Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File:                     d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier:          KedEJlvdf5MmgPPeUUsmJW8zWs/ZZF0JXBtQVdTzvuk=
Subject key identifier:   0D:1B:71:A5:B1:51:41:D0:5F:0A:A3:8D:E0:56:FF:36:90:49:47:23
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer:       /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial:       01A03B960F63C701F753D1F2C5A073ED19E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number:          08FB
Signing time:             Wed 26 Aug 2026 01:01:24 +0000
Manifest this update:     Wed 26 Aug 2026 01:01:24 +0000
Manifest next update:     Thu 27 Aug 2026 01:01:24 +0000
Files and hashes:         1: GZzLxFCp1bVkiSpEsTLVVr4H9XI.asa (hash: ivqvyTFoXDuekBB8qUC8sgSfxDY8iNPCYAvAp+TmOlY=)
                          2: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: BvrwnU89UYPvBr0PCkJJZSImKx90iNU5mkauAo6xFXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:96:0f:63:c7:01:f7:53:d1:f2:c5:a0:73:ed:19:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
        Validity
            Not Before: Aug 26 01:01:24 2026 GMT
            Not After : Aug 27 01:01:24 2026 GMT
        Subject: CN=0d1b71a5b15141d05f0aa38de056ff3690494723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:52:92:cd:74:2c:7c:e9:81:3e:d2:43:11:
                    02:92:67:8c:f3:e0:7d:72:3c:2a:4c:b8:fa:a7:0d:
                    d4:50:19:c5:52:72:6f:6b:c4:5b:d9:f3:7c:68:b9:
                    bb:48:3f:2a:e6:18:fb:4f:26:7f:b6:39:ed:b4:18:
                    8d:32:e8:10:8d:9e:a4:c1:5f:6e:fa:4a:d5:e7:88:
                    a6:e5:ca:c3:81:a8:4d:e9:18:91:bf:c6:8f:4d:6f:
                    6d:83:29:54:c4:25:e8:72:d1:ca:37:66:da:6d:d1:
                    f8:6f:cb:b0:14:56:2e:ed:8e:dc:13:24:f7:51:79:
                    b3:fd:e1:2e:70:e9:46:5b:85:fc:e2:01:89:62:3d:
                    51:8a:05:6d:34:22:9c:fa:59:11:aa:92:83:13:33:
                    06:4f:07:17:09:e3:31:a4:6a:24:fc:8a:05:80:32:
                    1d:cf:7e:46:a1:99:8e:fd:f6:34:62:a7:c9:58:d0:
                    a3:e4:37:92:05:bc:a7:dc:25:2e:38:41:57:7b:d1:
                    4b:0d:d5:b3:b2:1b:f1:8f:f1:f9:cb:03:dd:d0:ff:
                    85:9d:b2:a2:df:ed:21:c2:e9:a5:32:c9:f2:d8:86:
                    71:e9:27:9a:c8:7e:44:2d:fd:68:0f:38:c3:e0:bf:
                    79:63:7c:5f:b2:6c:18:ab:68:e3:2f:c7:04:12:ad:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:71:A5:B1:51:41:D0:5F:0A:A3:8D:E0:56:FF:36:90:49:47:23
            X509v3 Authority Key Identifier:
                keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c1:e6:46:67:69:5b:d7:8b:b7:ab:68:d4:1c:d0:93:3f:cf:
         35:53:ec:32:17:07:95:4f:cf:7c:34:7e:06:a0:6f:da:79:2f:
         7a:38:59:c3:95:3c:e8:f1:d4:30:5f:e1:5b:48:9a:6a:d9:d8:
         0a:e2:18:17:df:36:57:8f:0e:41:bd:71:54:4e:0f:b0:4f:e0:
         09:28:39:ba:f2:c7:3a:ea:5f:3d:61:d0:af:4b:da:a7:51:43:
         7d:10:1e:1a:c5:e4:72:18:4b:30:df:45:8b:5f:ef:7a:9b:1e:
         1b:2c:a7:f7:2c:e0:e2:e3:15:ec:52:41:95:db:fc:fa:ef:e3:
         ab:9a:9a:6a:88:e3:57:58:78:d0:af:42:b3:e3:78:83:53:09:
         7b:fe:09:0c:29:39:ba:87:1a:83:be:aa:b3:0c:20:e5:34:af:
         07:64:0e:7a:38:05:46:15:0b:bb:ca:84:d7:67:b8:bd:8b:ba:
         c5:aa:10:cd:6f:d5:c8:15:36:c7:65:08:27:f7:47:5c:27:a0:
         20:f6:01:1b:06:9e:12:9d:3d:02:d8:71:e4:c7:76:a2:c2:a6:
         18:17:be:af:47:70:62:c8:2e:d3:d6:c2:b8:ad:4c:8d:15:83:
         13:fa:9c:ad:d9:2f:1a:e5:7f:4d:55:ff:86:30:f4:14:b4:98:
         7c:4e:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:38:56 2026 by rpki-client