Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
File:                     MeZZHRoE1q_h7V9O0B05SuUUhYk.mft (raw, json)
Hash identifier:          Pal6yrURqWuHwvDLP3Ev1drc/b/QkQDes1x2cuBbh5I=
Subject key identifier:   2D:A0:37:8D:EF:95:6E:9F:1B:30:F2:68:F2:20:DD:6D:CD:AA:A3:1C
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Certificate issuer:       /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial:       019FA0A8DD5EB8A8FE2B9AC63F0A19FC9DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
Manifest number:          09CA
Signing time:             Sun 26 Jul 2026 23:00:48 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:48 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:48 +0000
Files and hashes:         1: A3lVBLx0tfXqu8Z1p69hC72YSag.roa (hash: jjAjeAWWLQ7XK9pNf9wldiLMOA+vzwkIFXt7EDHljaY=)
                          2: MeZZHRoE1q_h7V9O0B05SuUUhYk.crl (hash: lnu5nw2WwM5VIHNhopvulQBTUoKgfm4mjTpGAmYlTy4=)
                          3: SxGsz39JK4elqIESwZ8Cfqg5W6w.roa (hash: 12+/ABqOQXT9ibPvlhUH6RlbzbI9x38jh4FCtzMqGuY=)
                          4: _P35jS1YdYMseUzMHuI97ooNJeg.roa (hash: /gCkgKwVc1WRgNPEwprmDB3zy3RVJ0h/ka2X69aylhQ=)
                          5: csbbsPh9KC49mBnhTppZksDsY40.roa (hash: mPaBJJIoQKQRRnr2VJcXQT7Jq69TiXABx2jiGwRlgYY=)
                          6: lKlsXSW_UufTRSeT5DpXUJKMYeM.roa (hash: js4hI1WGiX+pBxnEihMMzWhTJzxKRFZYyb/eWGT+JX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:dd:5e:b8:a8:fe:2b:9a:c6:3f:0a:19:fc:9d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
        Validity
            Not Before: Jul 26 23:00:48 2026 GMT
            Not After : Jul 27 23:00:48 2026 GMT
        Subject: CN=2da0378def956e9f1b30f268f220dd6dcdaaa31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:99:60:8b:78:f8:e1:34:ad:05:fb:42:ac:
                    e6:9b:6f:b5:5f:96:6d:0e:79:3a:a6:bb:de:3a:b0:
                    97:db:9f:9e:21:ef:c3:3f:71:a8:f2:e3:d9:54:b5:
                    52:1e:53:0c:a2:14:a8:5f:86:bc:f6:f4:2d:20:32:
                    51:56:8f:4a:37:e9:bc:17:72:f3:cb:3d:67:13:ee:
                    1d:f9:3e:33:ba:2b:5f:0f:52:be:22:62:82:fe:53:
                    dd:8b:ec:5b:7d:b3:a3:eb:b8:90:d2:60:7c:a2:cc:
                    24:a3:4f:3e:b8:5a:15:04:90:50:4d:ca:6f:f3:5e:
                    08:e9:aa:1b:3b:6b:d8:f4:79:14:c5:8d:fa:02:23:
                    55:31:39:1f:77:b6:11:98:7c:e0:7a:18:e9:0c:2f:
                    90:a7:d5:e0:20:92:df:f7:e6:fb:17:8e:16:28:92:
                    bf:e0:07:ff:00:1c:e8:bc:22:0b:1d:b0:0a:c6:24:
                    88:2c:98:92:89:10:0d:84:99:5f:d2:f2:06:3b:bb:
                    e7:75:ca:e8:c3:a5:83:61:2b:d8:df:fc:83:da:51:
                    f2:89:7c:ec:52:42:8b:66:ab:e6:ac:e9:86:25:d7:
                    96:fe:c7:84:2c:a2:58:75:fc:1b:70:01:0f:87:22:
                    2e:3e:8d:f6:a3:50:fa:5c:86:f9:e3:6b:cd:6c:a9:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A0:37:8D:EF:95:6E:9F:1B:30:F2:68:F2:20:DD:6D:CD:AA:A3:1C
            X509v3 Authority Key Identifier:
                keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:fe:15:9e:74:95:89:5c:d7:8d:c1:2c:11:ed:40:ac:5d:
         11:04:f8:fa:14:f8:06:14:24:4d:ab:40:7d:7b:a0:60:38:05:
         02:e7:54:4c:e1:75:1d:fb:bf:0b:cf:7d:69:31:01:e1:4e:42:
         83:3d:52:f4:ac:76:90:7d:6f:59:97:d6:77:18:43:91:fd:af:
         21:a4:4a:bc:28:e0:49:11:00:5c:6b:26:ae:63:5c:17:6b:cd:
         3c:6f:2f:9c:b4:61:6a:90:d4:38:a7:d5:25:6a:5e:ae:b2:65:
         07:4c:5f:90:32:00:87:b6:85:25:91:1b:8d:73:8e:9c:63:ec:
         a9:3e:74:f3:d3:fe:99:09:ee:c3:fd:00:01:a8:4f:a3:70:f2:
         87:42:96:9d:2e:be:2e:d0:3c:41:c7:30:cc:a6:66:72:97:e2:
         b2:1c:3d:5f:12:21:43:cd:0c:13:b9:c2:e2:47:d6:80:d6:55:
         64:c3:8d:ee:e5:e8:92:17:9b:38:a7:be:c6:b9:70:85:91:b6:
         b6:da:d9:55:cd:ad:2e:27:01:04:80:0b:7f:ae:30:0e:ae:cf:
         ea:88:87:3e:bb:66:76:ba:62:f9:e0:67:c4:d9:5b:72:c7:17:
         68:83:bd:b7:9a:65:36:78:f4:0e:7b:94:d9:20:bc:2b:79:28:
         7c:d9:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:07 2026 by rpki-client