Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          jHNOwMXYLfMf5L6yU3m81Nffw7KVHlqCNGPMX3byqiM=
Subject key identifier:   74:8A:D2:F0:8F:81:C7:B1:1B:6E:47:1A:8A:23:1C:C2:A8:67:B0:29
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       01A0035E0798605E8F1E8B5BB9A7538AF01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          06F9
Signing time:             Sat 15 Aug 2026 03:01:28 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:28 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:28 +0000
Files and hashes:         1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: M/feYv0EotVT8uGjYuFc5pZPGb9Mo3fgaUq/HxutzUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:07:98:60:5e:8f:1e:8b:5b:b9:a7:53:8a:f0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Aug 15 03:01:28 2026 GMT
            Not After : Aug 16 03:01:28 2026 GMT
        Subject: CN=748ad2f08f81c7b11b6e471a8a231cc2a867b029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:0c:b6:90:89:4c:f4:5c:de:04:4d:e4:a5:
                    21:63:f6:98:f2:80:b1:97:d4:da:06:6d:f5:9c:85:
                    b1:6c:cc:20:a2:01:7c:b1:4e:7f:25:71:24:f6:17:
                    80:35:1f:62:00:fb:37:22:cd:a6:7d:aa:12:b5:8c:
                    e7:a1:24:7f:cf:7c:e9:f2:fb:2e:5d:72:57:26:44:
                    f4:1a:a4:98:65:dd:61:b6:04:66:47:56:af:91:78:
                    a8:3c:f8:53:0c:00:80:82:67:ae:62:d6:86:81:ac:
                    c1:ec:17:28:c3:c8:65:f5:ff:6b:23:33:68:76:08:
                    a6:66:52:c0:ea:e3:3b:3b:10:17:d8:93:dd:dc:5f:
                    12:a2:9b:d8:e1:f3:62:56:94:5d:f8:8a:95:d7:5b:
                    9f:60:df:f8:9e:49:b7:43:a2:05:c3:2a:69:24:9d:
                    cc:b9:28:09:cd:b0:cd:79:12:a6:0a:29:3b:22:d9:
                    56:98:99:99:91:f8:d8:ab:d8:5d:69:91:21:ef:38:
                    50:81:d0:9e:ab:4b:3d:ce:90:24:e4:48:80:d7:ae:
                    03:b8:59:76:f2:3b:a9:29:35:44:5c:68:16:61:f8:
                    06:ea:ad:c0:c6:09:ba:54:21:e6:13:54:07:8d:ea:
                    d9:77:21:20:b4:de:03:b1:18:d7:13:0b:fe:46:69:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:D2:F0:8F:81:C7:B1:1B:6E:47:1A:8A:23:1C:C2:A8:67:B0:29
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5e:84:39:32:ab:08:11:28:89:96:dc:22:2f:9a:56:3c:e1:
         21:6d:4a:80:2f:11:33:cd:9c:cd:92:51:87:8b:0f:30:1a:83:
         0d:b6:70:f4:b1:d0:56:a0:58:28:d4:44:d0:71:46:a7:f0:05:
         12:81:3e:08:a3:e4:bd:63:6f:6c:c1:7c:1f:62:7a:df:4b:98:
         ad:ce:d8:cb:99:8c:8f:a6:e8:37:70:a8:e8:52:9f:6e:9c:3e:
         0c:71:53:de:90:30:38:3a:9e:1d:6a:53:e4:4f:25:9b:7d:fa:
         24:83:46:2e:b1:9f:d0:09:38:78:ac:68:45:c7:96:62:d8:eb:
         19:bf:09:87:cb:b5:b2:a2:33:67:39:08:c8:27:c9:7a:f2:4b:
         7f:19:b8:9f:31:a0:f6:76:b8:33:2f:ab:98:1b:88:ed:04:97:
         5e:16:f3:47:7a:13:05:c2:7d:53:72:39:4c:6c:f2:dd:a5:55:
         29:31:fc:ec:c3:13:07:34:3d:b5:d7:72:68:f7:05:2f:d7:01:
         c3:ad:2b:72:94:95:55:55:2e:f5:39:61:22:cb:19:a8:5f:99:
         e9:40:f0:b0:e5:c7:91:06:c9:d0:d2:6a:9e:44:31:9d:fe:36:
         65:8f:42:eb:ec:ce:cc:ca:96:43:3d:c4:45:f4:09:ee:dd:0e:
         46:da:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:45:08 2026 by rpki-client