Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          QmrgMfk+yzUs0Y0RizQzhEB/EhaLiGzMq78vNS1UOHc=
Subject key identifier:   24:CB:F3:45:34:FF:5C:40:72:FE:83:B8:75:BA:10:0F:7F:C0:94:FB
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019F830C08B2101902CD0A87DA4CCB2C32A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0E5F
Signing time:             Tue 21 Jul 2026 05:00:31 +0000
Manifest this update:     Tue 21 Jul 2026 05:00:31 +0000
Manifest next update:     Wed 22 Jul 2026 05:00:31 +0000
Files and hashes:         1: UCdBL2cD1nASc373rfpJddfKBRk.roa (hash: lFmC2crxbHri6/LBkNCkhFFRFW/esHZK/bXeT9XM8CQ=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: WW8wIwNCiySufL9vUFfy6TWeGIyPVmsn+DcsiqogxC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:0c:08:b2:10:19:02:cd:0a:87:da:4c:cb:2c:32:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Jul 21 05:00:31 2026 GMT
            Not After : Jul 22 05:00:31 2026 GMT
        Subject: CN=24cbf34534ff5c4072fe83b875ba100f7fc094fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:c1:ff:09:7f:70:1d:87:15:d6:07:64:d5:
                    cd:3b:dd:66:ac:eb:50:16:ff:03:fc:29:81:ac:a0:
                    5a:2b:73:3f:01:fa:c5:e8:f0:bc:c7:6d:98:1e:80:
                    1d:2c:e9:0d:c2:d7:aa:80:f8:61:ae:25:4d:4b:59:
                    1f:7b:ce:16:71:7d:32:c1:e3:d2:79:6c:be:27:ef:
                    d5:9f:5d:48:f1:f7:f8:4f:33:56:b5:13:2c:b0:96:
                    78:92:fb:b6:b6:38:ff:d7:51:a6:82:cd:5a:7f:71:
                    24:de:74:fd:1b:a5:2e:d1:fc:37:05:88:1b:25:b4:
                    bd:82:6d:1e:72:69:c3:3a:4b:9b:e5:8d:86:d7:fd:
                    73:a8:72:e7:9c:db:c0:c6:f8:ae:f7:0b:36:29:0b:
                    20:b4:ec:85:64:af:41:8b:0b:23:b4:8f:72:f0:ac:
                    1f:da:5d:48:f2:3c:c0:1b:62:75:98:ea:6f:d8:0e:
                    f3:ac:d0:3a:8e:21:ba:b6:d3:69:17:70:8a:b1:5e:
                    37:ac:50:ce:89:52:24:57:2b:03:95:55:b7:10:5a:
                    96:bc:df:2d:f9:92:87:e4:48:50:81:9b:78:44:8f:
                    30:5c:2a:e1:43:0f:3e:e9:1d:50:d1:a7:7f:df:b1:
                    1d:b6:c7:f7:65:7c:6c:39:7a:0b:df:87:d1:c1:88:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:F3:45:34:FF:5C:40:72:FE:83:B8:75:BA:10:0F:7F:C0:94:FB
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:68:87:f8:e1:39:58:ad:22:5d:1d:1c:35:65:94:f0:1c:ae:
         eb:97:00:e5:19:2d:0d:67:73:b6:fa:bb:8a:a0:59:8a:b5:46:
         3b:da:3e:59:29:e9:96:73:a3:78:e2:dc:e1:87:53:a5:21:80:
         80:29:9a:f2:bf:9f:43:66:de:2c:a5:69:5e:be:e0:30:79:49:
         2b:9f:f6:df:03:42:1b:06:20:7b:ef:db:24:7a:ad:c4:5e:58:
         2d:57:aa:ee:52:87:1b:c3:01:20:37:2a:b5:ce:3f:35:58:18:
         a6:32:f5:76:0a:3b:68:09:f5:3e:63:88:1a:39:df:39:42:e6:
         78:90:c8:25:56:dc:06:69:31:7b:4a:f4:6e:9c:df:e1:48:dc:
         0c:c4:31:99:ad:5c:b7:89:e0:4e:c0:a1:1c:4c:4c:d0:54:5d:
         0f:95:5f:e9:63:85:77:84:63:56:e8:40:c0:a6:14:fb:15:38:
         ec:78:f8:2a:3d:2d:4a:da:40:b8:09:b7:d1:1c:b3:65:11:e1:
         3e:e0:00:6c:f5:c2:5a:62:3a:ef:37:94:7c:c1:74:3f:d7:a3:
         27:aa:0c:38:44:62:71:e1:24:73:68:d3:61:23:8f:88:25:29:
         82:cc:ab:e1:78:65:95:3c:f0:12:35:90:bf:71:d7:10:fa:e0:
         1d:67:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:59:04 2026 by rpki-client