Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File:                     d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier:          ofy8SopAGWjnynDHnejQfss6b4G3aEqLpa1Adxxdqy4=
Subject key identifier:   77:24:0D:21:35:86:17:24:87:37:47:81:8A:15:CD:6A:0D:21:75:40
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer:       /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial:       019FA1F2159255378928793F96EDA1CC7AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number:          0556
Signing time:             Mon 27 Jul 2026 05:00:24 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:24 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:24 +0000
Files and hashes:         1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
                          2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: DlPO2M9Pol+d6OM/0qzf8HeEv6CoWYkQo7+ZGIWRe1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:15:92:55:37:89:28:79:3f:96:ed:a1:cc:7a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
        Validity
            Not Before: Jul 27 05:00:24 2026 GMT
            Not After : Jul 28 05:00:24 2026 GMT
        Subject: CN=77240d2135861724873747818a15cd6a0d217540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:cb:bc:3d:76:1c:75:03:2c:09:54:18:34:
                    27:b2:21:d5:6d:1e:0d:4d:80:13:e0:c9:25:5c:47:
                    37:fa:b4:b6:55:18:89:87:50:ed:d5:5e:92:9f:02:
                    c8:ce:e4:1c:7f:63:d6:86:9e:f9:ca:18:8c:ca:7b:
                    b1:a2:c3:73:13:44:b8:f4:f1:8c:f9:0c:13:a6:cf:
                    39:9f:e9:98:e3:c9:bd:29:74:08:95:e1:68:2d:2b:
                    db:1e:0c:f4:16:9b:fd:8b:12:0a:60:bc:83:2e:f3:
                    47:d3:d6:7c:91:d5:44:3e:81:b1:16:44:28:42:7d:
                    f8:76:61:31:f7:76:97:68:12:75:d1:30:05:44:6e:
                    46:38:49:c2:cc:c1:c1:63:b3:65:68:0a:b9:40:fc:
                    00:4e:e1:90:ad:49:c6:28:85:db:01:a8:00:f3:55:
                    b5:7e:50:9b:ce:9a:4c:8e:ac:c0:70:f2:69:a9:44:
                    88:7e:ab:80:d8:1b:f8:4b:43:b0:4d:c0:28:94:24:
                    9d:b9:ec:d8:06:5f:16:6a:fe:2a:ab:f1:fa:db:be:
                    88:d5:83:fe:30:21:d9:91:61:0a:1b:5d:dc:2c:db:
                    27:7b:cc:79:00:e1:57:07:49:30:e6:79:1f:ab:90:
                    14:76:50:de:8d:a5:40:25:1a:11:03:d3:c1:88:47:
                    77:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:0D:21:35:86:17:24:87:37:47:81:8A:15:CD:6A:0D:21:75:40
            X509v3 Authority Key Identifier:
                keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:75:30:2f:ec:04:be:05:af:8f:60:7c:96:bf:29:0c:33:
         95:f2:06:10:86:d9:d7:df:d1:70:c3:99:25:62:3b:ab:02:d0:
         a1:be:be:ba:f7:5c:24:46:f2:40:6b:d1:28:7f:25:a8:3d:db:
         06:7b:65:45:0d:f4:5e:bd:b0:c8:38:b7:ad:e3:b6:5e:e6:a0:
         e7:58:a2:59:05:06:69:92:e6:b7:fc:5a:ef:8c:3d:98:97:53:
         c6:25:70:3b:a6:0f:6a:80:50:1b:8e:a2:62:d9:a8:1a:9f:dc:
         ab:d9:12:ab:47:48:76:fd:be:73:1c:cf:67:c0:dd:51:89:8b:
         5c:1a:82:d7:68:33:69:0e:91:f9:fa:e7:90:5b:aa:66:1d:d0:
         08:62:36:f3:3c:bd:33:70:93:c4:59:b2:af:cf:f8:3f:13:ea:
         49:31:a0:fc:70:c4:06:9e:a9:dd:4d:cc:f9:ff:0e:98:22:41:
         39:64:42:71:e9:82:80:6e:52:48:85:15:d5:01:78:26:a7:9a:
         f9:a4:63:ef:0d:f5:0b:50:5e:86:eb:b2:11:06:5d:67:cf:cf:
         4c:1c:5d:f3:3b:37:60:11:a7:bb:e8:9b:fc:9f:04:68:9e:91:
         c8:e2:43:57:f2:b5:b7:33:71:55:ab:c1:49:6b:ee:87:d6:cf:
         8e:30:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:47:48 2026 by rpki-client