Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          8PoaAeXudfVY9+3HPhORSbeqPJuN+glqU1s+jwvmgWU=
Subject key identifier:   C0:58:2B:F2:BE:8E:DD:C8:B8:28:AF:F7:7D:04:8A:AC:80:A2:2D:DC
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       01A0005C87F9504A134CDE0DD0EF61DE3765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          1331
Signing time:             Fri 14 Aug 2026 13:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:58 +0000
Files and hashes:         1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: VJP8PTdWFQZwtMGGi1+wZqefbWkNjz63rEWYTeqMNPk=)
                          2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
                          3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
                          4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:87:f9:50:4a:13:4c:de:0d:d0:ef:61:de:37:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Aug 14 13:00:58 2026 GMT
            Not After : Aug 15 13:00:58 2026 GMT
        Subject: CN=c0582bf2be8eddc8b828aff77d048aac80a22ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:7a:76:36:6f:10:d5:b9:fc:0a:9f:90:fc:
                    0b:41:f0:63:ca:e6:da:d0:8c:ac:ce:8c:b4:ff:c6:
                    40:7a:a7:46:07:7e:f7:4c:c1:04:e6:6e:7b:c5:de:
                    11:97:05:98:bf:df:89:64:f4:63:16:ff:08:08:ba:
                    1f:63:67:25:f5:c2:32:8b:c1:92:42:ee:8a:1b:8b:
                    c4:12:e3:79:4f:49:08:ee:0c:ba:89:99:8b:e7:c9:
                    1b:be:3d:55:db:45:0b:80:5c:a5:4b:d9:cc:d7:e7:
                    86:9b:80:7d:f7:d7:ac:4b:80:e9:89:fc:05:1b:2c:
                    d2:59:a8:a2:66:c4:64:59:f7:ec:ac:fb:c6:38:5c:
                    5c:49:01:32:f4:9f:32:f0:71:5d:67:68:d3:14:79:
                    f5:cc:3f:95:f0:e6:26:7c:96:22:80:50:de:9a:69:
                    8b:17:5c:2b:69:0c:70:70:c3:87:cf:b2:36:12:82:
                    f7:af:e8:47:5e:0d:34:3a:c5:22:89:4a:43:d6:c3:
                    2b:5b:fa:d3:cc:24:7b:e7:6c:90:e3:bb:a3:c7:ff:
                    57:94:f4:6d:13:d4:b9:72:24:12:56:e9:c6:37:76:
                    13:ea:fd:d2:a7:95:61:97:db:6f:4e:06:eb:87:b9:
                    8a:72:92:87:69:88:82:38:96:43:8c:e2:86:4d:2e:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:2B:F2:BE:8E:DD:C8:B8:28:AF:F7:7D:04:8A:AC:80:A2:2D:DC
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:d3:ae:6f:e9:b5:59:c3:f8:58:5a:8a:d0:b0:ae:5e:4e:
         4a:4c:22:af:82:1b:a5:6d:b5:07:d4:5e:74:06:1d:76:14:cf:
         03:d0:21:aa:54:26:e7:08:82:35:ba:36:4e:54:5c:19:a3:16:
         0c:52:9d:71:21:5e:c7:04:b8:48:af:89:0a:89:65:64:c3:30:
         9c:5d:77:e4:e1:00:02:a7:b2:cb:e3:92:33:04:dc:0d:d4:87:
         17:74:71:19:c5:e6:45:82:ce:fb:a1:e1:e6:54:e1:1e:a4:0f:
         b8:ca:05:50:67:20:bc:06:95:fb:91:d8:71:d6:44:f5:01:24:
         74:69:0b:8c:6f:4b:87:b4:a8:f8:ba:6e:04:78:58:a3:27:b9:
         cd:e8:df:02:aa:92:d9:52:db:de:9f:92:40:0b:e7:c3:46:8d:
         a0:88:2b:fd:e3:8a:5c:74:71:fa:1e:1e:90:e3:f8:01:2c:58:
         38:a1:73:29:8e:98:1e:bc:b6:c1:86:8b:6f:d3:e4:a0:d9:d1:
         3e:f3:8f:0a:54:d0:bf:a4:f9:29:0b:28:a8:3c:c3:39:df:42:
         78:f3:56:bd:c1:df:74:0d:06:b6:b2:09:f4:89:14:b6:9c:2b:
         a3:61:53:07:cd:e4:95:6e:83:00:61:4c:05:20:d8:db:63:a8:
         bd:8d:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:50 2026 by rpki-client