Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          duVhZHmLbB73AqjHvH/ueMPuSRHKdliz/7pXqoY9Y4E=
Subject key identifier:   53:5E:35:A4:80:33:84:88:61:79:DF:87:AD:BD:C9:7C:6F:8D:A9:D8
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       019F34836580BB9349369D395BE79F820EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          0C79
Signing time:             Sun 05 Jul 2026 23:00:53 +0000
Manifest this update:     Sun 05 Jul 2026 23:00:53 +0000
Manifest next update:     Mon 06 Jul 2026 23:00:53 +0000
Files and hashes:         1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: CBHpQOtVkpdmRvalw7VcwbdgXMBbFPXM+XIOkFoc3PA=)
                          2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 20:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:34:83:65:80:bb:93:49:36:9d:39:5b:e7:9f:82:0e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: Jul  5 23:00:53 2026 GMT
            Not After : Jul  6 23:00:53 2026 GMT
        Subject: CN=535e35a4803384886179df87adbdc97c6f8da9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:ba:d3:0a:30:3f:a4:1b:4b:1b:08:a2:ad:
                    50:0a:be:d5:b9:18:c7:8b:18:05:81:9a:a3:41:27:
                    ef:e0:78:4d:d9:24:69:88:b4:6e:cc:75:4b:9b:8e:
                    30:3b:dc:b1:07:c6:1c:1e:bf:9c:f8:34:38:a2:62:
                    81:ba:7b:8e:63:05:9a:b7:2d:67:f2:24:d4:6b:ca:
                    63:ef:39:50:13:25:98:07:36:0b:0e:31:62:75:1a:
                    f2:aa:2c:ca:da:23:14:91:f4:b5:57:9c:62:d2:67:
                    20:3d:85:cb:fe:19:7c:88:58:21:72:36:d8:67:c9:
                    ca:52:9f:61:86:9c:82:a2:c2:81:1f:5a:dc:06:29:
                    aa:ff:0e:4e:1e:b4:4d:81:53:51:89:3d:29:70:94:
                    f1:94:df:a6:c8:3c:cd:a7:22:a5:2b:24:ce:ff:d5:
                    c5:ca:d0:9c:69:3c:dd:b6:a7:7f:2f:d5:3e:56:a0:
                    af:d7:d0:11:b7:39:60:80:28:a9:6d:9a:4d:94:65:
                    a7:72:b2:a4:94:da:2a:e4:23:52:ff:a2:0b:5a:a6:
                    20:0c:78:1e:e2:21:3b:8c:52:06:be:13:0e:af:91:
                    52:e0:c4:1f:38:1b:79:8e:8e:3f:cc:df:98:39:12:
                    b8:b4:8d:4a:0c:a9:92:db:c1:4d:df:8f:ba:ae:37:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5E:35:A4:80:33:84:88:61:79:DF:87:AD:BD:C9:7C:6F:8D:A9:D8
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:ba:91:92:0a:c3:82:a3:43:e3:9b:22:07:84:c3:ba:17:
         7d:37:cb:46:ab:91:bf:b5:a5:6b:dc:ed:b8:fe:12:a9:f5:6e:
         58:3b:21:b8:9d:4e:35:0c:24:cb:9f:da:47:f9:55:20:1d:82:
         ee:fd:7f:ad:5c:38:fb:1f:7d:24:f8:2b:1e:71:3a:0f:93:d2:
         b0:6e:13:10:9b:a5:06:01:9a:15:68:01:0b:07:0f:c6:7f:d8:
         0c:f1:60:8c:89:68:a1:ca:95:de:00:1e:f3:f1:0d:e6:04:f0:
         96:5a:b8:36:ba:99:4f:60:f2:6e:2d:07:02:59:30:45:27:9c:
         6a:bd:7d:eb:91:2f:d2:31:f4:13:6f:95:98:65:66:ae:ff:5f:
         29:62:a0:9c:37:a3:04:6a:04:8a:3a:91:55:89:88:5f:6d:39:
         db:22:e9:ef:25:24:6e:60:a8:0d:79:29:6f:96:05:07:31:5c:
         87:ee:7b:39:dc:77:80:61:7e:7c:5c:31:ce:e8:a5:d0:a2:9b:
         b3:7e:21:fc:a0:f1:1f:d4:2b:84:d5:8b:68:05:37:0a:e0:3c:
         9c:76:e3:22:4e:72:e5:ea:1c:08:4a:14:66:dd:e7:7f:34:fc:
         1d:b2:c3:7b:07:1f:4b:28:e8:1d:13:98:21:ba:7b:9e:af:d8:
         89:0c:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 03:07:18 2026 by rpki-client