Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          HEBY1MSR2qdA7T3YOBFsNNjLQ+dhGgrzbmrRQuKbsbw=
Subject key identifier:   A9:CB:4F:C1:7A:E3:08:DC:2D:77:4E:B7:77:D7:2B:F0:E4:B1:B8:2E
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       019F921111AE6CDEE268A75CF6A8A8E5BE3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 03:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:19 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: BfAacFZMjrbXR7Ct9kVKLL6fykLdtFGGownywHtXR2M=)
                          2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:11:ae:6c:de:e2:68:a7:5c:f6:a8:a8:e5:be:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Jul 24 03:00:19 2026 GMT
            Not After : Jul 25 03:00:19 2026 GMT
        Subject: CN=a9cb4fc17ae308dc2d774eb777d72bf0e4b1b82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:06:ce:be:79:ee:9d:92:61:e9:1a:10:59:
                    0e:1e:ea:a3:97:8b:26:a0:00:5e:90:64:07:f3:6d:
                    32:ef:46:37:d3:d2:c1:27:10:64:e7:af:0a:e6:7c:
                    30:e7:ef:b1:8a:33:2c:da:b7:91:64:aa:f4:bc:43:
                    fb:b3:84:1b:6f:6d:bf:0c:3e:cf:0b:75:60:ef:46:
                    39:3c:e2:0a:46:a8:9e:da:47:f4:21:ff:01:71:9d:
                    44:08:04:0f:28:76:70:e0:df:49:e2:8c:f1:4c:38:
                    57:61:98:5c:ae:69:4f:15:30:ab:c8:1f:8b:59:f8:
                    7d:3b:b6:74:37:74:50:e9:e5:b7:13:22:4a:15:7e:
                    5c:a6:0d:42:75:b2:8d:fa:06:51:ce:41:01:89:9d:
                    9a:bd:80:5e:bb:bb:81:de:7e:92:7e:d3:3f:d2:36:
                    bd:0f:dd:8a:24:ab:7e:8d:26:65:4b:b0:6c:7e:24:
                    e6:d9:2c:53:3a:82:97:9d:83:51:d8:d8:31:30:0e:
                    3e:ec:ea:28:86:2a:50:5c:1b:1f:5c:28:92:6d:19:
                    07:5a:61:0a:bc:5c:f4:8f:36:6f:3d:b6:dd:28:cd:
                    55:94:fb:d8:a9:c3:b7:48:b1:12:01:3f:b8:d6:86:
                    1a:8d:c1:99:8a:33:5e:f2:6d:b9:12:d4:c8:78:6e:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:4F:C1:7A:E3:08:DC:2D:77:4E:B7:77:D7:2B:F0:E4:B1:B8:2E
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:93:2d:2d:19:fc:54:85:8a:d5:46:26:ef:7b:02:e8:40:c9:
         6f:15:02:f3:a9:e1:d9:cf:87:d2:ad:86:be:ab:37:e5:3c:d4:
         24:91:d3:90:5a:e1:03:f0:70:1a:49:d6:0b:b8:39:21:37:25:
         35:0c:8d:29:66:be:b0:55:e9:98:51:df:aa:8b:9d:3d:3a:3e:
         2f:84:ca:fe:90:7e:d3:bc:27:88:c0:c3:54:9f:78:cb:cd:dc:
         e5:23:28:72:c7:b0:02:6d:7c:e9:4e:75:ae:88:8a:41:e7:6d:
         eb:c1:0e:11:cf:c5:6c:39:17:c7:42:9d:0d:af:5d:20:c0:28:
         1a:67:03:a1:07:e2:18:f2:cf:20:c0:85:09:e2:63:0c:58:69:
         07:fa:61:24:d5:f1:d0:d9:7e:ce:4d:81:e4:41:75:39:a0:35:
         62:55:ca:fd:16:ac:aa:b9:91:f2:80:76:d8:73:53:e2:28:1d:
         50:ec:2a:09:38:89:41:b0:b6:7c:a2:d2:c9:04:43:1b:44:a7:
         10:0a:67:0d:97:b3:0b:16:51:0d:62:19:d4:11:c7:ed:5c:04:
         dd:e1:0a:c9:34:61:76:9f:9a:07:1a:b3:92:18:66:05:33:0e:
         a5:8d:74:ab:cd:98:b3:bf:e4:35:18:ec:6d:e3:23:4a:57:b9:
         ad:10:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:51 2026 by rpki-client