Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File:                     dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier:          ZRALGJ1Wy/lrYRezzokRJd+CaPYw/0iUn3eNtoxVv/s=
Subject key identifier:   96:CF:36:CE:E4:24:07:6B:1C:FE:B7:FD:C2:1C:7E:28:F1:BB:6A:AA
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer:       /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial:       019F5EC9ECAD9716F4148EF4E1A07E5636BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number:          0BD6
Signing time:             Tue 14 Jul 2026 04:01:59 +0000
Manifest this update:     Tue 14 Jul 2026 04:01:59 +0000
Manifest next update:     Wed 15 Jul 2026 04:01:59 +0000
Files and hashes:         1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
                          2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: h3jwsJwB16yHamkCABPEgCdWvtIr5A4ivhdrhWbMxSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5e:c9:ec:ad:97:16:f4:14:8e:f4:e1:a0:7e:56:36:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
        Validity
            Not Before: Jul 14 04:01:59 2026 GMT
            Not After : Jul 15 04:01:59 2026 GMT
        Subject: CN=96cf36cee424076b1cfeb7fdc21c7e28f1bb6aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:93:8d:63:25:79:c7:72:36:4c:a8:93:68:
                    21:32:9c:7e:27:6f:e2:57:03:4d:63:12:88:80:03:
                    9e:15:06:9b:4f:88:38:4f:bc:cc:21:f6:12:9a:c1:
                    5a:f4:24:0b:e5:88:ae:38:dc:0a:0d:d8:f0:9a:64:
                    ea:fd:32:7a:88:10:97:75:d5:5a:28:00:11:32:46:
                    53:f4:f9:70:71:3e:fd:48:80:c4:32:00:37:10:38:
                    f1:8b:32:7d:fd:49:92:f7:90:f4:2e:80:57:dd:9d:
                    b3:13:d2:7e:24:ea:12:11:9c:0c:d4:88:56:4b:66:
                    b4:92:87:cc:d1:ae:35:55:50:39:df:2e:83:48:f5:
                    55:cb:a7:2c:80:a4:b9:c2:07:af:3e:f0:0e:43:72:
                    c1:47:c0:02:81:42:31:34:ff:ff:fa:7e:6c:95:b8:
                    a8:ee:c4:ad:24:84:4d:7b:96:e2:6b:fa:bb:23:c8:
                    e6:41:90:93:6a:34:69:9f:79:f7:5d:87:c2:76:0e:
                    33:b0:ec:96:ef:a2:fb:44:34:95:97:b8:98:95:ab:
                    07:a6:f9:56:84:40:2b:d5:0d:28:5a:a5:b9:68:49:
                    53:37:92:1a:09:07:6f:78:4c:8d:cb:8c:04:43:07:
                    29:0d:20:47:b0:48:f3:8a:a2:bd:31:63:80:69:e2:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CF:36:CE:E4:24:07:6B:1C:FE:B7:FD:C2:1C:7E:28:F1:BB:6A:AA
            X509v3 Authority Key Identifier:
                keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:65:12:cd:37:a6:a0:6d:ac:8b:be:0d:97:8b:b7:33:03:67:
         94:ac:01:1c:06:11:61:f2:e9:42:45:c1:cc:c3:53:68:9e:61:
         13:d4:9e:58:72:f1:8a:cd:c7:ca:5e:4b:b0:5d:63:3f:df:46:
         3d:bf:48:8f:11:68:65:d0:f7:05:1c:22:5c:e9:68:ab:f7:32:
         c9:56:a1:f8:e1:86:40:76:be:52:74:2b:be:b2:9b:3a:4e:f5:
         d2:77:a2:68:8f:d4:36:b7:97:dd:ba:07:98:1c:37:5d:0c:18:
         15:f6:44:36:1b:1b:40:6e:c4:f9:8c:4d:87:aa:18:6e:4e:54:
         2b:9c:bc:63:bc:dd:c2:7f:af:46:20:be:b0:94:a8:3c:77:b2:
         ab:37:03:4d:1c:d8:9f:10:e6:09:54:33:fb:05:32:ee:58:7a:
         cf:1d:b7:f4:aa:4c:2b:c8:4c:a7:7b:2d:fb:2b:c7:37:e5:55:
         42:a6:50:39:63:08:ee:48:5f:d8:18:ca:88:1e:82:8d:ef:77:
         82:48:5e:a7:60:ef:c7:a1:7d:b7:7d:5f:89:f7:46:9e:f5:66:
         b7:ab:6c:58:53:45:8f:ae:94:b0:cc:2b:2f:eb:e0:3f:3d:39:
         2d:1d:b9:7a:62:be:4f:67:6c:b0:30:53:45:af:09:b1:12:79:
         b9:a1:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 12:54:50 2026 by rpki-client