Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File:                     o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier:          zHoMf9WY8wBpu35xkQGTGLDKdts6ieDdW9soT3ZjYLk=
Subject key identifier:   07:07:E8:8E:0B:7D:D0:37:24:7E:26:D3:B0:DD:F0:DF:8F:88:83:78
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer:       /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial:       019FA2974C8BBA77D01B72FD92ACA07612AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number:          19D4
Signing time:             Mon 27 Jul 2026 08:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:52 +0000
Files and hashes:         1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: VlXOdOxM+fNrqt3heKpEc/ek9gjaDLdosdI/wBvMpTU=)
                          2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:4c:8b:ba:77:d0:1b:72:fd:92:ac:a0:76:12:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
        Validity
            Not Before: Jul 27 08:00:52 2026 GMT
            Not After : Jul 28 08:00:52 2026 GMT
        Subject: CN=0707e88e0b7dd037247e26d3b0ddf0df8f888378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:41:6a:69:c5:c8:d7:86:c4:00:ba:0d:1a:
                    76:42:10:29:dc:2f:a0:a7:8d:5f:aa:3e:a9:ce:05:
                    a9:24:5c:f8:af:91:ca:03:85:1a:ff:0a:0f:b6:8f:
                    ed:5a:1b:09:33:17:35:03:91:0a:8e:1b:a5:4e:4e:
                    d8:7f:99:ed:c1:eb:c5:90:7f:2b:d5:cc:eb:87:00:
                    89:47:49:87:57:1e:70:c9:67:88:47:64:c7:0d:ab:
                    ad:42:c1:0b:a8:37:89:21:22:9d:42:3d:9a:e5:98:
                    c3:de:4d:62:c0:e3:57:e3:18:74:92:77:e5:ee:cc:
                    b3:24:ae:a3:00:b9:dd:b6:41:ee:a8:c7:04:fa:74:
                    a1:67:6b:7b:7f:6f:60:0a:29:2b:b3:ed:ed:46:a2:
                    77:e4:63:f1:ea:b7:9c:50:80:9b:63:dd:6d:a0:79:
                    be:46:9c:c2:58:8e:5a:53:d1:1e:e6:36:ad:07:17:
                    bf:b4:17:bf:18:99:9e:26:23:b5:f5:28:68:8f:dc:
                    1a:40:e3:a0:5c:b0:92:25:38:6f:99:97:2d:ad:25:
                    a3:e8:f8:67:5a:1e:f5:56:8c:a3:d2:76:19:09:1d:
                    0f:0f:f6:4d:ca:92:a3:cf:e4:07:2a:f1:36:9e:7c:
                    d0:de:1c:dc:97:bf:00:f2:92:8b:f2:9f:33:c5:7d:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:E8:8E:0B:7D:D0:37:24:7E:26:D3:B0:DD:F0:DF:8F:88:83:78
            X509v3 Authority Key Identifier:
                keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:4f:c7:29:82:44:dc:48:d1:49:ef:68:a0:1d:1c:da:97:
         c1:8c:9e:5f:35:4d:0a:bf:47:90:50:5c:27:e1:77:e3:4d:54:
         be:e7:6a:8f:f3:11:fd:a1:c0:9f:d3:cb:76:9d:51:ce:6d:59:
         c4:28:fe:8f:72:ee:ea:09:35:1a:29:1a:b1:8f:58:35:1e:b0:
         92:16:7c:40:15:43:9d:6b:fa:2a:a1:21:f0:0c:e8:c4:39:b0:
         b4:29:19:00:ee:b5:37:1f:96:1d:f7:bc:d3:0f:4e:ee:9b:43:
         62:76:52:85:b6:15:a7:6f:71:ad:cb:f0:18:1a:e6:40:be:a6:
         35:f9:54:be:0b:6f:e8:84:f4:3d:d2:05:02:13:d9:a7:cd:0c:
         58:15:dd:5b:97:30:6d:52:fc:40:3b:a4:26:9a:5a:c3:a5:16:
         92:91:43:04:9b:6e:c7:28:49:0e:85:78:07:4b:6a:8d:b3:e5:
         f3:db:0c:f2:63:35:da:db:a9:c9:ea:b9:68:f1:32:e1:f6:7a:
         8d:3b:ec:2b:ae:60:e6:4c:f1:23:28:61:85:7a:d5:0d:3e:4a:
         a7:3d:29:c4:80:4b:81:db:d5:b4:16:14:c4:e4:d8:69:6e:7f:
         c6:89:3d:37:b2:ca:6d:b0:ff:12:f1:d7:ec:7f:d6:f1:79:1e:
         1a:44:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:19:27 2026 by rpki-client