Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File:                     dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier:          C8h4uo+nO5SbwOPsEadz/UhVzP9GRPbKsYEdSnEh/zA=
Subject key identifier:   0A:1E:08:86:74:DE:A5:F9:4A:04:25:B9:B3:7A:35:9F:88:57:81:53
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer:       /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial:       019FA14D79DA2F1001FDF3CCAF2EBE2EF8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number:          0CC5
Signing time:             Mon 27 Jul 2026 02:00:36 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:36 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:36 +0000
Files and hashes:         1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: H3ezqtQ2SwAnu0XPL9dDxvs42LZkwJeLyfDZIiEpT0M=)
                          2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:79:da:2f:10:01:fd:f3:cc:af:2e:be:2e:f8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
        Validity
            Not Before: Jul 27 02:00:36 2026 GMT
            Not After : Jul 28 02:00:36 2026 GMT
        Subject: CN=0a1e088674dea5f94a0425b9b37a359f88578153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:f7:e8:65:a3:6f:8d:ec:01:92:15:49:9d:
                    f9:ce:ef:7b:a8:42:e6:ec:3a:f0:0b:b4:ec:e9:98:
                    f0:7f:ab:bf:5b:27:3d:5d:e4:70:11:99:29:8c:d8:
                    5a:35:0b:41:44:7b:56:ef:02:ab:89:c9:6a:93:7f:
                    27:a1:74:68:30:bc:f8:81:3a:cb:48:44:b8:00:e5:
                    4c:e1:07:ef:6a:23:74:26:b1:19:58:a3:4e:1d:2d:
                    95:e2:e6:f4:03:12:ed:b7:92:09:b2:70:07:e7:fd:
                    eb:42:2c:03:7b:7a:40:3a:98:48:0c:05:53:a7:97:
                    18:22:37:d2:1c:f7:c9:e8:47:3b:f1:aa:dc:aa:fb:
                    81:16:3e:68:20:0f:9c:b6:e3:25:b5:ac:a9:ec:a6:
                    b5:cc:8b:2b:e3:48:ab:8a:ce:30:f5:10:f3:d7:96:
                    fc:ca:01:fd:cf:2f:ea:b1:44:3b:a9:ac:c0:19:b1:
                    cc:54:76:7a:ba:33:4e:2c:73:0c:8e:20:0c:1f:c9:
                    09:81:7d:39:5c:74:4b:b2:66:7f:c9:a4:f5:24:47:
                    63:a4:6a:6c:d5:e9:79:7c:ce:99:33:da:69:0b:7b:
                    a6:ba:84:c9:6f:99:cb:1c:53:bc:a1:d8:ab:c3:85:
                    03:e4:f2:fa:d3:40:95:d3:73:3a:51:23:f1:06:fc:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1E:08:86:74:DE:A5:F9:4A:04:25:B9:B3:7A:35:9F:88:57:81:53
            X509v3 Authority Key Identifier:
                keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:89:90:18:42:24:dc:52:41:67:ea:b5:91:f4:51:dd:54:
         53:8c:b7:d2:5c:6a:da:03:26:f9:90:f0:6f:6e:a7:0e:f2:f7:
         6a:4a:db:48:60:7f:37:7f:a0:47:79:48:22:b4:6f:91:4d:5a:
         37:04:51:73:e7:a6:e0:d3:c3:59:9e:ee:cd:d3:7f:45:2e:dc:
         53:fe:67:e0:c3:f9:30:56:a3:c2:42:0d:96:53:45:16:ae:0f:
         bc:a6:61:43:3a:33:d4:df:23:0a:4f:5a:2a:67:7c:5d:48:6e:
         7d:d4:02:75:e5:60:08:6a:d2:60:0f:26:46:3d:80:4b:c4:2b:
         e5:90:46:37:26:c7:2d:29:2c:c5:df:57:81:31:a7:29:61:d7:
         2a:d1:2b:ab:80:9a:8f:34:e1:ac:09:7b:fe:79:d4:ef:de:5d:
         a3:34:f9:c6:fe:45:33:c4:0e:28:df:48:aa:4b:89:12:ae:d2:
         2f:cc:d7:9c:01:9d:37:43:8f:5c:49:ac:91:b8:15:e0:cc:98:
         24:2a:c6:39:09:2e:72:d0:38:74:f7:88:dc:43:bf:3b:0f:93:
         7a:e6:da:2b:54:7a:43:52:41:00:69:8e:bd:d0:33:62:27:75:
         1c:14:c6:f5:34:96:b0:88:23:5f:99:ce:d5:82:ce:74:d3:86:
         b1:b4:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:20 2026 by rpki-client