Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File:                     rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier:          j51dpwxAvsEzgJsIhmqImSL1Z1xNNx8VYVMDhWLr+Ys=
Subject key identifier:   CD:6F:D5:90:AD:78:03:7A:10:FA:0B:BB:B0:4C:F7:E6:4E:6E:19:2C
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer:       /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial:       01A056D611D091C8DA151F9F001CD0AD3AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number:          19C0
Signing time:             Mon 31 Aug 2026 08:01:04 +0000
Manifest this update:     Mon 31 Aug 2026 08:01:04 +0000
Manifest next update:     Tue 01 Sep 2026 08:01:04 +0000
Files and hashes:         1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: Xx7jnlONjxNtLMcwttvqpRa27j+yejhbuNSS8e3v51Q=)
                          2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:56:d6:11:d0:91:c8:da:15:1f:9f:00:1c:d0:ad:3a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
        Validity
            Not Before: Aug 31 08:01:04 2026 GMT
            Not After : Sep  1 08:01:04 2026 GMT
        Subject: CN=cd6fd590ad78037a10fa0bbbb04cf7e64e6e192c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:34:50:72:5c:d2:fb:25:21:97:18:42:65:
                    ab:c2:c6:2e:3e:df:0c:1d:a8:25:9d:21:17:9c:03:
                    98:41:f1:1c:4d:8b:c2:be:97:7a:e5:e7:63:e6:17:
                    e3:d0:c0:38:80:00:eb:4d:f8:e7:59:b0:b2:b5:84:
                    df:fa:90:3f:8f:fa:7c:24:4f:41:b9:22:1a:0a:e5:
                    34:bc:31:96:82:43:ab:df:44:4b:33:72:3c:74:36:
                    a6:f4:c2:f1:be:ce:d2:65:db:6b:3a:63:81:b7:d9:
                    1f:92:b3:67:88:5e:5c:bc:5a:c7:f0:be:4e:4a:4a:
                    b5:cd:7b:92:f0:62:27:1d:e0:0b:30:ad:9e:10:89:
                    27:d2:84:7f:12:53:5c:cb:22:2f:85:82:5d:70:3a:
                    11:97:e9:a3:78:ed:d3:e8:b8:f2:61:63:9d:c0:39:
                    4e:14:04:ab:a0:3c:a5:b5:94:c3:bb:b3:09:02:25:
                    04:12:9a:2e:24:14:7d:fa:5a:2e:f6:56:92:6d:a8:
                    5f:4f:e6:91:8f:b6:7c:65:b6:12:7b:9b:87:d9:a5:
                    61:58:ad:63:87:c5:41:c0:a6:13:d9:6f:7b:04:f2:
                    1a:a8:a0:42:32:b2:12:aa:37:cb:97:af:90:8c:46:
                    a4:c0:a6:d8:d8:be:bb:20:cf:0e:16:13:97:42:6e:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6F:D5:90:AD:78:03:7A:10:FA:0B:BB:B0:4C:F7:E6:4E:6E:19:2C
            X509v3 Authority Key Identifier:
                keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:7c:2a:4e:4e:1c:75:5c:dd:fe:0d:55:1c:1e:a8:6c:23:
         3a:45:25:58:43:17:7b:26:93:a8:a9:d9:d8:4f:48:eb:b9:54:
         b8:0b:fd:b6:90:18:4e:46:60:90:64:17:a3:11:00:33:15:8d:
         b2:68:8d:5c:3a:b8:6b:12:d6:4f:be:2b:53:71:5a:da:f5:77:
         a2:09:25:db:c8:e3:84:c0:3e:45:77:5b:a7:e2:06:c4:b3:67:
         d6:1e:31:42:40:b3:20:05:4c:76:34:b5:fd:b4:22:18:97:42:
         0e:d7:e0:e6:fa:92:b9:bb:b8:8f:ab:5c:9e:62:e9:35:46:06:
         57:6d:f1:20:91:62:59:ee:3c:de:72:6c:81:5a:6b:15:f6:ee:
         5b:be:35:60:f8:3e:0f:11:6a:0f:e6:92:98:c9:12:ec:a4:0c:
         22:90:4c:8e:6c:00:7d:b2:20:14:f6:ce:ee:98:97:26:c1:a4:
         d2:92:59:98:82:a8:96:b2:81:52:e4:04:25:93:f0:8d:53:f0:
         e9:db:18:4d:f3:02:0e:8a:0f:ab:14:97:3a:e3:b8:6c:dc:5d:
         3a:86:da:03:f6:24:9c:b5:7d:56:3c:7a:7a:da:cf:44:4e:d6:
         fa:eb:f7:e2:5a:f8:cc:90:d7:7b:bc:ac:89:99:e0:a3:57:ea:
         19:cd:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:39 2026 by rpki-client