Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
File:                     xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft (raw, json)
Hash identifier:          jtLGL3Yr6H9XB6XHdoPPaw/qu32pOPqapu2H03ieEcA=
Subject key identifier:   74:EF:D0:DE:57:C2:68:36:18:D8:51:40:38:21:6A:A0:A0:3A:A4:F7
Authority key identifier: C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0
Certificate issuer:       /CN=c735a6815f600ea249b1da0a6f431efae81d66b0
Certificate serial:       019FF835EC6B9CC59E5AB68F3045DA98B116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
Manifest number:          15
Signing time:             Wed 12 Aug 2026 23:01:51 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:51 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:51 +0000
Files and hashes:         1: mJ5RCAjBaYyADaNeklOPoY_zZrc.asa (hash: jcbnQ3QTEujNY2UmLxDviKLr49cB9i4XezfDbSMWaWs=)
                          2: xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl (hash: aVKLVF3iTXkDHf6I1K6brknzHZxvwVCeNwvVe6qs8O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:ec:6b:9c:c5:9e:5a:b6:8f:30:45:da:98:b1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c735a6815f600ea249b1da0a6f431efae81d66b0
        Validity
            Not Before: Aug 12 23:01:51 2026 GMT
            Not After : Aug 13 23:01:51 2026 GMT
        Subject: CN=74efd0de57c2683618d8514038216aa0a03aa4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:97:04:d2:5d:1f:5e:dc:41:13:97:80:a6:
                    e1:91:74:65:3c:1c:bf:7c:af:cb:34:80:09:d5:03:
                    91:01:4d:b7:b3:22:f9:57:79:eb:2b:36:77:9d:56:
                    8d:03:32:b9:3b:d6:14:e5:1d:f1:d6:2d:68:bd:f3:
                    ca:03:23:bc:7e:58:7a:74:2d:27:98:62:99:78:1e:
                    d6:4f:b9:1d:c0:65:0d:9b:58:cf:6e:e5:a7:97:88:
                    25:fd:4e:45:1b:01:00:bb:e6:5c:74:84:30:d1:60:
                    8c:bf:12:a5:ce:b4:93:53:19:20:a4:e9:6f:03:23:
                    9d:dd:c3:b3:21:28:64:b5:d2:14:8f:39:6d:16:30:
                    c8:08:d3:b3:7d:53:73:98:ea:2e:90:61:cd:08:93:
                    62:a6:ce:35:3f:cf:5f:24:57:f2:7e:d7:78:db:4f:
                    f1:a7:e5:c3:7c:ad:a2:47:1a:bf:3b:07:b7:3b:f0:
                    45:90:77:60:c6:d5:a8:17:90:13:94:af:79:74:03:
                    02:89:5c:24:35:62:7c:10:ad:ce:09:94:58:81:84:
                    fa:40:cf:49:05:4f:e5:5e:dc:9e:3f:2f:aa:b3:bb:
                    57:4d:22:0a:14:70:8b:50:71:40:ac:9f:c7:ed:58:
                    6a:b5:69:a9:0c:bb:d8:6d:8f:ae:74:2f:ef:89:df:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:D0:DE:57:C2:68:36:18:D8:51:40:38:21:6A:A0:A0:3A:A4:F7
            X509v3 Authority Key Identifier:
                keyid:C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:20:60:a9:5d:ef:4c:53:8e:0d:0c:a3:3a:28:ea:d1:fc:ce:
         6d:74:f3:a4:6a:cf:a3:b7:0f:19:22:2d:a6:a6:7a:ad:07:d9:
         11:26:d7:e7:a5:d8:55:06:06:a4:5a:c1:7c:05:d3:73:cf:a9:
         52:4e:3a:7e:85:1c:37:ec:7a:16:18:8d:6a:ab:a9:0b:7c:b1:
         b4:eb:4f:a7:b6:67:de:ef:89:38:b1:63:0f:65:cf:a1:fd:ad:
         6b:47:c4:c6:df:ae:16:66:f5:5f:4f:8a:98:d3:8d:f3:6c:67:
         d8:df:ef:c3:e0:f4:85:62:37:70:5b:fa:bb:8a:0c:ec:d8:b0:
         75:a8:13:24:9e:1b:73:30:c7:28:ae:91:87:81:4e:06:ce:c5:
         d4:ca:02:a1:7e:94:7c:a7:61:f4:86:d0:d5:d7:88:c1:22:b9:
         3d:44:28:92:27:96:6f:d5:8d:c8:3a:6f:3f:d9:f5:df:f0:99:
         34:da:58:36:c4:11:05:2f:cc:df:b7:d4:1e:60:96:31:63:6e:
         af:43:92:c1:6c:78:09:6f:3f:d9:65:15:8d:cf:0c:f1:f7:f5:
         c2:a2:cf:02:3b:29:6b:45:98:6b:36:75:96:0d:45:fe:c3:06:
         bf:13:f5:66:b4:f7:14:a9:1b:69:47:88:02:f6:17:92:0e:ad:
         6d:4c:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:46 2026 by rpki-client