Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File:                     txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier:          DW25bdSLUjCdD1vQa6hBxJK0eLkcyCD/B/4NJYIx17Q=
Subject key identifier:   C7:D8:77:76:2F:0E:DA:4F:70:22:64:79:0E:92:F8:BB:4C:D5:4D:9E
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer:       /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial:       019FFE0089CE8FEF8F86BB142BF697C6D227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 02:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 02:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 02:01:15 +0000
Files and hashes:         1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
                          2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: dW6kJhBFu0OPhW5rQImx+C6FNMiXuse5hvrGWPDlP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:00:89:ce:8f:ef:8f:86:bb:14:2b:f6:97:c6:d2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
        Validity
            Not Before: Aug 14 02:01:15 2026 GMT
            Not After : Aug 15 02:01:15 2026 GMT
        Subject: CN=c7d877762f0eda4f702264790e92f8bb4cd54d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fc:97:6a:29:97:d2:ba:42:f7:a6:1b:e0:1f:
                    46:3f:25:ae:ca:bf:51:c2:f3:8e:e8:00:0f:aa:0e:
                    44:38:5d:d0:a3:ff:ab:d5:d3:3f:e8:08:93:b8:c2:
                    0f:50:bf:45:18:b4:44:26:5b:a5:26:21:63:85:3a:
                    3d:41:36:ec:98:03:9d:38:a3:90:97:cf:75:50:7e:
                    5f:fc:43:a3:42:3b:cd:3b:8e:07:bc:74:ec:c7:50:
                    6d:00:6e:d0:e0:7c:06:1f:a7:20:af:b6:a3:c8:26:
                    da:7a:11:90:72:a2:1a:6e:3c:ca:db:f2:ad:b5:b0:
                    10:39:31:b0:e0:53:1d:3b:27:a9:c1:81:00:c8:81:
                    8d:8d:92:da:60:bc:48:e0:c2:1b:61:73:ae:d9:80:
                    e4:78:0f:47:06:7e:44:af:ba:16:bc:b5:13:7e:06:
                    a1:8a:0b:b9:ca:b9:bb:47:ce:92:5f:49:e9:9f:55:
                    8b:24:67:cf:5a:d5:a9:6a:b0:75:6f:ab:4c:63:3d:
                    5f:82:86:1f:8c:74:7b:59:e7:b1:ed:91:31:cd:cf:
                    80:41:be:14:1b:53:c9:fa:f5:88:90:2f:d2:c9:c3:
                    d1:1b:ac:86:75:11:7c:8a:cc:78:70:60:a4:6c:af:
                    c6:f7:68:26:9b:9b:de:bd:6e:8e:09:e1:76:31:f9:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D8:77:76:2F:0E:DA:4F:70:22:64:79:0E:92:F8:BB:4C:D5:4D:9E
            X509v3 Authority Key Identifier:
                keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:b1:d6:5d:ad:cd:37:42:3e:0b:9a:bf:68:96:f6:f9:76:
         52:bf:bd:33:59:12:71:c7:59:0f:d3:d0:a2:1d:db:9a:73:ff:
         34:a6:a6:a9:f3:2f:c8:77:34:f8:b6:4d:a8:55:19:c9:29:6f:
         6d:c7:e7:19:cd:97:f3:8f:01:ee:1b:ed:86:68:76:ad:6e:b7:
         60:c5:8a:6c:00:86:a9:b8:69:c4:e6:21:76:95:52:21:90:bc:
         38:77:f5:45:f5:19:1e:f2:5d:6a:1b:9d:97:2f:8b:50:98:5b:
         d2:9d:89:ab:56:07:e1:5d:bc:0a:93:e0:3d:e4:c5:c1:2e:f5:
         13:d5:4e:c6:39:2b:f0:3f:fc:5e:25:e0:63:a4:f8:ab:71:b7:
         f8:13:93:7a:59:25:3c:93:34:af:40:60:c8:6f:f5:1a:6f:94:
         37:57:1b:92:4a:9b:21:70:b7:ca:e4:61:8e:0f:94:7d:58:0d:
         e2:1d:55:dd:d2:d2:9a:a9:1d:93:e8:bf:a2:0e:84:c0:29:52:
         d6:21:0e:37:3b:20:84:2c:8a:38:d6:5e:51:5d:6b:1d:cd:4d:
         f5:2f:30:4d:5d:90:95:4d:28:9e:2d:ba:4b:75:93:21:77:4f:
         fe:b3:54:9f:62:04:f6:0e:9e:b5:10:ac:db:e8:ff:1c:3c:cc:
         06:72:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:30:21 2026 by rpki-client