Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File:                     a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier:          bjT1kR1jRwosavb+6p6ucPxd9bYHvmcIAlIk9XQCzro=
Subject key identifier:   D5:AD:9B:47:F7:E1:C7:51:86:38:EE:61:F2:70:A6:FA:D8:66:E3:96
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer:       /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial:       019F83B1049C68760B4C05E7474C53E8854F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number:          0937
Signing time:             Tue 21 Jul 2026 08:00:44 +0000
Manifest this update:     Tue 21 Jul 2026 08:00:44 +0000
Manifest next update:     Wed 22 Jul 2026 08:00:44 +0000
Files and hashes:         1: 652lcuzT9PIhaSeP2avGOH6beOk.roa (hash: 9cjGs1jIWWRzFnAzuxAkpsphISqK1RUqJmC7SPZmiso=)
                          2: Mr2LQ1C5SJjiCxHDUHB6isq0KGI.roa (hash: RA9IEzCO4KyarLoUNb941n55NG/XIML//2KL7SpybBQ=)
                          3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: b+6Rahb/ra5vQR3l4ozqekE/C+zxM+gINOBk6bJryGE=)
                          4: knDMH2cT6X9zpZOHV6KWJKXM32g.roa (hash: arPSRktl1sXhku4kqnqqJyXzy3Zxw9oz2dPJBl2xgrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:b1:04:9c:68:76:0b:4c:05:e7:47:4c:53:e8:85:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
        Validity
            Not Before: Jul 21 08:00:44 2026 GMT
            Not After : Jul 22 08:00:44 2026 GMT
        Subject: CN=d5ad9b47f7e1c7518638ee61f270a6fad866e396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:78:27:6c:54:1a:08:03:cd:0d:fc:75:ba:
                    94:8c:b7:d2:9d:e0:c7:27:5d:7e:ac:d2:73:35:92:
                    03:6f:a7:fe:8b:ef:58:12:4a:d8:3e:a8:10:5c:21:
                    bb:c9:0f:59:dc:b2:fa:14:66:7e:ec:58:7f:51:59:
                    c6:fc:1c:9e:c3:29:e4:02:e3:8c:c8:18:1d:eb:0e:
                    32:16:a9:83:c7:c8:2e:e3:d8:6d:cd:b9:54:0a:6b:
                    fc:51:ab:a8:b0:7e:56:f0:ed:1f:fe:20:95:22:00:
                    00:67:6e:ea:4e:ab:59:d3:b6:78:4a:49:15:4a:ad:
                    46:f5:10:50:58:12:6e:5c:ba:8a:72:14:bf:ca:4c:
                    e0:23:30:da:ba:dc:af:04:de:1d:af:42:e6:21:c0:
                    d1:85:3a:ce:cb:47:92:14:44:35:4e:26:28:f8:3c:
                    f5:f9:28:28:db:f8:1d:6f:1c:66:44:f2:03:62:a2:
                    db:78:1e:ab:c0:b0:19:3f:80:07:77:30:20:c2:b1:
                    ae:e2:bd:7d:36:fa:3c:6b:a5:ac:4b:38:9b:3e:d8:
                    47:c3:48:c1:22:74:d1:bf:99:b6:1b:94:d5:6b:4a:
                    b5:be:15:28:2d:46:fc:09:94:4f:43:e1:fa:9f:f0:
                    83:3e:e3:0e:0d:4f:d6:32:7a:99:06:f8:5c:fc:17:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:9B:47:F7:E1:C7:51:86:38:EE:61:F2:70:A6:FA:D8:66:E3:96
            X509v3 Authority Key Identifier:
                keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:05:55:ec:4d:a1:35:6a:57:fd:b1:da:02:45:db:fd:64:
         65:63:24:90:e7:42:0e:b7:bd:93:fb:7b:1f:b6:b8:a8:6f:05:
         4c:40:b7:93:a1:37:5b:4f:04:7a:54:14:f8:97:ec:66:59:6a:
         05:09:aa:c8:c3:4b:6a:e3:2e:ca:6e:59:81:5a:f2:58:2d:20:
         87:64:4f:ac:f2:39:b0:e7:eb:08:a2:fb:a7:dc:d5:88:e8:6a:
         2c:58:d7:15:74:bb:59:e5:1b:c3:2e:5c:b5:80:05:96:fd:ec:
         50:a8:ab:87:8e:f5:c8:22:cb:98:2b:5e:53:52:43:90:c3:06:
         4d:e9:00:ef:e0:6d:57:33:93:2d:30:ec:af:8e:e9:21:2e:e6:
         6f:a2:81:7b:2e:1f:98:65:fc:0e:8d:21:5d:9a:24:92:5f:b0:
         93:fb:3e:de:f6:ad:aa:13:32:fb:7f:90:b6:4e:eb:97:79:1c:
         4c:9f:8c:2f:ed:0f:7f:d8:55:e4:93:f8:c7:fe:45:ee:1a:4c:
         8d:40:7c:10:b8:35:5c:bb:08:81:62:b6:7e:55:c2:5d:f1:9f:
         db:eb:2e:7c:0e:3c:54:6d:c8:d5:f7:62:d4:13:c5:ae:dc:17:
         36:c8:6e:0e:9d:10:e6:3a:59:29:63:ea:eb:28:c9:1b:a4:98:
         56:54:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:03:10 2026 by rpki-client