ef:78:46:93:57:c2:de:a2:
                    8d:85:e6:ae:95:1a:db:db:11:07:e0:c8:e5:b4:91:
                    78:c4:47:7d:64:cf:d5:26:2e:fc:8c:f8:b2:13:49:
                    b5:af:d7:1c:06:f2:09:a7:2a:a3:8b:d1:33:4e:a4:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:3E:BB:4F:69:94:87:50:59:68:5F:0F:DB:9C:46:FD:6F:63:C4
            X509v3 Authority Key Identifier:
                keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:fa:43:31:48:b5:64:e4:f6:a6:36:b0:a9:a3:90:7f:67:
         4e:39:f6:8b:e9:88:4b:78:58:46:e6:08:40:7b:66:72:81:37:
         2f:c3:f9:e9:e5:3e:20:8f:85:90:b1:b6:0f:3b:59:df:cc:db:
         73:f3:37:01:c3:0a:5f:24:62:04:04:50:82:4d:5c:a2:ee:9b:
         24:aa:c1:cb:6a:fe:61:93:6a:fd:c0:2d:34:08:4c:24:07:c4:
         ae:fc:51:00:1b:b3:d7:f4:32:70:6b:d0:89:ff:f1:d0:03:63:
         9f:55:e4:8c:34:ce:02:da:a3:5b:58:8c:f8:83:c9:cc:f6:93:
         34:71:ef:56:1e:27:01:aa:13:d7:1c:3e:c6:53:60:12:aa:a5:
         d7:19:a6:54:5f:16:37:ac:61:b1:82:67:0c:29:cd:08:e2:4a:
         65:b7:17:2e:03:89:d4:d5:64:61:bb:7b:6a:c4:76:ba:03:d4:
         c7:2f:bf:3c:a0:54:32:7d:0f:01:16:b2:11:fb:10:24:55:79:
         7a:7d:13:27:71:76:0a:17:cc:07:38:30:3c:cf:6a:b8:3a:cd:
         a2:46:8e:2b:48:80:b5:24:09:b4:1e:03:78:bd:53:1b:72:21:
         7f:90:35:fc:63:06:3c:83:6b:11:cc:14:ff:c6:d6:dc:c4:38:
         d2:31:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:37 2026 by rpki-client