Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File:                     RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier:          JB26hpK6RSa3W1YKvfihCwE8RNboS7yvx0ikvgNI8+c=
Subject key identifier:   4E:EC:EB:CD:C7:79:9E:89:5C:03:5D:A4:72:4F:8D:0A:03:9B:C4:AD
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer:       /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial:       019FA4F3C036A7B49BC49E22409BEE867AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number:          09D8
Signing time:             Mon 27 Jul 2026 19:01:05 +0000
Manifest this update:     Mon 27 Jul 2026 19:01:05 +0000
Manifest next update:     Tue 28 Jul 2026 19:01:05 +0000
Files and hashes:         1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
                          2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: 1eyIJhOTXyy8A1/JVzPrlNhR7x75cNnWVxWiMKVW5OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:f3:c0:36:a7:b4:9b:c4:9e:22:40:9b:ee:86:7a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
        Validity
            Not Before: Jul 27 19:01:05 2026 GMT
            Not After : Jul 28 19:01:05 2026 GMT
        Subject: CN=4eecebcdc7799e895c035da4724f8d0a039bc4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:8c:4d:26:dc:e1:af:f5:0f:67:1d:cd:be:
                    f8:78:86:c2:00:76:ce:a8:7d:dc:7c:a8:c7:ea:dc:
                    6c:49:e2:d0:5c:44:5c:77:39:9c:10:8d:a4:c3:73:
                    f7:83:dd:9b:49:23:c1:5c:74:43:df:0f:4d:52:29:
                    cd:1a:e1:ae:88:2a:c9:69:7f:17:6d:c9:9d:b0:c1:
                    94:70:d9:0b:01:c0:65:2f:9a:a9:c5:ab:3d:d9:a2:
                    90:d1:1e:1b:7e:7b:d2:8d:00:c4:0f:0e:4c:1c:03:
                    79:b8:5e:09:5a:fb:ed:61:f8:ef:4c:1f:8f:d7:9c:
                    9a:49:5d:be:59:dc:79:f0:4e:db:5c:93:7b:0b:c9:
                    69:88:3c:c4:bf:89:02:58:16:06:47:89:18:37:c3:
                    a5:59:2e:ea:32:f9:c7:0b:c1:ed:79:bb:37:1c:43:
                    90:6b:43:c2:d5:84:4f:41:90:34:78:27:71:ba:8e:
                    90:43:df:bd:9e:1f:ed:ff:21:e9:68:ab:3e:49:c4:
                    5d:d9:64:91:ef:78:c3:4e:47:3c:99:2c:a6:19:a2:
                    25:a0:c4:5e:00:ac:71:14:bc:e3:da:e2:93:59:d5:
                    94:12:02:1a:b4:14:92:e7:82:5f:16:89:11:50:29:
                    89:1a:89:4e:d6:63:17:56:af:04:30:13:b9:d8:c3:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:EB:CD:C7:79:9E:89:5C:03:5D:A4:72:4F:8D:0A:03:9B:C4:AD
            X509v3 Authority Key Identifier:
                keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:30:53:08:54:60:2f:04:2c:bb:33:24:b8:a6:63:13:ed:
         3f:56:45:c6:39:c8:f5:ca:53:3e:d0:4f:33:68:0f:e0:a2:e9:
         c4:90:e1:fa:6f:42:77:80:48:dc:07:ec:2c:c7:10:bc:40:96:
         0c:47:26:20:f8:2a:c1:a5:ef:dc:a7:dc:8e:42:a8:61:41:f1:
         d2:ea:f4:ef:09:92:09:06:05:fd:39:bc:3d:5c:a6:e0:9c:aa:
         e0:48:d1:55:b9:9a:ed:2d:cf:ba:8a:31:f0:e4:85:29:14:9e:
         7f:3f:81:43:7a:a1:83:93:57:8f:3e:4b:bf:e8:40:16:1d:3a:
         54:e8:82:6f:78:b4:fa:34:ed:60:8f:8c:8e:6a:5d:d8:84:06:
         27:a8:74:c6:87:0f:ec:c0:f0:0f:2a:7b:f2:2d:03:37:66:f5:
         00:a2:52:48:80:2e:4a:de:e8:de:1c:ff:ce:af:d5:4a:0b:e3:
         42:f1:47:e0:8e:e5:84:b9:d5:b3:8c:f8:0a:0d:16:12:47:d2:
         cd:51:55:51:67:05:b8:eb:90:12:18:4b:01:84:af:28:92:48:
         9e:bf:88:c8:0c:f4:99:56:f0:f9:19:79:a4:df:bd:59:df:2a:
         f8:57:28:d7:01:cc:76:a5:06:99:7b:8e:86:6f:55:be:36:84:
         29:c9:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:24:26 2026 by rpki-client