Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
File:                     Szx5xlXI4rA6V-A78tED6BdUy-I.mft (raw, json)
Hash identifier:          ymbJQtjgchbRhvg+AAPHildBSMSPwPsAqrGyV78qGgE=
Subject key identifier:   18:98:74:99:2C:EA:8B:35:F6:78:6A:8B:FA:98:4E:19:FF:A8:DF:66
Authority key identifier: 4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
Certificate issuer:       /CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Certificate serial:       019FCC6F1DBC4BE7E36AB98B97F926855834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
Manifest number:          BA
Signing time:             Tue 04 Aug 2026 11:01:01 +0000
Manifest this update:     Tue 04 Aug 2026 11:01:01 +0000
Manifest next update:     Wed 05 Aug 2026 11:01:01 +0000
Files and hashes:         1: PI0F8x9CPayW399Vvg4Zxhy5Mzo.asa (hash: HDptImqZldK6ZOWVfpx8UrKAynGnTippOHJQCxKk/aY=)
                          2: Szx5xlXI4rA6V-A78tED6BdUy-I.crl (hash: dKzWa/s1U7WfWr9yoqmplUvldvBIpx7SchaGRRDeoYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:6f:1d:bc:4b:e7:e3:6a:b9:8b:97:f9:26:85:58:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
        Validity
            Not Before: Aug  4 11:01:01 2026 GMT
            Not After : Aug  5 11:01:01 2026 GMT
        Subject: CN=189874992cea8b35f6786a8bfa984e19ffa8df66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:39:e0:c3:ef:c4:80:4a:3e:1c:28:77:77:
                    f5:73:ea:9c:4a:5d:28:db:d9:61:c9:54:46:31:af:
                    d8:c2:f3:b4:c3:68:7d:c3:ce:bc:48:de:14:95:f6:
                    6c:2c:46:e7:b8:88:53:ab:8e:91:4b:36:dc:2c:6a:
                    a4:59:bb:db:58:d5:7c:06:49:5d:bc:dd:0e:da:0c:
                    8a:05:51:38:02:8d:aa:a0:48:96:02:b3:16:cf:92:
                    c9:03:71:03:20:e2:be:b2:93:6e:40:7f:69:70:6e:
                    3f:d6:04:25:10:7d:15:27:ea:52:2b:45:25:4e:41:
                    d4:3f:9a:6b:2d:9e:88:72:f1:12:86:92:a3:89:9a:
                    b7:63:1d:53:e8:1e:93:b6:50:8b:0d:5e:96:44:95:
                    c0:d1:25:c5:a0:fb:4a:07:10:a8:17:7f:4f:d8:0f:
                    c9:6c:f3:48:cc:b4:76:89:6b:c9:46:89:51:45:a5:
                    7c:18:05:da:51:b8:9b:4c:04:62:23:18:09:b0:d6:
                    43:8c:69:a9:3f:0d:cb:81:45:e3:07:93:f9:a0:1f:
                    bc:2c:3e:e6:c9:e9:9d:14:f8:3a:3c:ee:fa:5b:87:
                    3e:68:73:c0:1e:96:f6:59:70:ef:34:7e:34:24:40:
                    99:4f:46:23:3e:9a:9f:26:c0:23:9a:a8:90:f8:4a:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:98:74:99:2C:EA:8B:35:F6:78:6A:8B:FA:98:4E:19:FF:A8:DF:66
            X509v3 Authority Key Identifier:
                keyid:4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:df:33:22:fa:b2:46:db:ae:7d:34:6f:be:83:2a:0c:3b:1c:
         c2:f8:08:82:a0:0e:71:dd:c4:79:2c:e4:a7:22:7a:71:33:26:
         31:22:36:49:19:63:0d:c0:b1:41:08:af:1a:6e:3b:0f:77:e5:
         a8:9f:bd:66:43:44:02:8a:e4:bb:6b:d5:f5:90:80:3e:31:d3:
         46:bb:e1:29:37:f7:0d:91:58:5b:04:58:b2:21:45:18:32:74:
         38:32:9b:b2:8b:ab:24:14:ba:fc:c0:1b:ce:80:d8:98:63:a5:
         ce:8f:3b:ec:83:39:dd:ab:2c:e9:1a:c3:41:2e:64:de:29:26:
         1f:a5:54:3a:1d:ce:8b:66:99:c1:0e:a4:5f:0f:f7:96:4e:51:
         8e:f8:7c:2f:df:80:22:26:a7:81:44:c0:b7:69:8a:64:b3:50:
         2e:74:06:c9:00:3b:06:e8:35:23:27:95:4a:6b:fa:af:49:87:
         4f:6f:cb:1e:3f:d7:eb:50:c1:f9:14:91:d0:be:f0:4b:92:cd:
         52:a4:4a:9c:cc:bd:33:f2:5c:c1:2f:8d:2c:23:48:d0:3a:7c:
         6c:b7:92:d4:e1:bf:91:ea:7b:8d:04:41:58:47:66:df:52:bb:
         8f:80:ed:1b:7b:5a:60:ba:a3:dd:e0:2e:1a:45:8f:d1:19:b3:
         54:d9:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:04:18 2026 by rpki-client