Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          VIJNXskx6j7Uj45qYcGwo6CJngILRwb0YKBDLRwLOpA=
Subject key identifier:   B3:BD:4D:5E:5B:EC:DD:87:0F:73:DC:4F:16:80:84:39:A4:C7:C3:AF
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       019F178BBCCC8FC49FDF93454404DA686094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 08:01:01 +0000
Manifest this update:     Tue 30 Jun 2026 08:01:01 +0000
Manifest next update:     Wed 01 Jul 2026 08:01:01 +0000
Files and hashes:         1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
                          2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: De354xNP0kzs2eDt/lxDXm+2e5vosD/rBVKu2GnVpos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8b:bc:cc:8f:c4:9f:df:93:45:44:04:da:68:60:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Jun 30 08:01:01 2026 GMT
            Not After : Jul  1 08:01:01 2026 GMT
        Subject: CN=b3bd4d5e5becdd870f73dc4f16808439a4c7c3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:ac:d3:e0:f8:f1:72:76:6c:a5:8a:23:90:
                    37:4b:20:d8:af:2f:01:c8:c5:7e:48:52:6a:7f:36:
                    5c:6b:91:15:3f:e9:ed:0b:99:3b:97:c1:70:cc:f2:
                    7f:b8:78:b4:4f:d9:2c:5e:f2:ca:e7:4c:48:e0:05:
                    67:8f:e5:25:4c:6a:75:66:cf:9c:61:f7:b8:a1:90:
                    a5:09:ac:9c:0a:17:c8:eb:20:44:35:30:86:1b:79:
                    50:4a:99:5b:0a:73:ce:15:21:09:ea:62:75:f0:8c:
                    e0:4c:36:4b:63:b3:a0:fd:10:b7:20:0c:56:d5:c3:
                    1b:1d:d8:3c:55:e4:a5:11:4c:25:81:f1:05:be:6e:
                    8f:e7:1a:f6:5b:e1:88:af:4b:40:a4:a2:67:f3:c6:
                    18:ca:5e:e0:75:34:0a:e4:1f:2e:99:7e:d1:3a:8d:
                    9d:0d:37:5a:ec:0e:5c:c6:cc:2d:9f:c2:20:c1:df:
                    a7:f7:e1:a7:2c:e1:05:81:a3:31:22:de:87:09:86:
                    8e:86:ce:69:25:d9:54:65:be:c3:9c:eb:d0:6a:8c:
                    f1:d6:97:a5:05:21:70:f1:21:a5:bd:4a:cd:65:23:
                    73:01:fe:b7:40:10:2a:c6:71:85:41:1a:fa:db:97:
                    88:ac:fa:54:ce:3d:b5:6b:95:f8:d8:be:cf:07:61:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BD:4D:5E:5B:EC:DD:87:0F:73:DC:4F:16:80:84:39:A4:C7:C3:AF
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:5a:2d:07:98:7d:67:d3:ef:fe:17:15:39:61:d0:60:1d:
         62:11:64:90:fd:fd:dd:b5:01:f7:15:79:75:74:92:3c:3f:28:
         81:35:08:a4:ad:2b:85:22:82:da:66:af:9c:dc:ba:70:24:2f:
         3d:cf:17:1a:b2:7d:ec:9a:91:6d:e8:fa:19:d4:3b:db:eb:7d:
         44:6b:70:25:dc:76:c4:81:09:5c:4d:ef:b9:a4:73:2b:35:3f:
         dc:12:b9:4e:23:5a:dd:d2:0a:58:0b:c1:d7:6c:6e:38:f5:88:
         23:30:66:f2:32:c7:27:71:26:42:1e:93:aa:7c:f5:b3:51:40:
         22:b6:51:92:e9:63:6c:c8:ed:e0:37:3e:0d:db:21:56:9e:91:
         15:42:9d:47:ac:10:34:19:e8:99:4c:bc:71:12:e6:21:84:30:
         b9:bd:72:e1:fc:f3:46:db:ad:3f:7d:48:30:93:47:79:34:26:
         13:bd:d0:b6:13:8b:5d:90:47:c5:52:77:97:8f:2f:d5:a0:86:
         82:ca:e4:6f:f5:9f:0f:48:f8:92:53:1f:1a:2f:cf:77:fd:a4:
         c7:1b:4e:a5:cc:eb:e9:69:da:ad:94:c3:25:91:5f:5d:bf:2d:
         c2:16:70:f2:c9:af:13:46:85:48:17:40:a9:99:c8:d9:9a:56:
         d6:f2:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:14 2026 by rpki-client