Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File:                     pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier:          dCnkJIBQMW70SZ8olDsL82C6tyTlqA19yJj35wDcVns=
Subject key identifier:   9E:68:70:3E:CB:50:E7:AE:4B:17:2B:5A:D0:1C:08:AF:0B:22:7F:F3
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer:       /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial:       019F7173879763628BE7141B4C7E75191CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number:          0218
Signing time:             Fri 17 Jul 2026 19:00:24 +0000
Manifest this update:     Fri 17 Jul 2026 19:00:24 +0000
Manifest next update:     Sat 18 Jul 2026 19:00:24 +0000
Files and hashes:         1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
                          2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: CLj0sC1kFKq5nFVanjKGE6ffWYFzzKzODq4sM4g5/s4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:73:87:97:63:62:8b:e7:14:1b:4c:7e:75:19:1c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
        Validity
            Not Before: Jul 17 19:00:24 2026 GMT
            Not After : Jul 18 19:00:24 2026 GMT
        Subject: CN=9e68703ecb50e7ae4b172b5ad01c08af0b227ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:03:5c:86:ab:f5:55:2c:f0:b4:48:09:1d:
                    58:07:fa:c7:3a:c7:ec:a9:89:11:f1:5b:7b:6b:6e:
                    d3:e9:c6:f4:c0:ec:e9:75:6a:fb:85:15:bb:d5:38:
                    41:c0:f4:b2:18:6b:42:ee:db:d1:65:4e:fc:10:9d:
                    8d:2c:3d:54:99:c1:6b:10:8f:e3:70:50:e6:3b:ef:
                    57:96:97:37:a0:70:f9:3a:77:49:34:3a:69:73:3e:
                    a4:de:ca:be:91:f2:48:18:19:df:8c:4e:f0:84:5a:
                    96:90:1b:8b:08:f8:5e:d0:43:82:c6:42:60:f0:e5:
                    68:58:63:55:98:f4:45:cd:4c:77:99:17:b8:21:05:
                    3a:99:39:c5:bd:8f:ae:58:bd:55:81:2c:24:d2:0e:
                    4d:0d:d7:e9:9a:2e:b7:61:c1:dd:ab:48:59:8a:98:
                    b3:61:2f:14:22:60:47:64:a4:a4:45:64:27:ee:4e:
                    77:62:66:c4:98:a1:70:76:86:cb:25:d2:fa:b9:70:
                    bc:ac:5d:f3:34:a7:80:cb:6a:3d:02:82:67:c5:32:
                    d3:f9:11:27:49:ab:de:06:69:87:65:fc:30:fa:2e:
                    9d:ab:1e:23:9b:be:fa:07:6d:01:7f:44:8b:6c:78:
                    8d:7f:8a:37:83:94:70:63:7e:c2:95:10:70:41:a5:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:70:3E:CB:50:E7:AE:4B:17:2B:5A:D0:1C:08:AF:0B:22:7F:F3
            X509v3 Authority Key Identifier:
                keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:37:32:6f:1a:27:f4:b2:06:a0:60:fa:8e:69:84:20:cc:e4:
         15:e9:94:19:09:00:7c:26:1c:3a:f9:0f:ec:79:24:1d:15:7a:
         5f:72:7f:0f:0f:4a:8a:be:7d:55:00:e9:62:ab:bf:9c:74:82:
         c8:39:ea:ef:a0:e0:22:00:33:fe:f4:a1:5d:b9:19:92:bb:db:
         80:7d:ec:71:6e:de:12:c2:53:80:82:68:2b:05:1d:75:a1:03:
         2a:59:ae:88:5f:10:99:d4:04:87:73:22:7a:99:ba:d8:12:bb:
         8e:7a:77:7f:90:7b:7b:d6:b6:f1:68:49:ce:d9:3f:b7:b7:b4:
         12:b2:f6:9e:d8:17:a8:c0:30:12:b0:03:40:04:ac:1a:4d:68:
         ba:20:79:6b:33:70:dd:3a:e0:e4:d9:92:da:37:3b:16:a1:fd:
         d0:3b:09:e1:9c:5c:11:11:67:a3:6a:19:66:4e:69:ae:1c:5a:
         a8:0f:ab:67:b2:1b:7d:f0:bd:12:3e:5e:75:15:b3:83:d2:7d:
         48:bb:3d:69:c9:dc:8f:4f:cd:7c:03:dc:d3:36:0c:a4:0c:ff:
         2e:b0:ab:ec:3a:77:db:89:eb:2b:15:43:05:60:69:b5:9a:7c:
         1f:c0:80:8f:8f:5d:e0:aa:5d:4f:a1:30:ac:16:c2:42:24:bf:
         03:47:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:28 2026 by rpki-client