Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File:                     o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier:          IBxuPiyVHtS4n70q2ViYzS9i+24yzIOuMbGZ7jjwHmQ=
Subject key identifier:   79:38:22:86:3F:15:F8:5B:11:99:D3:D8:3E:CC:84:C6:BD:5E:B9:3B
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer:       /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial:       019FA2CE6813D0DBF07E23D008492B0D6E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number:          134E
Signing time:             Mon 27 Jul 2026 09:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:03 +0000
Files and hashes:         1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: tkE44dxsDgx8L0ZLIL27jHOoQ+nNgxDVtVViRkxtgzM=)
                          2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:68:13:d0:db:f0:7e:23:d0:08:49:2b:0d:6e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
        Validity
            Not Before: Jul 27 09:01:03 2026 GMT
            Not After : Jul 28 09:01:03 2026 GMT
        Subject: CN=793822863f15f85b1199d3d83ecc84c6bd5eb93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:6c:0e:44:27:06:46:52:39:59:22:e4:de:
                    eb:f4:b7:64:28:d3:20:eb:94:0b:0c:3b:cb:cd:34:
                    86:4c:66:3c:9b:53:3e:8d:29:a4:16:a7:be:c3:11:
                    9f:57:37:a5:0a:b4:d6:fe:31:fe:36:86:5e:e8:f7:
                    b9:6a:f2:d0:ad:29:ed:34:a1:db:b0:fb:a5:57:62:
                    58:3b:de:94:7a:8e:3e:7e:94:73:cb:ba:4f:ec:a5:
                    ec:8e:d8:61:65:7b:95:67:94:8d:c2:66:87:62:a1:
                    b8:a8:2c:be:8d:1a:c7:ff:b5:46:c6:38:9d:81:c1:
                    3e:c6:92:e3:88:6d:f8:94:f0:4b:af:ac:a6:f8:b0:
                    4c:07:1d:f7:73:72:ad:78:55:97:05:03:1d:0e:1c:
                    a0:63:7b:c3:93:7e:a8:9e:28:6d:02:b3:01:bb:74:
                    93:59:6c:01:2b:3e:bc:bb:e9:d6:cf:de:4f:35:c9:
                    64:d1:b9:4a:bf:37:b6:11:46:cf:2d:1d:37:9b:8f:
                    ec:e8:64:4f:b7:8a:de:39:93:e1:ad:61:6b:eb:91:
                    49:83:13:21:ca:16:2d:91:71:2d:d9:43:5c:6a:2d:
                    a0:de:80:60:b8:4b:cd:4d:d2:a7:4f:a3:6c:cf:1c:
                    1a:af:b0:68:2c:52:46:2f:89:ab:f9:26:0d:bf:63:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:22:86:3F:15:F8:5B:11:99:D3:D8:3E:CC:84:C6:BD:5E:B9:3B
            X509v3 Authority Key Identifier:
                keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:08:21:fd:a9:5a:54:f7:1e:ac:1e:24:37:03:e1:5a:0d:
         8f:6d:e7:45:92:00:61:82:03:a0:af:4f:8a:e9:04:66:33:37:
         81:04:9b:ed:6b:44:64:84:1a:55:bb:ff:46:73:0e:97:a4:95:
         37:8e:91:95:04:ba:65:6d:ea:65:a0:61:92:d1:55:5f:c0:f3:
         8f:54:df:58:a2:c5:dc:16:21:b3:95:17:d1:df:3c:28:93:65:
         0d:26:0e:a4:54:49:cb:70:ce:79:8f:95:ea:f4:3d:b7:98:a8:
         95:65:7e:0f:34:aa:43:0d:95:f4:d5:ce:84:c1:97:6c:ae:a2:
         62:13:2d:0d:a9:a5:e4:a7:76:f1:7a:85:bf:25:bf:f0:c7:11:
         ff:6f:18:e0:65:57:8a:40:3b:b0:34:47:b9:7b:3d:e4:9a:94:
         d4:c2:78:ec:89:13:ea:76:66:33:46:c8:40:74:3b:8d:ad:6f:
         3e:a6:2c:a4:df:a7:80:26:44:a4:c1:9a:7f:fa:49:2e:ff:87:
         23:89:dc:c0:03:45:8d:fd:87:37:ae:f7:6f:8e:94:35:3a:54:
         67:bc:5a:f4:5b:65:d6:39:1b:10:ef:57:0a:62:07:aa:ff:0f:
         6b:3f:98:d7:2b:a7:7e:29:57:f1:f4:08:06:5e:31:0f:59:b4:
         f3:4f:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:53 2026 by rpki-client