Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
File:                     t117sKuToIYWkQen4ubKOCYZ5_Q.mft (raw, json)
Hash identifier:          yJ5NxhAbM/7uF6QrrYu70DcFoOkArn31VqelctYQl4Y=
Subject key identifier:   75:7A:2F:9B:4A:C9:C4:44:B0:40:B5:78:D4:6B:11:D7:6A:24:55:26
Authority key identifier: B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4
Certificate issuer:       /CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
Certificate serial:       01A0268E61E80058FD8F135756E4452D20EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
Manifest number:          63
Signing time:             Fri 21 Aug 2026 23:01:00 +0000
Manifest this update:     Fri 21 Aug 2026 23:01:00 +0000
Manifest next update:     Sat 22 Aug 2026 23:01:00 +0000
Files and hashes:         1: t117sKuToIYWkQen4ubKOCYZ5_Q.crl (hash: PGGPqNILaw0iRhFSyiutuKbZnSBoI4gnTdq0/pXjex4=)
                          2: ySPvKfV_aWMJHJvsDTSVOAVpx9Y.roa (hash: yQfb3ZLV9S1QRrvHBaPCBs3YoUagPeU3hc7wS3zLy1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:8e:61:e8:00:58:fd:8f:13:57:56:e4:45:2d:20:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
        Validity
            Not Before: Aug 21 23:01:00 2026 GMT
            Not After : Aug 22 23:01:00 2026 GMT
        Subject: CN=757a2f9b4ac9c444b040b578d46b11d76a245526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:ea:7a:e8:a4:15:97:c4:89:04:53:06:54:
                    ec:55:e3:72:41:df:8b:7d:7a:ca:b6:be:73:85:55:
                    44:9a:ba:74:64:b2:e5:84:ab:f9:28:6d:19:00:67:
                    0c:11:f6:9b:a0:be:e0:97:bf:70:ae:4f:91:2f:cd:
                    f2:27:6e:c8:d4:65:3f:d1:79:00:49:0c:37:d7:47:
                    41:ca:2a:d2:32:69:f4:78:2f:2e:67:9e:46:13:fe:
                    56:9a:06:d8:bd:ae:02:66:23:80:41:9b:ca:76:18:
                    de:61:ca:86:91:b4:dd:ea:25:94:f2:94:c0:8b:85:
                    f4:09:29:58:bf:cd:d4:d3:0e:d3:e3:a2:24:ae:58:
                    81:81:c9:0a:88:a3:cd:85:d5:3c:b3:48:26:1d:da:
                    e5:6e:5b:b2:27:0a:10:ea:1e:cd:9b:8c:33:d0:e1:
                    8a:d6:10:05:cc:ba:03:89:cb:db:ae:b5:e7:bf:ac:
                    6b:75:7e:4a:18:86:7a:86:9a:1b:10:c0:4d:ac:d3:
                    d4:fb:85:19:28:18:e8:33:74:bf:df:c9:7f:06:00:
                    40:66:36:fb:a8:81:70:07:3a:52:99:63:54:23:52:
                    c7:c1:4e:74:e7:99:be:b8:71:0e:ac:5d:13:38:c7:
                    68:4a:be:fd:b3:56:5b:5e:dc:f1:0f:19:83:17:a7:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7A:2F:9B:4A:C9:C4:44:B0:40:B5:78:D4:6B:11:D7:6A:24:55:26
            X509v3 Authority Key Identifier:
                keyid:B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d9:e1:bb:66:ba:55:31:2c:a6:12:17:a4:8b:2d:fa:65:9e:
         aa:3d:7b:6e:46:42:71:9b:4f:21:d4:b6:46:9a:ff:41:b3:f4:
         a9:27:1e:a7:35:2a:24:6f:21:87:e3:2e:ee:dc:58:2d:ab:14:
         9a:13:76:e9:3c:46:fe:dd:58:47:ff:0a:91:c4:64:db:56:cb:
         99:7b:7b:ba:84:38:59:14:de:36:62:0c:ca:2f:d0:2b:28:10:
         dc:1e:a2:78:11:66:fe:47:c4:59:70:09:8d:d4:93:4e:77:31:
         ea:c6:b1:84:07:4e:a4:ab:fd:6a:f1:70:db:25:51:fc:27:67:
         f4:1b:cf:80:ec:1e:e2:24:44:a0:98:ca:ea:ae:09:94:48:1a:
         c7:33:cb:0b:f1:0e:50:42:04:0e:97:a3:7b:3a:13:55:ad:7f:
         d5:b9:b1:c3:0a:65:02:e5:62:c2:d4:e1:ea:e2:86:01:ab:e4:
         25:9c:05:1f:a6:ec:61:51:db:fe:1f:b2:f5:be:57:0c:e9:fd:
         99:f6:ee:eb:ed:26:5e:0c:0d:ae:72:89:90:ff:04:c9:3a:83:
         ad:bc:9a:66:4b:50:e8:44:30:64:e4:18:50:a0:54:09:f0:ff:
         84:86:18:23:5e:e0:a2:3c:a0:93:d5:30:3e:b4:98:34:22:62:
         3b:ec:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:00:50 2026 by rpki-client