Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier:          TDyfkHMZ3WKph6U3fBRZN3uv8EiRgHHVx7B915locbE=
Subject key identifier:   02:28:15:D4:25:15:60:C8:47:42:09:C9:EF:97:06:ED:B7:6E:4D:C5
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer:       /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial:       019F859FC06C866A1D6709511C7FEB750791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number:          050C
Signing time:             Tue 21 Jul 2026 17:01:06 +0000
Manifest this update:     Tue 21 Jul 2026 17:01:06 +0000
Manifest next update:     Wed 22 Jul 2026 17:01:06 +0000
Files and hashes:         1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: +iNib8iu0cj/wq6XqL2wohHRprczQMInjI1uFGALI/E=)
                          2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:c0:6c:86:6a:1d:67:09:51:1c:7f:eb:75:07:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Validity
            Not Before: Jul 21 17:01:06 2026 GMT
            Not After : Jul 22 17:01:06 2026 GMT
        Subject: CN=022815d4251560c8474209c9ef9706edb76e4dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:49:54:3f:82:54:77:cd:bd:bb:7d:39:d4:
                    27:4e:e9:9a:4d:58:2d:39:1b:61:7e:07:bc:7e:a7:
                    df:74:fd:ec:3a:b3:bb:03:d7:75:54:22:ca:3e:1b:
                    37:19:c2:65:93:a7:e5:a1:0d:54:8e:8d:66:7c:05:
                    63:dc:44:5f:38:b6:10:40:62:b2:a4:56:fb:64:0e:
                    b9:83:27:ce:cb:af:6a:d2:be:3f:0f:71:95:c0:5c:
                    2f:9d:80:c0:ad:83:56:d4:a6:7a:55:e9:d8:a6:d2:
                    33:a0:75:8f:34:55:52:e3:47:bd:c4:64:a0:c0:9e:
                    8b:0f:7d:3a:3a:ef:d6:4f:2c:4c:0c:35:9e:13:9a:
                    8f:43:40:10:1b:bd:82:97:19:bc:9f:c5:04:f8:4e:
                    c9:e1:63:9a:c0:b3:60:f7:c2:21:b8:cb:0f:92:a2:
                    e7:f9:1a:96:f5:93:a1:3c:fe:ad:a4:82:77:d4:1e:
                    0e:da:de:64:e3:7b:49:70:f9:2d:60:d0:4c:f7:c1:
                    10:70:33:27:b7:63:1c:dc:2a:55:32:03:f5:20:41:
                    80:eb:66:73:4c:2c:7a:20:94:60:17:0e:0a:9c:48:
                    c2:f6:82:33:fa:dd:a2:40:46:91:e5:8f:89:fc:24:
                    8b:c3:8a:e2:a1:e6:41:76:47:1a:06:fa:44:23:d3:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:15:D4:25:15:60:C8:47:42:09:C9:EF:97:06:ED:B7:6E:4D:C5
            X509v3 Authority Key Identifier:
                keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:16:27:15:aa:a3:32:93:6c:78:6f:ff:ce:3b:28:13:4e:f2:
         b8:34:5f:a7:e5:6d:11:ba:a2:b2:f5:45:17:f7:de:b9:f2:de:
         e8:bd:88:89:32:9f:9d:3e:d0:70:27:32:e5:5d:98:d3:20:15:
         e7:2a:59:d9:b1:a1:0a:2f:96:c5:43:ad:b9:d2:3c:9f:2d:c6:
         81:60:fe:a8:cc:1c:52:49:21:1f:cf:21:a5:a5:37:46:ed:89:
         de:6c:eb:c3:b8:59:9c:ec:83:37:e7:19:c6:de:3c:29:95:fc:
         0b:5b:3e:d8:cb:68:fd:6e:61:63:3a:95:23:47:59:00:b7:14:
         49:35:17:24:17:a3:df:36:d0:14:53:e9:7d:e7:05:63:8d:96:
         a3:c1:cd:19:e2:ca:af:0f:f0:80:cd:57:46:47:be:79:2e:08:
         43:23:67:54:f8:80:7f:64:3c:12:23:0f:94:f7:fd:16:9d:e5:
         55:66:75:f5:02:c6:16:89:98:a2:ca:ed:28:0e:dc:e2:db:8a:
         80:bc:79:98:bc:6e:6b:f5:13:d1:7e:76:51:ad:22:61:00:a8:
         cf:17:60:4e:6b:dc:b6:2f:7d:a3:aa:2d:8b:4f:33:30:e4:5a:
         55:b5:d6:8b:d5:0c:9e:21:86:c4:a2:05:22:d7:b6:b4:8d:bb:
         34:6a:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:23 2026 by rpki-client