Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File:                     DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier:          7VmD5vvcJnfboyKOWDNjQwgB6tnPcO/Y+YgRFGX6VHA=
Subject key identifier:   54:B4:75:B9:5C:FE:7C:5A:1A:B1:AF:F6:FF:71:4B:CB:A4:E2:A0:20
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer:       /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial:       019F90912DFE6A7E93B79070DD3F9002D8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 20:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:01 +0000
Files and hashes:         1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
                          2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: nubkwdvks80kRusp64kP55sSYim+zg0bdKzyoIXxlJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:2d:fe:6a:7e:93:b7:90:70:dd:3f:90:02:d8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
        Validity
            Not Before: Jul 23 20:01:01 2026 GMT
            Not After : Jul 24 20:01:01 2026 GMT
        Subject: CN=54b475b95cfe7c5a1ab1aff6ff714bcba4e2a020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:e7:6f:72:65:d9:66:f8:bb:b2:f7:98:a1:
                    e7:d1:74:7c:15:2b:3e:22:7e:2f:d3:6c:2b:f2:43:
                    61:a0:c9:9a:28:45:ce:3c:a1:62:5f:fa:a6:54:aa:
                    b3:22:df:a0:aa:66:19:31:f2:26:dd:86:04:46:79:
                    8e:42:3b:4e:e1:1f:aa:62:87:34:ce:91:36:12:af:
                    17:6c:05:92:78:e3:70:c7:42:1d:b9:dd:81:b0:a8:
                    cc:30:e5:28:8e:17:52:f0:b2:cc:54:d4:d6:53:8a:
                    c7:7b:d2:16:5b:6f:e4:0f:ce:fe:86:64:9b:72:c9:
                    7f:d1:2f:29:2b:8a:ed:22:31:9c:fe:17:5b:fb:07:
                    63:a2:cb:b0:fe:e0:e6:24:db:d7:d4:07:dc:35:af:
                    f6:51:dd:fd:c1:e7:92:53:1b:90:4a:f1:c8:4a:1d:
                    af:17:26:2f:e2:2c:b8:37:ff:05:7e:70:aa:a9:64:
                    f3:50:26:97:59:d0:15:c5:36:30:f8:4c:28:47:fe:
                    70:ab:e3:9f:d1:51:a0:45:d2:90:dd:45:cd:e3:45:
                    d3:a7:c9:21:37:a3:f8:c9:ae:d3:09:1f:56:96:7e:
                    74:6b:15:e1:b5:00:9e:e3:63:b1:6c:d6:12:86:95:
                    ec:d1:26:92:b2:33:83:6a:78:ce:c8:1f:44:17:3e:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B4:75:B9:5C:FE:7C:5A:1A:B1:AF:F6:FF:71:4B:CB:A4:E2:A0:20
            X509v3 Authority Key Identifier:
                keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:02:d7:d2:76:6e:6b:54:62:01:27:c9:86:a2:3b:e1:9e:6f:
         32:3f:d8:18:d5:1d:d6:9d:3c:ca:0e:d0:61:e8:20:10:c4:44:
         b5:15:17:5d:a7:62:2a:bf:bd:db:0d:4b:af:44:0e:fd:aa:42:
         f6:70:3e:81:7f:d2:c0:19:c9:e8:21:61:a2:9b:26:dc:66:5a:
         a2:39:df:e9:86:bd:df:63:b6:b6:89:ee:fa:b0:7e:88:cc:c8:
         4d:fb:51:a2:37:53:c7:26:c0:3d:2b:1c:38:b3:8a:76:37:b3:
         7e:a6:93:bd:b5:a1:3f:24:27:68:ef:95:b9:0f:e8:a5:04:d1:
         75:00:ae:3c:10:78:e6:c8:07:18:ad:c2:de:b2:a5:92:d2:42:
         ae:3d:20:81:7a:c6:bf:5c:fa:dd:2c:f6:8a:d1:95:c2:a4:8f:
         e9:90:29:19:89:14:96:13:84:02:43:d8:cf:88:a8:c3:49:41:
         6a:1e:cc:25:44:05:08:64:dd:f4:aa:01:58:fb:86:a0:f2:d5:
         1e:12:5a:c9:b1:8a:d2:b1:a7:14:6f:9b:a5:1e:cf:25:75:a3:
         55:cd:81:8e:0e:00:6a:da:44:18:b4:ee:86:ed:5b:55:89:10:
         bd:26:20:f1:3a:1a:11:12:23:f3:b0:31:36:5d:f3:6a:4f:61:
         24:ed:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:14 2026 by rpki-client