Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          tjcGj/pj5RsG6WDYmfmfUnRVDJnN8/jLpPFaw5uvB14=
Subject key identifier:   DA:CD:E8:54:D9:3E:8D:0C:03:34:B4:4F:37:CE:A3:EC:21:B6:6F:FC
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       019FA3E063FA20CBDC2AFE19DB1258E14EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          07C4
Signing time:             Mon 27 Jul 2026 14:00:19 +0000
Manifest this update:     Mon 27 Jul 2026 14:00:19 +0000
Manifest next update:     Tue 28 Jul 2026 14:00:19 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: at6g47Esu6x5CVtQJ+dAyWwT2WTk4UXJGsjOocQKjZA=)
                          2: MSkSuk2uY3DEvPKjzciz_6zSiBs.roa (hash: bKmP81Ny3lbO1lhfJcpvSqIFO1Qid3YCkNlkgwazZYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e0:63:fa:20:cb:dc:2a:fe:19:db:12:58:e1:4e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: Jul 27 14:00:19 2026 GMT
            Not After : Jul 28 14:00:19 2026 GMT
        Subject: CN=dacde854d93e8d0c0334b44f37cea3ec21b66ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:2b:87:ab:51:25:1b:0d:70:28:ee:3e:16:
                    2e:4d:bd:ad:01:07:db:7a:86:3f:4c:c3:50:44:10:
                    d7:50:f3:0c:55:3e:ec:ed:f5:f8:32:8c:61:0a:26:
                    e4:0d:29:fb:3a:00:fa:18:2c:c6:ad:32:de:40:7c:
                    ec:55:a6:69:d1:20:60:98:ca:46:ad:d9:15:ee:57:
                    92:c7:0a:85:0a:03:81:57:f6:85:61:38:92:17:5d:
                    9b:72:1f:71:3b:92:7f:28:7b:13:5d:0e:7f:59:2c:
                    07:87:8d:0a:b0:a5:5b:fe:be:9c:97:e3:eb:c9:1b:
                    4e:37:ff:b0:28:c0:6e:33:9b:bf:0b:86:5e:18:9b:
                    0a:4c:db:a5:48:a9:3d:91:52:0b:17:c8:d5:95:21:
                    16:f5:86:19:4c:d3:6b:f0:e2:b3:e9:7c:8c:6f:07:
                    c0:35:f6:29:70:2b:9a:c7:c5:de:53:8b:a7:b9:8c:
                    df:36:6a:ce:ca:e1:d6:40:fa:8f:05:e2:86:e4:e6:
                    c0:df:06:8f:72:5b:8d:fd:ec:04:28:7c:16:de:47:
                    88:7b:50:f1:71:b7:ea:5b:f7:fe:d3:0a:d8:01:b6:
                    2f:4f:95:89:86:9f:1f:00:1f:d4:de:3a:91:c0:e8:
                    ee:1c:64:e7:45:8f:5b:8f:97:7a:cc:d7:22:cc:1e:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:E8:54:D9:3E:8D:0C:03:34:B4:4F:37:CE:A3:EC:21:B6:6F:FC
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dd:a6:78:a8:9d:b2:40:4f:5b:10:58:1d:52:b6:31:6f:70:
         91:35:f2:49:f8:30:75:6f:df:fc:73:0c:af:41:04:1e:5e:a3:
         49:d2:a1:b4:8e:bd:a8:aa:ff:d1:f6:6d:10:8e:02:7f:ed:31:
         a4:16:3e:0b:73:c4:85:2e:5a:a2:a5:73:db:40:e3:be:09:89:
         95:65:21:db:9f:4d:2a:85:be:ca:1d:a5:f7:fb:cf:e2:e4:02:
         2d:34:24:4e:ef:98:42:1a:6a:55:b1:ae:61:b6:96:0d:40:1c:
         a4:ad:90:05:f1:a2:60:ca:f9:99:40:d7:26:3a:7f:ec:6f:ef:
         2d:22:e4:b3:21:b7:fc:63:bb:05:01:16:34:1e:bd:93:58:2b:
         c6:88:40:a3:9a:d4:57:15:bb:c4:1c:63:69:a6:08:44:15:85:
         39:bd:87:75:5c:67:ae:f2:2e:73:58:3e:28:f3:2b:62:ca:14:
         58:03:0c:bc:a0:55:00:fe:dc:74:da:3d:eb:10:59:5a:75:9f:
         14:8c:70:84:b6:8d:a8:1b:12:ad:68:1b:8b:92:eb:8d:7e:74:
         8d:29:18:09:7d:79:d8:26:08:74:58:c7:d2:07:37:96:47:f2:
         d8:7e:89:0e:c6:79:12:64:b9:6a:f2:58:56:be:08:ec:d0:05:
         38:57:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:48:55 2026 by rpki-client