Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
File:                     b9O3_1LTsZJWeqzKTZuGInQbf3o.mft (raw, json)
Hash identifier:          UFx1Pki2Qlodmhu8J5K9jsyOQ0sCtDSnnmGW7qZtrYg=
Subject key identifier:   D0:20:87:18:37:22:C8:4F:2C:A5:3A:A5:F7:44:D3:22:71:F1:22:95
Authority key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Certificate issuer:       /CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Certificate serial:       019FF9B5C4FAAA7EB9150CEFFF3AA96D5B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
Manifest number:          76
Signing time:             Thu 13 Aug 2026 06:01:06 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:06 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:06 +0000
Files and hashes:         1: b9O3_1LTsZJWeqzKTZuGInQbf3o.crl (hash: 9JdVwug0VP60grbO7t1qrxtP3qfRvtjadouBvypbzd8=)
                          2: oezyOEn59V6mni3H8CQ5vs1bQnw.roa (hash: q4IZ+VG661pUAowCN5QrAWUUig5pgHw4H2UhgQ/noNs=)
                          3: s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa (hash: 9PM53IuTV6JPTHt2d4Dv4yh3Dx6FAU5utGwfVFOGN9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b5:c4:fa:aa:7e:b9:15:0c:ef:ff:3a:a9:6d:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
        Validity
            Not Before: Aug 13 06:01:06 2026 GMT
            Not After : Aug 14 06:01:06 2026 GMT
        Subject: CN=d02087183722c84f2ca53aa5f744d32271f12295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:ac:da:38:f9:db:93:97:6e:e6:95:4a:81:
                    14:b4:b5:1d:b5:9a:12:14:1e:ba:52:9d:35:5b:1c:
                    7d:1d:eb:ee:40:79:c6:73:e5:64:b9:66:c1:50:96:
                    36:ae:af:c6:53:f9:47:4f:3f:92:69:c8:47:b1:7b:
                    d1:04:f5:32:19:40:dd:48:04:f8:f1:f8:21:20:6d:
                    81:4a:b5:3d:0a:56:e4:95:d2:7d:82:ed:bc:f7:dc:
                    0b:8b:0f:b5:43:77:1d:2d:82:d9:d5:c0:26:e2:c8:
                    e1:40:56:60:cf:e2:30:a1:c2:e7:6a:05:94:6f:54:
                    6f:cf:a8:65:89:3f:28:4f:0b:75:be:33:ef:12:a1:
                    3b:0a:92:1e:df:0a:af:36:11:ee:3b:ad:b5:4d:3c:
                    0e:50:99:64:35:f5:d2:8a:30:38:32:52:8d:ca:d5:
                    95:87:f3:61:a9:f1:ba:7c:c4:e6:ff:80:34:70:3d:
                    81:01:43:8f:7e:48:df:03:50:3b:62:f4:90:c7:83:
                    57:a7:8f:28:ec:cc:70:fd:d9:52:b2:8b:cf:c0:79:
                    ec:4a:63:7d:bf:4d:4c:6b:14:2f:99:da:fa:f5:6b:
                    c6:51:6d:21:4e:5d:0e:d6:b4:93:ec:ee:aa:15:be:
                    68:f1:01:18:f8:cd:48:16:4a:c6:ae:1a:a3:7b:6c:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:87:18:37:22:C8:4F:2C:A5:3A:A5:F7:44:D3:22:71:F1:22:95
            X509v3 Authority Key Identifier:
                keyid:6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:13:18:cd:d1:76:05:20:a0:44:eb:53:5f:0b:7c:12:20:
         90:c6:f4:fc:79:a5:6f:3c:d2:c0:14:6a:6d:bd:81:8f:98:9e:
         e6:07:09:8e:a5:74:f5:98:15:8f:db:5f:63:73:33:81:24:4f:
         5a:3d:8c:ff:ff:0c:a5:70:84:64:4e:1f:5b:1a:6d:08:16:ae:
         b6:78:49:d3:86:70:3b:f6:17:cd:c8:05:ce:69:8a:b6:c9:aa:
         b1:cb:fd:0b:d0:4d:b2:33:73:57:2e:16:d2:69:6e:7f:04:9c:
         04:0f:24:cd:7f:a2:ac:00:90:4d:8e:09:50:62:ef:d7:d2:2c:
         31:ba:67:81:3d:e6:ff:55:4b:f2:eb:b4:1b:01:6f:b8:6a:95:
         f2:1b:f8:d4:8a:2a:61:91:a2:d4:64:4d:48:16:01:5d:db:a1:
         e2:b0:e5:3d:42:d3:dd:68:c6:04:bb:11:1f:12:0f:4e:0d:0c:
         05:18:07:f7:3e:8f:aa:38:ac:70:36:29:ca:66:ed:9a:3b:8b:
         62:3b:7d:16:f0:2c:4d:1b:30:09:f9:b6:f2:25:54:6c:ec:fc:
         af:c2:d1:ec:f5:65:8f:a5:28:6e:8b:cc:d5:28:6b:68:da:63:
         ee:8b:54:89:7e:dd:2e:52:d2:c6:fd:e6:d9:4b:fb:a8:4e:c3:
         7d:61:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:26 2026 by rpki-client