Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File:                     0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier:          hgD6MX6zZ65rWaojiXRoWiFulwVGbz6MzAwmKGg/2P4=
Subject key identifier:   94:80:68:31:27:92:F9:F8:2F:13:F6:4E:E5:B8:9A:6D:6E:C2:7E:D3
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer:       /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial:       019F8F7EB8C831127232440E47F5198152E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number:          18A0
Signing time:             Thu 23 Jul 2026 15:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:14 +0000
Files and hashes:         1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: vaHLJZY8zaf0SxUkjUat32oGmIN1JJx85c8SBv+t8nY=)
                          2: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (hash: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=)
                          3: I1JpGCaCnd74s6YyFhtsQo4ffys.asa (hash: 8s5VDkoq2eGGIU5mP2xC+brcRoLXH1bqb0SZr2FGNMI=)
                          4: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
                          5: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:b8:c8:31:12:72:32:44:0e:47:f5:19:81:52:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
        Validity
            Not Before: Jul 23 15:01:14 2026 GMT
            Not After : Jul 24 15:01:14 2026 GMT
        Subject: CN=948068312792f9f82f13f64ee5b89a6d6ec27ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b6:60:50:e5:fc:c5:dc:f0:cd:44:fe:7c:12:
                    11:cc:6b:c1:be:61:c4:82:28:f9:a7:e6:5d:cc:9e:
                    65:fb:80:b4:eb:cf:cf:83:a4:af:70:14:59:03:23:
                    d1:1b:75:91:69:d1:62:a0:13:14:a2:3b:74:b7:0b:
                    2f:cc:29:33:e9:e0:1b:46:58:36:e2:9f:78:6f:14:
                    7d:d2:47:d2:19:6a:a6:20:05:93:7f:67:84:c3:90:
                    21:14:96:18:3e:f1:34:b0:25:79:68:5b:48:10:b5:
                    0b:84:22:25:1f:98:40:3e:f8:35:4c:e5:aa:3a:1d:
                    bb:25:34:74:e8:b1:69:8a:56:14:19:ec:9b:6f:9e:
                    e3:96:7c:f4:9d:9c:14:aa:42:59:d8:a6:26:72:94:
                    92:43:21:cf:1d:56:8c:7c:72:e7:85:56:fb:f7:2a:
                    75:e6:83:b4:78:1d:66:52:ca:53:f0:f6:4b:13:70:
                    d7:bc:49:12:c6:90:a2:46:56:51:03:41:98:1f:a2:
                    22:22:94:1d:39:8d:28:5e:e3:1c:b1:da:61:42:3b:
                    e8:55:a9:b7:5a:9f:32:62:eb:ba:f6:2d:87:f5:90:
                    dc:a4:de:00:ae:9c:cf:00:47:0d:78:b1:7d:5e:05:
                    71:70:d6:73:92:ec:1b:29:fc:01:d4:f1:d9:2a:1e:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:68:31:27:92:F9:F8:2F:13:F6:4E:E5:B8:9A:6D:6E:C2:7E:D3
            X509v3 Authority Key Identifier:
                keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:0a:f9:fe:a3:73:c7:57:c1:07:c1:74:63:5d:ad:92:fb:
         f7:3c:86:37:13:38:35:ea:25:8c:8d:d7:03:f9:9f:61:76:3f:
         b6:d0:60:d2:16:d7:0c:25:1b:9a:e7:fd:7b:24:61:22:fc:b9:
         ba:cf:c8:0b:2b:e8:3a:8d:46:54:d5:6e:b1:dd:09:6f:69:b6:
         07:a0:a4:7d:17:e4:57:dc:1c:08:d4:78:43:47:76:fb:70:35:
         ad:52:53:ed:fc:ec:40:5d:4e:1d:08:94:b5:7b:95:24:08:9d:
         00:9b:84:dd:16:7d:62:3d:58:dd:22:48:a7:c4:bd:1b:38:12:
         44:e0:dc:7d:4b:8a:bc:6b:cb:7c:da:6d:76:14:b5:20:ae:53:
         0a:64:51:b9:41:ea:de:33:f1:06:36:2e:77:21:3a:6d:50:4f:
         d9:d4:86:69:7a:cd:ea:1b:b0:ba:50:1c:75:e4:65:cb:66:5d:
         ef:73:7f:51:e2:29:ea:95:56:e3:8c:fe:3d:e1:43:a8:36:fc:
         76:4d:d0:d8:b2:06:3b:19:bb:f6:4b:26:35:ab:2e:a1:89:a9:
         20:a9:4f:fa:be:e9:c8:2e:dc:a2:d8:38:86:77:d9:63:7b:dd:
         ca:68:a4:42:a3:77:f1:b8:e1:85:7d:77:94:6e:f2:eb:d5:57:
         bf:af:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:47 2026 by rpki-client