Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File:                     96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier:          oF3hETb54ZHWkv2uZIjjN27Yfh9oHAY9BjBvpXfwvp4=
Subject key identifier:   D4:F4:75:91:FF:42:C6:EB:F9:D0:BD:E6:99:A1:67:9E:9C:E4:96:75
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       019FD685F9D91DC4FB1420430D8C438AC06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number:          0468
Signing time:             Thu 06 Aug 2026 10:02:12 +0000
Manifest this update:     Thu 06 Aug 2026 10:02:12 +0000
Manifest next update:     Fri 07 Aug 2026 10:02:12 +0000
Files and hashes:         1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: pINE9qzhUwcmLT3u54E1BAGR8FRvLkELC8J0nAtopSU=)
                          2: ej84eEjBZh5_TuoVktQ40a1gkgU.asa (hash: MHSI1jdl5w4t+h/f8ee1s5/oMRUiSdGHj/rdZ+jynew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:85:f9:d9:1d:c4:fb:14:20:43:0d:8c:43:8a:c0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Aug  6 10:02:12 2026 GMT
            Not After : Aug  7 10:02:12 2026 GMT
        Subject: CN=d4f47591ff42c6ebf9d0bde699a1679e9ce49675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:01:28:a1:f3:03:1f:aa:60:a5:e1:1c:b7:
                    2f:2d:a1:95:ef:53:23:c2:43:01:4f:d7:db:f8:d0:
                    15:0c:91:df:b3:a9:31:fb:95:d7:6f:df:af:57:53:
                    dc:2a:8a:2b:1b:18:66:ec:c7:46:63:31:36:f1:04:
                    ac:7a:9b:36:5a:58:8a:77:db:89:02:d3:bb:6c:25:
                    68:e1:9a:f6:36:61:99:3c:5d:22:f1:45:15:8c:ee:
                    6b:98:14:86:0c:ea:1c:3d:cd:7d:81:6c:ec:ab:bf:
                    79:ab:8e:01:de:dc:88:23:ac:3c:54:38:63:fe:1d:
                    82:33:f2:5a:70:08:ef:8d:83:e2:46:e5:da:86:8f:
                    85:6f:97:87:32:b4:54:16:63:dc:1b:f7:77:41:4d:
                    fc:2a:e8:dd:fb:b0:8a:4a:eb:3d:2d:83:38:4e:96:
                    d7:13:27:86:af:0a:0c:e3:e5:8d:08:cc:e4:7a:db:
                    5c:5c:1e:ea:2a:60:4c:30:9a:82:72:19:5f:ac:10:
                    d3:4b:d7:08:01:9d:7a:29:df:a0:18:93:0a:2c:34:
                    0d:f6:da:69:53:59:ed:55:e5:c0:08:9c:d5:2e:9c:
                    2c:87:3f:9b:4b:83:5e:4d:f3:1c:ac:49:f1:db:a0:
                    c1:c4:81:92:84:31:57:96:05:63:9a:9d:ba:1a:17:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F4:75:91:FF:42:C6:EB:F9:D0:BD:E6:99:A1:67:9E:9C:E4:96:75
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:71:19:af:40:ee:dd:9d:0c:9e:3c:83:01:1d:8c:fc:15:9c:
         3c:d5:3e:9c:b4:dc:84:5a:b1:12:fc:a9:c7:f2:c7:f1:95:bb:
         b8:ea:30:9c:26:aa:db:75:df:fe:e0:2b:54:2c:83:49:42:c2:
         5f:16:08:23:15:c8:e5:56:ce:c5:40:f7:7a:33:f6:ee:57:27:
         47:9a:cb:65:f1:d0:7a:f5:aa:15:2c:25:c0:b3:f6:0a:b0:46:
         c0:f2:25:0c:61:63:0a:2d:f9:7f:07:ed:f6:a1:92:e9:9a:e9:
         f7:56:f2:cf:aa:8c:6d:e0:6e:71:05:6d:7e:05:93:fa:02:6c:
         ef:12:01:0b:8e:a4:5d:66:af:5b:6b:87:b1:9c:d7:df:dc:3b:
         cd:6b:8c:fb:7f:50:de:54:a9:2f:2f:fd:99:4d:4c:e8:ee:6c:
         38:10:1f:bd:99:66:d7:74:53:90:b2:d8:3f:c9:ae:35:31:d5:
         0d:cd:17:52:7e:99:0b:ac:43:30:24:4c:de:58:e7:e6:6c:6a:
         e4:7b:ee:a2:6a:af:87:f7:12:39:62:e0:12:08:e9:d5:28:f2:
         9d:6f:83:41:53:b8:59:f4:c5:a2:3c:53:1e:c9:0b:58:d4:6a:
         0c:38:1c:70:24:8b:17:f8:c7:76:40:22:0c:e0:67:9b:c9:64:
         f7:05:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:51:37 2026 by rpki-client