Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          XlYYOq6LU7PvoDIQkDxI6ij0tiwlIAgRx3KKdNJAxFM=
Subject key identifier:   05:01:C3:7D:94:B9:43:CA:0B:C5:45:BD:3D:09:91:D7:6E:F1:AE:EC
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       019F92ECF60AC4EBFC9746EB98B5FE5B49EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0DFF
Signing time:             Fri 24 Jul 2026 07:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:30 +0000
Files and hashes:         1: OY-F0hhlIFsLBb-jhlJlozNHKDw.roa (hash: JseVfilW9clKoxV/EybNUEX+K2HrPNZ0B5i1na1LMg8=)
                          2: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: ppMWktfCc6LWqiUFIHFUOxwwdi6lik9BSIjcFhJ8XXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:f6:0a:c4:eb:fc:97:46:eb:98:b5:fe:5b:49:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Jul 24 07:00:30 2026 GMT
            Not After : Jul 25 07:00:30 2026 GMT
        Subject: CN=0501c37d94b943ca0bc545bd3d0991d76ef1aeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:11:fd:2a:dc:a9:bd:fe:f3:0a:50:27:86:
                    ae:6e:52:ad:80:88:e3:2e:23:d4:bb:cd:08:40:22:
                    62:00:33:96:a9:e1:cf:03:ea:e6:6e:02:9a:07:f9:
                    68:a5:0c:93:49:cd:9f:d7:3a:7a:7c:bb:72:34:1e:
                    86:55:52:f3:3e:32:2f:5f:cb:f4:06:68:92:a4:8f:
                    2e:f6:d4:6e:d9:ca:f9:4d:ea:c2:1b:32:2b:a3:49:
                    96:8f:53:de:e9:7c:87:9a:d8:07:bf:f9:a3:54:a2:
                    35:88:15:32:ee:cb:d5:10:80:ce:c3:ac:2a:70:02:
                    dc:d0:56:9d:ac:8f:f5:0c:e8:e9:94:c5:97:39:b6:
                    34:22:2f:7a:cc:83:6f:2c:70:bc:97:91:5d:5b:38:
                    c6:9d:c1:e9:7a:36:85:ba:e7:ed:4f:7b:95:b6:93:
                    a6:3d:cb:63:bf:7a:a1:7f:50:21:dd:43:b0:db:77:
                    b8:2c:12:b4:fb:37:23:fd:8b:9a:4b:47:2c:80:c8:
                    58:bf:25:57:04:7b:0c:c6:b7:c7:26:2e:be:4a:da:
                    84:2d:50:66:dc:54:c5:3e:64:f5:97:23:82:a1:3b:
                    f1:ab:09:56:5f:25:97:4b:99:ce:f2:1f:1c:81:0a:
                    11:ee:54:7f:71:49:87:57:9d:0a:0e:82:ab:7e:03:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:C3:7D:94:B9:43:CA:0B:C5:45:BD:3D:09:91:D7:6E:F1:AE:EC
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:6c:cb:2c:fe:fc:cc:9f:f1:95:42:d7:4c:11:99:18:c3:
         e9:04:12:e5:fd:0b:dd:4e:c0:c1:d4:0c:29:72:5b:4b:60:b2:
         ec:b8:9a:b8:f4:dd:78:33:b9:56:e2:bc:ba:aa:af:bb:79:07:
         86:f8:48:d5:fb:45:1b:1a:06:fe:f9:13:5b:fe:3a:34:03:0c:
         27:4b:ca:2e:1d:27:80:b7:fe:cc:af:54:42:65:09:ec:4c:ed:
         7a:d2:2b:cc:b4:bc:3f:39:7f:b8:fa:20:bd:d4:c5:ed:b4:cf:
         a6:36:c4:2e:40:2d:f2:44:0c:b1:16:6a:ea:67:2b:18:b2:51:
         7e:65:a7:37:90:48:85:0a:fa:2c:04:49:cf:cc:81:f9:74:9d:
         38:e9:b6:ec:cf:40:59:ab:60:e6:e1:b8:a9:c7:22:82:2f:18:
         c8:6f:73:c2:08:27:3e:e0:c8:1d:d2:8a:22:70:14:d2:d5:3b:
         fa:8e:a0:a1:3d:c4:3c:a3:07:85:4e:06:10:27:8d:a1:20:6a:
         eb:02:16:b6:b1:68:ee:f7:03:d3:d4:28:1e:bf:48:6e:7f:69:
         3f:45:15:c8:12:b7:15:e7:df:29:96:e0:e8:90:8d:13:f2:c0:
         4c:9c:25:be:08:b7:84:89:9d:b5:57:d7:a1:88:3c:6e:fc:85:
         00:81:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:50 2026 by rpki-client