Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          ul06DpB3sufpyKsUaovqTF3gBkRaMiSCfEheisG0G1c=
Subject key identifier:   86:BE:CA:AF:37:B7:9F:C6:F1:A6:62:3D:95:4B:1C:29:6D:82:63:25
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       019F374ED1A2FD979537915BF255640C9FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          08FA
Signing time:             Mon 06 Jul 2026 12:02:20 +0000
Manifest this update:     Mon 06 Jul 2026 12:02:20 +0000
Manifest next update:     Tue 07 Jul 2026 12:02:20 +0000
Files and hashes:         1: Nytw89CcyDRmKPPk4sKcPeBej7k.roa (hash: /jX42tEK2pmI+UdQCYDIPEu34ud01Vw41VxxvhWNQ5Q=)
                          2: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (hash: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0=)
                          3: XvwcowRQqw3vC8CDzXMHK3Qppok.roa (hash: sYuGrFtDRAMXSeEbGGnBEDhF/9Cc3KSQ5r4kzxa+bwg=)
                          4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: PcMkjqT6oGAcq2+/lNe1lVIkFE0yFo9Dtp1XhIeHdCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 12:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:4e:d1:a2:fd:97:95:37:91:5b:f2:55:64:0c:9f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Jul  6 12:02:20 2026 GMT
            Not After : Jul  7 12:02:20 2026 GMT
        Subject: CN=86becaaf37b79fc6f1a6623d954b1c296d826325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:27:61:09:9b:c1:dd:14:eb:a5:23:20:e2:
                    f9:f6:27:a2:66:44:02:68:70:14:a5:89:d3:6b:0f:
                    f0:43:26:f5:fd:93:0a:f8:05:58:42:4c:88:1f:a3:
                    54:95:6e:7c:75:71:ba:46:41:b7:88:61:a2:fd:9f:
                    83:e2:78:d7:6d:dc:77:9e:d6:d8:83:19:01:35:76:
                    1d:d3:82:b1:9f:d6:74:7b:97:0e:08:8d:90:2e:b4:
                    8b:7f:13:12:92:02:f3:69:1c:21:48:cc:2e:96:f0:
                    03:dd:08:80:27:ee:3e:b6:f4:ef:6c:48:98:d7:7f:
                    cb:d1:72:d7:91:8b:80:63:23:95:ed:be:1f:d7:ee:
                    0a:ce:b6:86:f2:42:c2:ba:82:53:a5:da:5f:68:7e:
                    7b:11:79:98:d3:ea:db:92:ab:99:a0:50:59:8e:aa:
                    bc:e7:f9:43:70:d3:7e:aa:5a:a7:c1:c1:e3:b7:99:
                    ca:88:11:67:a9:dc:11:77:dd:53:66:49:05:9a:50:
                    dd:ab:61:d9:ae:9a:45:ee:e7:c3:fe:2a:55:6f:fc:
                    e7:bd:99:46:4b:d0:6f:b3:2d:fc:d0:b9:79:51:48:
                    76:b8:3d:92:2b:53:30:ed:ae:49:93:94:ec:9c:06:
                    f1:8d:72:0f:60:ff:b4:a2:66:ee:a1:91:b2:0f:df:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BE:CA:AF:37:B7:9F:C6:F1:A6:62:3D:95:4B:1C:29:6D:82:63:25
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:ab:3b:c8:fc:29:14:f7:db:72:95:16:05:99:27:5a:a2:
         13:d3:f1:fd:2a:f3:f4:83:8b:51:cd:38:3d:7a:60:a1:cc:eb:
         89:88:59:65:b6:05:1a:b7:44:76:7b:97:02:2d:19:31:5c:ff:
         2a:ae:cc:ee:c9:47:ef:76:05:e4:9a:ac:17:01:9c:53:53:54:
         a9:1c:62:55:bc:9c:d0:33:f2:bf:be:97:38:ff:af:d4:39:f6:
         79:08:91:a6:06:bd:be:18:b3:76:f9:0a:d2:2e:c5:25:f6:67:
         5d:99:8a:96:e0:e9:00:db:8f:71:a9:34:a4:be:a6:6f:89:99:
         02:0d:f6:4b:61:99:e3:1f:24:b1:59:5f:03:f5:69:0a:65:84:
         f5:79:dd:a9:9b:3c:c6:52:cd:9a:10:2d:11:a4:bb:02:52:5f:
         6f:a3:4c:4b:8d:c7:0b:28:3e:a8:8e:2f:a6:17:d1:fc:0e:68:
         61:2a:40:ab:d0:50:a9:c6:1b:34:14:f9:a5:f3:bb:ba:9b:38:
         a7:dd:6b:ef:78:26:d9:e0:46:51:e1:31:17:a6:3e:6b:4f:d3:
         b5:2a:ce:48:5a:67:62:89:48:be:d7:d6:ed:f7:b3:e2:54:9c:
         de:a6:9f:c3:b4:90:e3:18:63:4a:4d:3c:12:98:3c:be:a0:e6:
         85:84:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:13 2026 by rpki-client