Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
File:                     g026NqGaEf0f34ohJn8s01da1Rg.mft (raw, json)
Hash identifier:          8U2NjzYdcgDhIHagC04YE9X8OMARADur8j5Kxd0gRBU=
Subject key identifier:   89:24:C9:4A:56:D9:EE:65:C8:66:F0:42:C2:D3:BB:F8:36:F6:FD:26
Authority key identifier: 83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18
Certificate issuer:       /CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
Certificate serial:       019FF722E29B34FB4928DAE90B770B53E504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
Manifest number:          75
Signing time:             Wed 12 Aug 2026 18:01:26 +0000
Manifest this update:     Wed 12 Aug 2026 18:01:26 +0000
Manifest next update:     Thu 13 Aug 2026 18:01:26 +0000
Files and hashes:         1: g026NqGaEf0f34ohJn8s01da1Rg.crl (hash: bm/16PUX6c6NL80kfdixyjXUqcNIW7FbJe9vCMpKJuA=)
                          2: ywr2yHe5YezVa2DkSIoiUW3iClE.asa (hash: jWQ90LGYbnX6nj6NxZX7augHUME0QxkMdKQ2+9Sa29s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:22:e2:9b:34:fb:49:28:da:e9:0b:77:0b:53:e5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
        Validity
            Not Before: Aug 12 18:01:26 2026 GMT
            Not After : Aug 13 18:01:26 2026 GMT
        Subject: CN=8924c94a56d9ee65c866f042c2d3bbf836f6fd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:0f:78:37:ce:54:80:bc:ff:18:84:2a:4d:
                    62:d2:5b:73:48:7b:a5:49:52:0f:bb:e7:4e:92:a8:
                    f4:49:02:2b:7e:15:88:0a:7b:ad:db:4a:ce:11:8c:
                    21:c1:e4:95:94:32:80:df:c0:77:6e:88:8b:0d:1a:
                    bc:a5:28:b9:cd:b9:81:66:13:11:07:77:ee:5a:00:
                    9b:98:ad:3a:d8:a3:f9:62:93:a4:a6:fe:ce:75:e4:
                    2c:c2:ad:80:80:84:f4:38:48:88:5f:8c:53:fa:fe:
                    6a:ff:2e:7a:c8:1e:20:bb:99:a3:3b:d5:34:9b:a6:
                    f1:0d:e1:63:95:23:a5:b9:2c:7b:06:50:a7:a5:d1:
                    17:f2:20:1e:e8:a6:3e:96:72:c9:e8:a9:47:f3:b7:
                    a0:bd:5c:81:c5:39:a2:fa:8c:d2:05:e1:0c:7f:e4:
                    54:bc:e0:4b:93:ae:aa:66:18:f6:86:3d:d2:15:4f:
                    f1:76:62:e6:09:65:8a:44:af:a4:69:ce:11:df:9c:
                    85:af:84:a2:39:e4:f0:9a:a4:b6:49:0c:d6:90:e4:
                    06:f5:4a:a9:81:b5:5e:47:9c:86:17:83:11:85:bb:
                    2a:61:b9:b2:ea:cd:42:51:76:d8:a5:93:07:d4:be:
                    28:41:85:38:bf:d3:61:3b:30:52:56:67:61:1e:c3:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:24:C9:4A:56:D9:EE:65:C8:66:F0:42:C2:D3:BB:F8:36:F6:FD:26
            X509v3 Authority Key Identifier:
                keyid:83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:02:0b:37:5e:ee:fb:d8:18:37:db:f8:20:11:af:26:88:
         24:37:29:db:b2:1e:ff:c1:9a:d0:ab:1c:78:e4:c5:72:da:89:
         ea:1c:8e:6f:1a:de:c0:ad:b8:6d:fc:8e:a4:4d:23:de:e1:48:
         8c:57:9c:13:a5:4f:68:19:98:41:47:b2:a7:9b:a6:5d:e7:76:
         c5:8d:b2:d4:02:40:d4:f5:8c:ab:69:3a:47:01:dd:34:a2:68:
         cc:4c:b2:c3:56:d2:de:cd:cb:a9:80:ba:0d:f4:53:8f:aa:da:
         cb:4d:c5:67:55:c2:4e:c6:e7:fc:77:6b:28:38:b5:83:6d:7f:
         cf:04:31:5a:b9:c7:40:ff:13:f7:cb:6b:ef:77:8c:7c:6e:e1:
         c8:19:1a:6f:cf:85:01:a2:c4:f6:12:da:15:90:50:3c:d9:77:
         dd:d3:73:bc:d5:30:f9:e3:bd:2b:27:4b:ce:7a:e3:91:49:9e:
         16:67:06:47:14:ce:a5:bc:e5:fb:87:82:2d:30:32:d4:24:aa:
         87:f6:c9:af:5c:35:56:b5:0d:08:4f:fd:b4:cd:e5:f8:6b:eb:
         f7:88:2d:25:44:d1:d9:1a:84:c5:85:76:80:de:68:3c:8c:92:
         bb:db:5c:9a:2f:55:d1:85:a9:e3:ff:d4:e2:47:b0:fa:c8:25:
         0d:8a:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:26:06 2026 by rpki-client