Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier:          dk9cWBiOHGCUy5f7bwwrk0E2DrSpN2ibRQ2Rg1jPeDI=
Subject key identifier:   C9:DD:D8:E3:CC:41:DB:C4:F5:14:66:FC:82:CF:0B:D9:D0:36:8E:11
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer:       /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial:       01A0017010E82C9E848B498328DDEFE87290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 18:01:56 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:56 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:56 +0000
Files and hashes:         1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: fq5ULwayWSEzPIB4t8F+ccgHGeYzWSOVrBGH/WxrGkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:10:e8:2c:9e:84:8b:49:83:28:dd:ef:e8:72:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
        Validity
            Not Before: Aug 14 18:01:56 2026 GMT
            Not After : Aug 15 18:01:56 2026 GMT
        Subject: CN=c9ddd8e3cc41dbc4f51466fc82cf0bd9d0368e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:79:ce:29:f0:2e:2e:12:4f:bb:43:cf:90:
                    89:82:b5:65:f1:ef:3b:0d:75:9d:be:b0:a6:7f:37:
                    44:88:88:94:a1:26:f5:d1:61:d9:83:aa:59:15:24:
                    7a:95:bc:3c:65:6a:d1:04:cf:69:c7:84:84:06:82:
                    13:0d:c3:85:ef:fe:6a:1b:8a:50:f8:71:f6:43:00:
                    b9:f3:2e:60:a0:c4:46:1b:5b:e2:16:e1:59:9e:a7:
                    f2:56:4a:57:65:bf:ad:c8:71:94:34:c4:44:9e:eb:
                    76:02:ce:83:c3:91:c9:5e:e1:ab:c7:9a:bd:59:d5:
                    6e:ef:32:0c:2c:5d:6b:5e:05:8f:9c:ad:ff:97:0b:
                    9b:26:73:65:17:72:45:62:09:f1:b5:f4:fc:20:43:
                    f6:5b:d5:60:a7:f8:cf:25:87:97:ef:82:b6:b0:76:
                    82:f2:e3:fc:64:cb:c3:cd:d6:a1:24:f6:0b:3d:98:
                    55:18:a4:f4:a0:d7:86:97:f0:3b:63:96:ef:01:37:
                    89:c6:e7:02:e0:ef:cc:5b:c9:3d:f2:63:a3:13:88:
                    66:d1:30:77:c7:ce:d2:f4:c3:87:97:84:99:7b:b7:
                    20:0a:b8:5e:9b:23:eb:61:55:1c:41:0e:18:56:90:
                    74:fa:40:91:17:a0:9f:8b:2f:dd:06:e0:c0:33:fb:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DD:D8:E3:CC:41:DB:C4:F5:14:66:FC:82:CF:0B:D9:D0:36:8E:11
            X509v3 Authority Key Identifier:
                keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9c:73:9d:e0:4e:44:a3:89:96:18:fe:2a:5e:33:f9:b8:f0:
         ea:41:69:d6:53:65:b8:f9:c0:0d:90:14:e3:51:a0:a9:f3:78:
         5a:70:78:4e:b3:80:be:10:22:ee:6e:24:22:46:1e:d5:85:79:
         89:28:54:3f:05:b6:6e:50:ae:27:90:7b:15:0b:b5:6b:4a:d0:
         ed:fb:be:dd:1f:f8:95:64:fe:6e:4a:b2:c1:2c:c5:62:52:90:
         4e:ab:1c:f4:85:ad:79:aa:33:6f:df:2c:05:ab:61:cb:cd:93:
         68:75:a3:50:c4:a9:7a:9f:75:d1:14:1c:93:56:df:e6:65:53:
         79:2d:c1:c6:fe:9c:36:d2:d1:92:70:94:6d:ad:8c:f8:bf:9d:
         10:c3:b5:20:72:0a:8b:27:fe:23:72:f2:7a:4b:18:6f:6d:f3:
         77:8a:b6:28:22:8c:53:20:b9:09:49:b1:b8:70:b5:f6:ab:98:
         ee:57:23:ab:bc:a7:47:cd:1c:55:1b:36:bd:0d:4e:38:79:9a:
         71:d1:2d:1a:33:ff:a8:f2:0a:a6:92:ca:06:99:ea:3a:d0:cd:
         ef:db:39:91:b4:d5:8a:5a:14:97:36:ec:17:32:ae:50:f0:10:
         c8:f2:14:35:d8:61:06:1c:08:4f:c5:08:49:f5:1b:2b:77:1b:
         9a:64:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:42 2026 by rpki-client