Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File:                     0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier:          39q6gk7ev5ZR5a0h7nHD1ExZdh2ypnPWlHrnGpGly0c=
Subject key identifier:   1E:CD:5E:7A:92:AD:B4:51:51:16:D5:70:25:F0:61:CB:E1:D0:E9:79
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer:       /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial:       019F9FCCC47CA7124B4E0EED5B5706BBC9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number:          195F
Signing time:             Sun 26 Jul 2026 19:00:24 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:24 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:24 +0000
Files and hashes:         1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: NpDfTjc8bYZ2gYa6zJL3zDSms9SNE1w9TCIg1IbEWg4=)
                          2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:c4:7c:a7:12:4b:4e:0e:ed:5b:57:06:bb:c9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
        Validity
            Not Before: Jul 26 19:00:24 2026 GMT
            Not After : Jul 27 19:00:24 2026 GMT
        Subject: CN=1ecd5e7a92adb4515116d57025f061cbe1d0e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:02:3b:e4:0b:8a:fb:83:f2:dd:3e:83:dd:
                    a5:18:5b:8d:8c:84:38:3d:82:0f:02:69:28:18:36:
                    d8:21:21:3d:89:a4:ed:fc:cd:c1:64:8a:14:de:1d:
                    a1:a4:43:62:b7:25:5e:7b:bf:af:1c:6c:56:8c:d9:
                    5f:7d:67:ee:92:15:44:9a:8a:aa:58:fd:95:6e:0b:
                    d2:f5:b1:eb:6b:ea:6a:0c:85:a0:2c:68:bd:8b:57:
                    c2:a2:9c:bc:c1:a0:cf:2f:b5:89:9a:23:0d:48:13:
                    31:38:fc:24:5d:ef:62:cb:7e:9b:49:a2:61:0b:bc:
                    27:cb:1f:6e:b0:04:54:2d:d1:93:87:60:ee:e1:42:
                    c8:1f:d9:f2:da:3f:3e:b5:f8:c2:14:41:91:d8:1a:
                    a3:41:79:a8:99:9f:d1:04:53:6d:a7:dd:31:49:bb:
                    59:08:0f:87:d0:a2:4e:35:df:0b:47:24:f2:2b:cf:
                    90:da:46:c5:0e:ff:2c:98:f6:da:88:41:6c:b8:b1:
                    a3:8b:c4:93:31:24:c3:61:4b:73:41:7c:aa:b1:8f:
                    fd:24:23:78:5c:49:1e:1f:4f:3d:e0:d6:6e:51:10:
                    dd:d8:b8:22:4e:34:69:6b:df:18:35:9a:bd:51:b5:
                    2e:91:92:fe:60:cb:bd:91:7c:20:02:0f:76:4e:46:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CD:5E:7A:92:AD:B4:51:51:16:D5:70:25:F0:61:CB:E1:D0:E9:79
            X509v3 Authority Key Identifier:
                keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:ab:ea:62:18:2e:f6:48:4c:1c:d8:ff:05:4f:99:f6:17:
         21:10:60:a0:09:b5:07:b9:9a:ee:8a:0d:24:30:f8:46:ad:ff:
         5c:2d:30:1f:42:51:01:8a:d6:58:6a:e8:e3:0f:c1:f4:f8:8d:
         89:b6:67:78:db:e1:63:36:08:f0:8f:ce:74:4f:aa:8f:91:22:
         22:b0:06:b0:d0:01:dc:8c:cd:c4:b8:7b:fb:a8:42:2c:c3:e5:
         28:41:35:58:9b:cd:b4:55:40:04:12:0f:90:62:2d:00:0e:fa:
         70:63:a8:69:79:a7:64:5b:8c:cc:3d:c6:06:1e:7e:c4:d6:27:
         e3:aa:4c:cd:ef:05:c0:1f:27:be:63:ec:a4:21:99:b9:cb:95:
         2e:a0:a4:51:1f:12:cb:dc:83:8d:0b:50:09:5d:a0:05:45:55:
         7c:94:e2:c0:0a:fd:f6:be:ab:4f:d9:41:97:9c:9d:00:f8:12:
         8d:b4:12:5e:2a:5c:c7:20:98:f2:e8:ff:d3:f4:f5:34:c9:5b:
         49:03:55:96:cd:9b:83:29:f1:7d:65:9e:6d:c8:fa:f0:b8:9b:
         7d:02:66:39:38:c7:5c:f2:c5:8f:aa:df:f8:fb:34:b2:a4:df:
         eb:63:59:ff:2f:57:96:11:a9:84:8d:fc:d6:bd:de:4d:50:b2:
         01:91:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:20:01 2026 by rpki-client