Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          tWAAo4YlG4T5hZu2lmdNJP52gAf7b+K3Vd0LouJGEaY=
Subject key identifier:   3E:66:32:1B:24:00:59:21:BA:5E:36:A6:F4:AE:94:CE:12:37:B2:7F
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       019F91DA5C55E632946F5AC588A64EB33F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0D87
Signing time:             Fri 24 Jul 2026 02:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:34 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: iWKWTlOlzR1BB+oCWoa5in94lQ/z87fCaGOisDt/In8=)
                          2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
                          3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
                          4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:5c:55:e6:32:94:6f:5a:c5:88:a6:4e:b3:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Jul 24 02:00:34 2026 GMT
            Not After : Jul 25 02:00:34 2026 GMT
        Subject: CN=3e66321b24005921ba5e36a6f4ae94ce1237b27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:27:53:4d:80:15:71:97:73:73:1b:b4:4e:
                    48:fa:88:03:5a:1b:89:48:e9:7f:60:cd:0e:1d:c2:
                    d9:61:0e:a3:ba:2a:b3:94:c5:56:37:69:03:a0:cf:
                    f8:c8:df:dd:a2:66:61:89:1c:58:b5:b1:0d:a5:fd:
                    2a:3f:03:14:e4:42:0a:fa:3e:40:69:f2:cc:44:c1:
                    56:4d:2f:78:0b:d9:b6:e5:13:7c:9e:49:f0:ae:36:
                    58:47:13:3c:c0:f8:a1:87:96:f9:02:69:ce:f7:af:
                    ff:31:46:3f:ab:4a:71:45:80:fe:0a:94:70:32:d0:
                    77:57:2d:39:b2:ee:08:be:a4:cb:15:09:8b:2d:ae:
                    e8:cb:9c:4b:02:51:1a:ff:f3:e3:98:50:25:29:5a:
                    94:7b:d5:59:a6:67:51:dc:6f:94:69:21:f4:9f:1c:
                    f4:76:fc:1c:a8:b6:8a:78:1e:c0:dc:36:7a:c8:00:
                    52:0b:4f:5d:63:d1:10:ba:89:5f:b0:5d:44:5c:2f:
                    b7:da:08:d9:74:d5:bc:69:ec:bb:50:21:b7:37:d5:
                    12:f9:8d:50:61:c8:9c:c4:54:ab:b6:b4:5b:c3:7f:
                    cd:38:51:98:65:9b:3d:58:c3:6d:d0:8c:40:1d:4c:
                    39:5b:09:db:85:b7:b7:b8:47:13:83:d9:22:e6:0d:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:32:1B:24:00:59:21:BA:5E:36:A6:F4:AE:94:CE:12:37:B2:7F
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:7f:e6:e1:24:e6:8f:aa:e8:1d:3b:78:9b:f0:05:b1:56:
         f0:bf:4b:24:50:fb:5b:f0:4f:81:ad:54:e2:41:5c:87:bf:52:
         ba:1f:d3:62:88:3a:69:81:7b:8f:82:fe:4c:7e:0d:de:f6:32:
         2d:76:f0:1c:f4:1b:07:ed:29:42:34:63:bb:42:43:f8:a8:87:
         dd:19:aa:46:1d:f0:c2:cc:73:c6:3f:34:32:f9:be:28:f1:d3:
         46:50:37:be:29:23:5f:02:c2:d8:a1:a7:fb:00:e2:08:b1:c5:
         9b:c3:10:04:20:f2:31:f7:f2:c8:23:dd:6c:c9:f2:d6:6b:f3:
         83:94:ac:0d:fb:19:03:db:c1:46:c3:ae:59:d3:c8:03:63:99:
         d9:9b:9c:e5:98:a3:80:45:1d:a2:ad:15:3e:f6:90:54:77:9a:
         c3:fc:4a:d3:bd:b1:ca:d4:ac:26:f9:b5:b4:85:1b:a9:1c:fc:
         b7:33:af:a1:fc:c4:ae:dd:f4:be:94:49:ab:2c:8a:89:81:b0:
         7d:14:5e:8f:ef:8e:6e:3a:fa:dc:bc:7f:95:98:5f:73:33:be:
         56:07:fc:6f:1c:75:54:fd:fa:4c:a2:23:85:02:7f:d3:f9:8e:
         a8:c5:ff:6c:ae:be:ce:58:fb:b4:45:56:e4:9c:53:c4:ac:c7:
         dc:b4:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:06 2026 by rpki-client