Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File:                     o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier:          T38R2bTUWEdybcbo4+7bBELzRzf4N6W4SGdLpL9H1x8=
Subject key identifier:   91:EE:54:AC:17:B3:07:C4:1E:20:C4:6E:34:75:AE:F3:80:58:57:73
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer:       /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial:       019FA1F2788919B6554A9227AA424247FAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number:          1613
Signing time:             Mon 27 Jul 2026 05:00:49 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:49 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:49 +0000
Files and hashes:         1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
                          2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: +51szVyq3MfdpTw51gec3hhmEiuPrWr0Cwe/4j+4noM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:78:89:19:b6:55:4a:92:27:aa:42:42:47:fa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
        Validity
            Not Before: Jul 27 05:00:49 2026 GMT
            Not After : Jul 28 05:00:49 2026 GMT
        Subject: CN=91ee54ac17b307c41e20c46e3475aef380585773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:1a:4e:55:a9:01:1f:b3:e0:b5:a2:07:c8:
                    46:00:ed:19:00:a6:63:ed:92:8d:92:91:55:bf:1a:
                    0d:0b:ac:e2:6d:4c:f9:6b:dc:15:4d:b9:d9:37:24:
                    b1:d1:66:f6:8d:85:70:85:35:4c:74:86:e8:b9:aa:
                    a0:12:16:22:50:c4:9b:72:81:88:dd:bc:ea:fb:fe:
                    22:73:18:21:41:56:1d:1e:15:2a:5f:0f:ce:40:bc:
                    91:13:e1:0e:02:45:f2:a4:cd:89:04:4c:3e:fa:5e:
                    d1:a5:9d:12:30:1c:18:14:ce:59:40:d1:5d:70:ae:
                    8b:79:6c:2f:37:76:96:5b:da:4f:f4:c1:71:20:5b:
                    5b:88:bc:57:65:7c:fd:a5:5f:83:21:47:8d:50:06:
                    48:32:fd:51:ae:c7:c7:8f:ae:62:b1:5f:48:bf:57:
                    3d:9a:46:d8:ce:ac:c4:c2:d7:9a:03:5b:23:79:03:
                    3b:2e:85:c8:e2:59:19:54:2f:1a:e6:ef:9e:0f:50:
                    ba:f4:b2:09:c7:fb:15:61:2c:bd:ca:c3:c3:20:12:
                    55:d2:fb:4b:56:00:e1:02:86:1a:63:21:c7:63:84:
                    19:d8:42:c5:05:21:55:fe:10:e5:fa:6a:d2:fd:82:
                    6f:7b:0b:7e:45:cb:05:dd:1d:ff:b7:6f:98:d4:bb:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EE:54:AC:17:B3:07:C4:1E:20:C4:6E:34:75:AE:F3:80:58:57:73
            X509v3 Authority Key Identifier:
                keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:17:19:db:a3:db:60:ed:71:00:d9:26:46:37:39:74:4e:
         7d:8f:71:36:e1:15:cf:e5:76:51:83:ea:73:11:6a:b3:d4:22:
         e5:fd:83:97:93:cf:32:34:ad:a8:2d:9f:97:68:26:52:2a:e8:
         15:2a:b7:6a:0a:23:8e:37:f2:5d:55:5b:74:0c:65:75:bb:bc:
         f9:b1:95:fd:fc:28:e1:7d:30:75:0c:c7:2d:ed:de:55:5b:23:
         68:c8:d9:25:e1:f4:da:3c:7d:a4:31:50:42:c3:4c:20:9c:8b:
         34:69:23:7f:dc:1f:d7:f7:7b:b2:83:5c:a7:d7:19:a8:c3:69:
         a6:a8:39:82:27:d9:5c:29:03:31:a1:e7:93:30:a7:94:c4:02:
         de:1a:74:87:d4:7a:e5:8e:58:c1:99:99:4b:49:88:3a:e8:40:
         33:c2:52:2b:85:b6:08:2c:c5:c8:d7:8d:b3:e2:38:57:6f:ff:
         b1:ed:6f:f2:f3:cf:60:18:45:ae:87:b3:58:43:08:c6:46:6b:
         e3:aa:63:91:22:5f:bf:9f:80:74:de:e8:de:be:f2:77:7e:1d:
         19:38:4a:63:36:48:0e:90:6d:b2:28:6e:39:d8:5d:6f:9c:c1:
         b0:b3:01:f5:c9:f4:11:ec:4d:b3:13:52:c0:94:c2:2a:c3:42:
         ef:18:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:27 2026 by rpki-client