Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File:                     pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier:          8iSKU3LD87rG5Do4uSUuBSIWagzv4/pWdzXHxIORYfM=
Subject key identifier:   93:12:08:05:D1:21:77:D9:83:91:DF:FE:EA:DC:99:AE:2D:71:F9:D4
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer:       /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial:       019F9624C42687FB6E335774F46D726ACA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number:          03EC
Signing time:             Fri 24 Jul 2026 22:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:19 +0000
Files and hashes:         1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
                          2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: pRmBOZ3s5M9juMF/rMolbQHNOFraGPsa8Y89MGNsPWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:24:c4:26:87:fb:6e:33:57:74:f4:6d:72:6a:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
        Validity
            Not Before: Jul 24 22:00:19 2026 GMT
            Not After : Jul 25 22:00:19 2026 GMT
        Subject: CN=93120805d12177d98391dffeeadc99ae2d71f9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:cc:ff:50:a4:5b:b4:96:d9:e3:67:53:ab:
                    c7:2c:7d:fd:f7:35:87:fa:96:1f:c5:ae:25:1d:48:
                    f3:7c:11:00:a4:2f:8a:3d:82:5e:5d:74:27:97:67:
                    91:a8:41:fc:8e:1d:cd:5f:3b:b0:0d:29:4f:8e:74:
                    b6:62:1e:e6:70:16:07:7f:53:a9:eb:f0:78:2d:92:
                    f8:a2:bf:cf:46:e6:5c:6d:82:44:02:51:aa:e0:8f:
                    92:56:8d:3b:fe:8f:f5:f4:7c:6f:92:ba:bc:98:c3:
                    b1:3e:0c:30:cd:7a:24:09:d5:6f:3e:26:02:ab:58:
                    72:a1:b2:f3:2c:9f:0d:cb:fc:c8:a7:e5:86:95:a3:
                    14:ba:41:89:88:d4:9a:d3:5e:db:7c:99:40:15:33:
                    f2:55:6e:91:52:45:41:31:3f:9c:ec:13:f7:59:c5:
                    16:1e:99:b1:5c:0e:ca:92:d0:f5:88:f9:ae:59:50:
                    cb:b3:c5:4e:ff:1b:cb:32:d7:5d:68:d5:55:39:00:
                    70:db:fa:63:31:9a:93:59:ee:d9:32:5a:a6:7e:2d:
                    d8:61:db:58:f1:bb:f5:d6:35:0c:50:95:c5:e9:d0:
                    27:f0:42:2b:94:76:44:fc:f8:b9:b4:94:04:7c:a2:
                    c0:71:16:19:2d:dd:49:46:98:cd:62:a2:18:15:ee:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:08:05:D1:21:77:D9:83:91:DF:FE:EA:DC:99:AE:2D:71:F9:D4
            X509v3 Authority Key Identifier:
                keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:1f:70:65:db:06:3a:7a:db:b0:4f:90:1e:29:9c:30:77:
         01:50:af:45:0f:f2:a6:ec:ee:49:1c:59:e6:f7:6d:f7:40:00:
         57:07:ad:de:ee:9a:53:c6:74:7e:0b:e8:a1:9d:d8:ec:8c:d6:
         65:3d:8a:03:4b:0b:e0:a6:1b:9a:62:86:7d:02:a2:05:3f:c4:
         cb:2d:f5:ad:d1:fd:77:17:c6:49:ba:f9:d3:1b:ce:f3:1b:ae:
         63:bf:70:a7:5e:1b:c8:b5:c6:92:d3:0c:97:a6:e6:fe:89:19:
         ec:ed:dd:47:44:3a:67:0b:a0:94:b2:b4:6c:83:ca:1a:32:eb:
         52:24:98:76:0e:4f:18:01:c6:e2:6a:2f:f6:c6:33:33:12:b3:
         32:91:f5:e1:78:66:96:9d:b8:82:58:04:71:bd:b9:1c:e5:6d:
         5a:68:19:7a:d8:99:2c:bc:72:df:cc:2d:ab:40:53:9c:a4:e6:
         b2:68:dd:f5:a6:1a:17:f0:41:0e:30:fa:c9:6a:82:11:fd:37:
         f9:f4:db:1a:13:d6:00:08:46:a2:bf:4a:dd:f1:40:3e:c1:a8:
         fd:08:ef:0d:c5:00:b8:c2:70:f2:b5:d5:7f:ed:cf:fc:cc:da:
         fb:54:82:0f:5f:6d:a5:d5:db:45:67:e3:2f:69:1e:7b:2d:f2:
         bb:a3:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:16:22 2026 by rpki-client