Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft
File:                     1-W34zO69n2Z67SBBIIP2FlRWr8c.mft (raw, json)
Hash identifier:          waikrWlp33g2vX4tB2vqbsTDr1I8z3TOgiMIP6Ge2V0=
Subject key identifier:   E8:6B:84:11:03:04:AB:6B:03:F2:08:72:2E:D1:8E:0C:DC:5C:63:A1
Authority key identifier: F9:6D:F8:CC:EE:BD:9F:66:7A:ED:20:41:20:83:F6:16:54:56:AF:C7
Certificate issuer:       /CN=f96df8cceebd9f667aed20412083f6165456afc7
Certificate serial:       019FD6F4427A4CADE33AA0479A0AAAC838CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft
Manifest number:          64
Signing time:             Thu 06 Aug 2026 12:02:39 +0000
Manifest this update:     Thu 06 Aug 2026 12:02:39 +0000
Manifest next update:     Fri 07 Aug 2026 12:02:39 +0000
Files and hashes:         1: 1-W34zO69n2Z67SBBIIP2FlRWr8c.crl (hash: 20YlLmYRVOYryMUfGyBbPGiG6U/WNtmN3Vf3Joze7YU=)
                          2: 8m7_97JdtIrtkt5WGrRYcuLHU4c.roa (hash: Q6RA6PmCpSPDArG885+olHtRWfj1tfr4lBv19llFNwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 12:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:f4:42:7a:4c:ad:e3:3a:a0:47:9a:0a:aa:c8:38:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96df8cceebd9f667aed20412083f6165456afc7
        Validity
            Not Before: Aug  6 12:02:39 2026 GMT
            Not After : Aug  7 12:02:39 2026 GMT
        Subject: CN=e86b84110304ab6b03f208722ed18e0cdc5c63a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:08:59:71:47:87:d1:6d:12:72:2e:49:a6:
                    7b:86:58:b5:da:f1:32:08:f3:1d:8c:9b:f5:05:74:
                    90:aa:e0:11:6d:ce:ea:dd:67:df:48:e7:ae:53:68:
                    8f:a9:ec:dd:1f:94:45:d7:ad:49:05:ec:7f:53:0b:
                    1c:4f:16:8e:0c:5f:48:3d:33:66:63:9c:00:24:8d:
                    dd:af:e9:f2:f9:da:6c:46:4c:b0:71:1d:1c:2d:2f:
                    2c:e6:f1:61:06:f0:6c:e2:76:d7:1b:44:6f:ba:97:
                    f9:12:10:dc:05:af:30:0c:ab:e7:4b:45:ed:ad:27:
                    1e:69:f3:f7:0f:35:8e:21:32:f5:ae:7e:66:02:69:
                    c4:d7:cc:26:41:62:1b:0d:92:27:f9:ac:5e:f3:5f:
                    1d:89:37:fc:d7:a3:f2:b8:6f:2d:6f:80:22:07:e5:
                    f5:90:2c:27:ec:49:dd:e2:8d:17:cc:53:db:c6:5d:
                    95:fb:84:db:e7:a3:81:95:23:92:ad:ce:4a:46:6a:
                    19:6e:9a:f2:38:e6:75:92:30:5f:ed:bf:7f:af:d6:
                    c5:21:37:7f:5b:a9:c1:05:ed:6b:43:08:67:7d:35:
                    46:c9:3e:82:6d:32:18:a6:62:ca:4d:75:b6:f2:f3:
                    b6:1d:3b:4c:f3:62:3a:60:2b:50:03:e0:4b:25:71:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:84:11:03:04:AB:6B:03:F2:08:72:2E:D1:8E:0C:DC:5C:63:A1
            X509v3 Authority Key Identifier:
                keyid:F9:6D:F8:CC:EE:BD:9F:66:7A:ED:20:41:20:83:F6:16:54:56:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:c3:6f:59:3e:ff:b9:8f:5b:b2:60:8a:0a:fb:1c:79:f1:97:
         51:3a:70:09:b6:3d:b2:d0:a5:e3:ab:fe:8c:09:82:cb:83:6c:
         cf:8b:95:d4:3b:70:76:e5:a1:a0:5c:86:f8:a2:1a:0b:62:b8:
         f7:ab:fb:d6:1c:14:a0:8f:e3:6b:9f:3d:ff:33:f2:23:21:2b:
         34:dc:e2:5c:59:b5:4f:ce:8c:1b:16:19:12:d2:b8:74:f7:4f:
         43:e6:f0:67:98:ae:67:ca:6c:aa:d4:1b:89:6b:4b:6f:3e:48:
         3a:90:ed:cd:5f:32:fa:0a:82:30:b0:c5:60:ab:44:8e:a7:9a:
         3e:3b:d1:6e:ed:6d:4a:5f:34:a5:8b:6e:d6:8e:3a:94:50:d6:
         f3:ed:56:ec:35:60:c1:74:24:21:9b:3c:55:0d:f7:91:60:cc:
         d4:21:b6:d2:a0:7b:fd:78:5d:66:20:aa:72:c9:59:cd:8f:1f:
         78:78:86:94:2a:64:95:3d:b3:e7:90:6e:72:6f:6c:13:1d:cc:
         e2:a8:8e:66:4a:9b:77:bb:16:f6:e9:74:2a:c2:29:82:ec:53:
         8a:5b:a8:c5:ec:f1:f8:94:10:84:f3:f6:21:94:73:8b:35:d3:
         b2:e3:36:de:ae:61:62:5f:1c:ff:db:65:7c:85:24:da:57:52:
         15:e7:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:10:29 2026 by rpki-client