Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          cbLgnl1c0yadVgQ4Xv37p3Hvd5821p0Zs0tteybmbiM=
Subject key identifier:   61:49:4F:BE:04:18:72:37:9B:D0:A0:98:DE:17:CF:A2:5F:02:54:30
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       019F853161369986C72804999A9A125B021E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          0A24
Signing time:             Tue 21 Jul 2026 15:00:33 +0000
Manifest this update:     Tue 21 Jul 2026 15:00:33 +0000
Manifest next update:     Wed 22 Jul 2026 15:00:33 +0000
Files and hashes:         1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
                          2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: AuknC3BtWOuCf8LK2tmJ0cINFiZomy+VAqiFgToovhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:61:36:99:86:c7:28:04:99:9a:9a:12:5b:02:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: Jul 21 15:00:33 2026 GMT
            Not After : Jul 22 15:00:33 2026 GMT
        Subject: CN=61494fbe041872379bd0a098de17cfa25f025430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:2f:83:81:fb:fb:7e:39:8f:5b:6b:de:13:
                    b6:3d:20:08:69:a7:2c:ef:48:84:37:f8:75:4f:60:
                    3d:41:06:ca:75:90:64:5b:17:90:6e:7a:29:d1:f6:
                    12:c6:af:58:bc:5f:a0:e9:58:f6:50:34:00:3b:dc:
                    61:9a:f4:70:2d:cb:86:af:29:d8:b1:7e:88:57:08:
                    48:ab:10:93:c5:48:70:b8:6e:f5:a1:87:65:58:ab:
                    90:8a:26:53:a0:14:fe:07:5a:c8:79:ed:f2:55:bd:
                    8d:e1:a9:39:27:17:35:4d:95:2b:cb:21:3e:14:56:
                    61:e8:89:41:ed:63:1e:a5:c7:f2:26:4a:af:54:da:
                    bb:9a:77:49:22:a5:61:fe:c0:4a:c1:6c:60:93:7f:
                    8c:23:77:15:51:6c:b4:f2:30:f0:33:68:99:74:5a:
                    fb:ef:96:b3:ad:a5:3a:75:9d:55:74:01:2e:a7:3d:
                    9d:a8:57:64:d6:a7:c1:70:90:94:31:81:d7:0c:e8:
                    77:95:f7:40:b8:b6:29:36:96:ae:5a:e3:50:25:72:
                    74:e8:58:4d:1c:7c:ec:49:46:82:db:6e:6a:d3:b6:
                    9d:e4:50:55:2d:00:27:af:32:3f:ba:00:d7:a3:cd:
                    65:0e:c5:4a:2c:45:18:ed:1d:5c:9c:17:28:4a:b1:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:4F:BE:04:18:72:37:9B:D0:A0:98:DE:17:CF:A2:5F:02:54:30
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:eb:03:44:85:01:5d:56:c7:c5:8b:01:62:de:65:16:f8:
         15:42:cf:b2:01:94:12:4d:f6:f0:5b:8a:26:62:a0:e9:b4:0c:
         a5:ca:0c:1d:22:00:d7:36:0d:a6:69:9c:ff:46:24:d7:99:06:
         f3:f0:1c:b5:ba:8b:1a:73:1d:b1:8a:20:f5:68:9e:0e:2c:fb:
         df:3c:59:16:05:18:86:f4:a2:0e:fa:a0:93:80:42:20:ad:a6:
         72:d9:29:61:b7:08:c7:dc:35:39:22:7f:2f:dc:fc:8a:8b:fc:
         02:82:19:f0:42:fd:65:26:5b:fb:01:b8:66:d4:99:c8:65:0b:
         07:e1:47:ec:36:23:fa:d5:3b:1c:73:07:da:85:79:13:8a:1c:
         d8:7f:54:0e:86:63:d6:b0:4a:6e:c3:b5:ab:e6:05:61:96:2e:
         4d:7c:f3:b0:f1:48:9a:6a:65:ac:ea:e4:27:6a:91:3e:6d:b1:
         6b:21:b7:50:42:05:0f:4e:b8:c3:27:8e:51:43:1f:70:f0:92:
         41:83:19:dd:d6:50:6e:bd:86:d1:f2:d9:69:ad:de:55:6f:c5:
         6d:a6:53:43:f0:6c:c8:b6:c2:ec:2d:41:f6:b2:00:d5:77:87:
         09:9a:d8:74:f1:04:2a:d3:2f:fb:82:c6:86:d0:da:29:4a:2c:
         2a:24:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:05 2026 by rpki-client