Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File:                     1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier:          Cne2x1+XNT1eZnaKEbfG7oYq+AAik4CJC/lR/kURT0Y=
Subject key identifier:   F3:4E:C5:F9:09:FE:A5:CE:D0:39:BC:8E:0D:EB:62:1A:DF:93:12:E8
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer:       /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial:       019FA0E0D5BF93CAAEA8AF1148D4DCB32062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number:          0962
Signing time:             Mon 27 Jul 2026 00:01:56 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:56 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:56 +0000
Files and hashes:         1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: CeS/7zEGgTWvM/gnC5bb3wvRYFONbwubRuQTGmfpBo8=)
                          2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:d5:bf:93:ca:ae:a8:af:11:48:d4:dc:b3:20:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
        Validity
            Not Before: Jul 27 00:01:56 2026 GMT
            Not After : Jul 28 00:01:56 2026 GMT
        Subject: CN=f34ec5f909fea5ced039bc8e0deb621adf9312e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:8d:8d:b4:ba:1c:e1:f7:fc:17:1c:b4:33:
                    fb:24:ac:af:39:20:b4:69:e7:17:3a:0b:80:58:c8:
                    52:f4:93:47:4d:f0:ac:6a:29:50:d5:31:8e:dc:a0:
                    c7:ec:21:9f:41:ca:a7:c2:3f:aa:0a:ea:68:ad:5d:
                    2d:50:0a:71:8c:e1:8e:a1:f2:c3:dc:4b:41:00:96:
                    1f:1f:9e:b0:ca:82:49:fb:41:e7:94:49:d9:18:1d:
                    d1:c9:de:f6:09:9e:5a:18:5c:b1:54:2d:18:33:a2:
                    3b:5a:5e:cf:2b:70:3b:d2:4e:6d:95:5f:b7:1d:5f:
                    42:3d:6a:98:aa:99:27:9a:05:ef:26:35:63:3c:6f:
                    2b:14:9f:7f:6a:a7:07:76:23:b2:7b:52:d2:72:3a:
                    5b:df:35:18:85:ce:84:0b:31:f3:71:38:9c:4f:e3:
                    41:d1:55:9b:ca:9a:da:61:15:95:b0:94:57:2c:30:
                    11:0a:14:e4:e0:ba:c6:e0:c9:29:a5:67:2b:27:02:
                    8c:7e:7d:1e:7f:2d:d5:ed:60:45:c1:3e:4d:98:40:
                    92:ec:96:bd:e7:37:76:8b:d2:5f:17:06:5a:03:3e:
                    91:62:3b:12:63:e9:ee:a5:c1:f4:c0:ec:ca:21:63:
                    1f:6a:00:4a:b5:fd:29:13:bd:f9:d8:8c:10:c3:44:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:C5:F9:09:FE:A5:CE:D0:39:BC:8E:0D:EB:62:1A:DF:93:12:E8
            X509v3 Authority Key Identifier:
                keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:fc:39:d2:4a:88:fa:f4:ed:e6:b0:d6:36:2f:68:58:6c:37:
         e0:d2:d8:f6:12:6c:ab:0e:1d:fa:af:bd:71:20:79:59:23:7a:
         ac:6b:7e:c4:5d:58:9e:f5:e7:e7:fc:0a:99:c8:73:f6:c8:f4:
         07:43:d0:6e:3a:9e:7b:a3:97:cb:30:14:38:a6:aa:cc:5c:02:
         2a:b4:26:40:9a:42:79:45:e3:db:38:af:a3:50:ee:02:a6:2b:
         08:a9:ef:6f:ef:17:d4:7d:52:9b:a4:1e:0d:36:ae:a5:0f:cd:
         57:f1:17:65:5d:92:54:be:f9:e6:49:4d:6e:3a:4f:5d:ea:d4:
         14:f5:81:b0:41:dc:5b:93:20:b5:cd:80:fd:38:25:be:ed:d0:
         bd:41:8e:2a:2d:18:1e:13:f0:d8:35:bb:2f:e3:87:fe:be:20:
         c8:b9:52:95:66:13:e2:f8:71:73:82:0d:95:dd:2e:c7:c3:e9:
         37:4f:d8:0d:76:76:e4:cb:26:14:e7:71:a9:3a:51:7e:52:4b:
         61:1c:76:61:86:a2:5a:71:2c:e5:b1:23:0e:dd:63:5d:ab:f3:
         57:4f:db:a7:41:c4:d0:3c:ef:2a:20:22:ee:01:a8:36:19:f3:
         49:51:eb:fc:a2:d3:10:ed:d3:ee:da:bc:62:a6:0d:b6:4a:1b:
         6c:4e:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:23 2026 by rpki-client