Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File:                     0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier:          j72KGo2GqpZyPbmLyHUzEV/Pj5Ts6al4ZllKRUJJGDA=
Subject key identifier:   F3:AC:9F:1A:8D:22:7F:B0:1D:99:CF:18:83:8A:2A:DE:CD:85:BE:99
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer:       /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial:       019FA2CEDE75DDE0FF84F89DFE4028382CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number:          0BB9
Signing time:             Mon 27 Jul 2026 09:01:34 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:34 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:34 +0000
Files and hashes:         1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: pnU04gpQnfkwY0s0pnMJs8Aq20by6hpn0e7Gc8CFS98=)
                          2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:de:75:dd:e0:ff:84:f8:9d:fe:40:28:38:2c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
        Validity
            Not Before: Jul 27 09:01:34 2026 GMT
            Not After : Jul 28 09:01:34 2026 GMT
        Subject: CN=f3ac9f1a8d227fb01d99cf18838a2adecd85be99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:34:a0:83:25:50:01:fe:a8:a6:5f:69:da:
                    ee:86:19:2e:05:28:55:7c:c8:10:57:97:9d:19:dc:
                    41:02:c1:68:0b:b0:51:46:a4:e8:a3:e0:0a:44:31:
                    c0:33:bd:de:05:17:b5:43:a4:7c:1a:36:25:e5:b2:
                    4b:b5:27:79:84:0b:6d:b6:5a:f8:64:39:15:6b:28:
                    07:6c:10:ef:59:45:b7:25:98:dc:1e:b3:b1:e3:13:
                    8e:a4:4a:0a:b2:e8:f1:4d:30:9c:04:83:e1:c4:49:
                    14:5d:e7:88:b6:61:2c:74:93:47:b3:e4:0b:d2:79:
                    34:17:fe:81:0d:db:02:a8:58:80:03:50:26:27:56:
                    10:87:73:97:b9:70:a0:52:5e:4f:08:bc:fb:8f:c6:
                    9d:f0:4a:97:3c:fa:c5:fd:2d:62:ad:6b:14:16:ee:
                    6f:09:5e:44:3c:68:b0:ed:4c:29:02:3e:14:74:26:
                    e7:1b:dc:58:8b:9d:34:ff:9b:dd:5e:5d:38:46:77:
                    2a:af:d4:79:13:a8:fa:8f:d0:67:92:0e:c4:2c:c9:
                    1d:bb:0e:ac:08:ec:8d:df:c9:07:0c:02:3c:ec:7e:
                    47:b5:a2:a1:79:b6:35:d3:a0:16:9f:a3:27:5c:d5:
                    e7:3d:64:24:dc:90:d9:70:4e:29:4b:cb:fc:73:1b:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AC:9F:1A:8D:22:7F:B0:1D:99:CF:18:83:8A:2A:DE:CD:85:BE:99
            X509v3 Authority Key Identifier:
                keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a4:83:44:2a:83:e4:cb:18:01:df:86:c2:79:f5:a4:54:84:
         37:6e:9e:3a:4a:a1:83:63:82:a0:f2:3c:7e:a3:57:6d:e6:a4:
         b4:a5:6c:a0:b7:6a:78:53:d4:d3:d6:ae:d1:27:32:4e:65:cd:
         9b:40:4c:0c:8c:43:c9:2f:d0:18:57:75:66:23:53:1a:4b:a1:
         f4:6f:25:11:66:3f:f3:f5:10:2a:23:18:0a:2e:b5:af:24:cd:
         f0:ca:cd:c9:79:c7:5c:14:3b:4e:98:39:bc:bd:a9:6f:b7:b3:
         1f:af:ea:e5:76:56:3d:b9:86:8a:57:f0:5e:9f:be:e1:62:30:
         83:2e:fb:4e:37:6d:f4:31:60:50:f6:b9:21:89:3c:c8:d7:88:
         dd:06:82:50:cc:a8:33:cf:d6:87:c5:3e:bf:9b:0d:bc:25:a0:
         b2:eb:09:73:92:3e:48:47:be:ae:ed:68:53:df:5a:7b:39:1e:
         a2:96:20:3b:2e:d1:08:c2:44:54:71:43:6e:f6:64:20:23:8e:
         7e:c9:b4:2d:43:2a:5d:ef:46:1d:14:06:31:0f:de:94:a7:a2:
         d8:07:5e:33:39:70:44:a0:f4:3f:9f:82:db:93:7d:8e:2c:91:
         34:17:20:d7:63:2b:d5:ef:b8:7e:be:8f:0f:48:41:b9:73:2f:
         d1:92:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:18 2026 by rpki-client