Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          zWHlkUjAYYhcUmM6kEifxLGi0ubSLHUlw4TRdcoEF9w=
Subject key identifier:   B4:B7:86:D3:69:23:8E:96:E2:5C:87:74:9B:91:58:11:9F:F3:A9:56
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       019FA228DEB3F74D9BC3A97E7BC3974DE5FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          12A7
Signing time:             Mon 27 Jul 2026 06:00:15 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:15 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:15 +0000
Files and hashes:         1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: FKTe8jLJD4Ut4KghKQI/wX86MwyragGMYcPJwN32KG0=)
                          2: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (hash: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4=)
                          3: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (hash: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os=)
                          4: sADfRLRIwEm-KVdFT8jWlHL8oSg.roa (hash: EZEYubhTSXGqlxWAm0J4OXdKM/7Z+1zdS/2lIIhyTjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:28:de:b3:f7:4d:9b:c3:a9:7e:7b:c3:97:4d:e5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Jul 27 06:00:15 2026 GMT
            Not After : Jul 28 06:00:15 2026 GMT
        Subject: CN=b4b786d369238e96e25c87749b9158119ff3a956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:9c:03:d6:46:e2:6f:cb:eb:d9:a5:8f:45:
                    c6:e9:0d:67:29:14:02:ee:53:2d:63:38:53:30:6a:
                    25:e7:e0:65:1e:f9:06:68:98:43:81:e9:61:e2:94:
                    12:1d:fa:99:85:40:8d:bb:b7:39:1b:9d:ee:58:2e:
                    d7:96:49:d5:bd:d1:d9:8b:55:0b:7d:28:19:d2:05:
                    41:2c:b4:99:10:78:5c:39:98:1c:b2:a7:9e:fd:52:
                    d3:4f:63:a6:22:d8:cf:8e:49:17:fa:95:ba:c3:ec:
                    ae:e4:9b:bc:16:59:c9:b0:f6:2d:aa:2b:6d:a0:91:
                    62:d7:27:f4:2d:07:49:93:74:0d:a2:40:48:0e:75:
                    f0:49:40:6c:b9:78:93:1a:9d:dd:8a:9e:99:75:d9:
                    be:ef:d4:cd:b9:3b:95:ae:67:7c:b0:1c:04:14:b2:
                    23:8c:01:b5:29:dc:14:72:5a:ca:0d:20:c4:bf:0f:
                    c5:e4:61:12:08:7d:2a:27:a6:d6:d5:ff:a2:21:d0:
                    f6:6e:9e:f4:b7:a0:cf:c5:1b:9a:24:f1:52:d7:e6:
                    8d:15:83:75:73:16:7b:cd:f8:d1:f7:3c:ca:4a:65:
                    75:79:ea:4a:6e:84:0b:3b:61:cb:2b:50:a1:2e:7c:
                    12:3a:be:84:c9:9f:a5:ff:75:98:40:69:91:47:34:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:86:D3:69:23:8E:96:E2:5C:87:74:9B:91:58:11:9F:F3:A9:56
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:62:a6:90:52:f7:5d:03:fc:67:12:3e:0c:1f:c4:ed:11:72:
         c6:ad:a3:5c:17:0e:ff:5a:86:62:c6:a2:bb:2a:1e:88:b6:86:
         6e:89:76:e5:fd:5e:fd:83:80:77:29:98:92:57:f7:35:0f:8d:
         fd:f8:0a:3e:2f:dd:d0:96:2c:c0:ca:da:54:f4:78:53:c4:b4:
         bb:9f:8d:1a:fa:2f:87:c9:db:73:91:b7:b6:c3:5e:1e:b3:d9:
         e6:78:ac:a4:2c:dd:cd:7f:36:e0:72:9d:cd:9c:0e:3b:d1:ed:
         3d:93:e3:25:6d:c7:b0:72:c0:99:3b:66:98:df:1c:bc:77:03:
         a3:03:36:7d:bd:42:15:f3:48:0f:57:70:3c:de:49:6f:70:a0:
         8c:59:e7:04:90:98:bc:e0:62:5a:d2:ca:74:86:02:d2:a8:13:
         46:3c:78:92:f9:f0:b9:f4:15:b1:c5:31:bd:bd:6b:f9:4c:e1:
         4a:f6:2a:73:29:86:82:71:9a:fb:1a:d5:36:a8:22:a4:e6:e9:
         fe:f9:ee:45:ff:eb:31:17:f4:a4:55:32:9b:a0:4a:3b:82:21:
         f9:db:41:26:30:ad:d9:5f:f1:6f:cc:dc:ea:af:d2:fc:be:50:
         c5:94:a0:bb:78:42:e2:d4:0d:2b:ff:82:61:79:b8:ef:20:24:
         fe:75:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:11:50 2026 by rpki-client