Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          ECwoVw4UtIqHLGzR+FNjy+28BUoFwFKqEKgvCOl4GOc=
Subject key identifier:   CC:5B:37:A5:71:F1:C3:09:C3:F2:F1:23:A2:66:FB:73:30:FB:ED:45
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019FCA4ABEA29CBF9D8A7B4522DC23CD8CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          1977
Signing time:             Tue 04 Aug 2026 01:02:03 +0000
Manifest this update:     Tue 04 Aug 2026 01:02:03 +0000
Manifest next update:     Wed 05 Aug 2026 01:02:03 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: FdQIAbHoqZmnbVJp8I2jfbxlNCoh2JF6vq0ev5FU03w=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:4a:be:a2:9c:bf:9d:8a:7b:45:22:dc:23:cd:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Aug  4 01:02:03 2026 GMT
            Not After : Aug  5 01:02:03 2026 GMT
        Subject: CN=cc5b37a571f1c309c3f2f123a266fb7330fbed45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:34:69:33:c1:47:11:0d:91:64:65:bc:1b:
                    f3:03:a8:15:03:a6:70:01:f9:2e:d7:62:64:3d:9a:
                    cc:96:ca:e8:ad:44:80:e9:e9:b8:25:e6:c4:62:26:
                    77:16:e8:72:0a:13:8c:85:f1:13:37:0c:83:c3:05:
                    4b:42:76:31:95:6a:5d:ac:4d:90:b7:15:6a:a9:c3:
                    a5:ea:e1:bf:5a:b9:5e:b7:11:a5:6a:fe:5a:12:49:
                    63:68:76:9f:16:7f:c7:45:b7:93:f6:ac:33:18:40:
                    6a:fb:28:8c:5a:e0:b9:52:7d:52:94:f8:5c:10:73:
                    08:15:c0:01:e6:91:97:2e:c4:c8:c1:5e:c0:fe:c6:
                    ff:d4:5e:c4:0f:c8:b2:cb:95:da:40:14:42:f7:cd:
                    a8:ab:a4:09:12:35:e4:5e:13:33:63:e2:54:8d:61:
                    13:6c:df:5e:4f:1b:88:c8:9d:86:8b:bc:29:07:94:
                    a9:92:50:ec:71:56:4c:fe:df:68:0c:b7:e7:43:8a:
                    d7:bd:91:2c:82:bb:4d:cb:10:00:67:6d:2c:7c:4e:
                    f3:8a:d3:89:d3:12:2b:d5:1e:25:f2:62:8f:5f:7e:
                    d9:6e:67:4b:b5:6b:c0:ac:72:10:78:5e:cd:76:a5:
                    00:b0:e5:3a:c0:a3:d9:76:8c:75:bf:4d:ff:90:17:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:37:A5:71:F1:C3:09:C3:F2:F1:23:A2:66:FB:73:30:FB:ED:45
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:1b:06:a4:0a:33:a3:86:69:36:e1:7e:7e:29:af:71:2c:
         43:bb:d7:88:67:93:fe:6b:4d:09:39:9a:4e:79:61:cc:be:30:
         eb:89:6c:97:0c:9b:74:70:90:f4:7c:7a:14:a0:b9:a5:c8:57:
         37:e9:79:ec:04:19:48:95:45:ca:ce:50:e9:bd:02:f3:16:f7:
         a1:a8:fb:58:f2:13:3d:46:08:d1:4c:20:3f:28:4f:d9:e2:29:
         54:25:72:45:b7:9e:bb:37:f5:25:e8:e8:f3:d4:68:9f:da:6b:
         9d:f9:5c:36:ba:a3:5d:89:87:c9:01:a0:f1:43:4b:1c:7b:67:
         66:44:bf:ab:82:44:b9:68:82:8a:21:6c:8d:fc:c5:7e:39:37:
         d6:53:dd:a3:0a:b1:0c:ab:17:ec:9a:9f:0f:c2:41:5b:fa:4e:
         5f:ba:04:21:06:e4:42:64:f9:91:f6:2b:21:fc:d9:5b:70:23:
         4a:0c:33:ef:cb:ac:e8:5b:fe:41:3c:07:ce:67:27:19:ed:50:
         f1:2e:91:31:e1:66:e4:6b:bb:b8:f6:b2:25:d3:96:e3:a5:13:
         9d:e0:a8:23:3a:59:c6:d6:bc:65:33:22:49:77:0f:45:3e:ba:
         64:97:5e:1b:56:9d:dc:e1:c3:82:36:cb:37:9d:bf:3a:d8:40:
         d2:53:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:54:01 2026 by rpki-client