Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          Boh36KIV+KoVcV2Ge9SwtKEBGl/++6XJAWOzS3ch5To=
Subject key identifier:   94:BB:A5:F7:A5:7E:D0:52:0F:81:D3:9E:47:52:9F:63:8A:42:E2:69
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       019F91A39EE594CB5089C53EF8CD76656B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0E3B
Signing time:             Fri 24 Jul 2026 01:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:47 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: PIs8wHrWpxgX8mDVmwOzCr18zJ3jOO2ndQFZnY2NFJc=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:9e:e5:94:cb:50:89:c5:3e:f8:cd:76:65:6b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Jul 24 01:00:47 2026 GMT
            Not After : Jul 25 01:00:47 2026 GMT
        Subject: CN=94bba5f7a57ed0520f81d39e47529f638a42e269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:77:31:44:7e:68:39:40:f9:5b:a2:84:84:
                    0b:c7:5d:e5:18:f6:f8:31:b2:be:35:ee:b6:99:5b:
                    4e:13:40:6a:e5:03:fa:ec:46:fb:f5:e9:27:69:4a:
                    cc:34:9b:08:54:03:30:f4:e6:a4:83:77:b7:9a:a4:
                    4d:5d:ef:31:07:6d:aa:f3:61:75:95:1a:14:70:20:
                    62:64:e3:b2:34:a4:76:1a:54:1c:7f:85:45:57:3f:
                    3e:99:21:ba:4d:87:b4:2c:54:d3:31:ba:2c:d5:85:
                    b5:b0:80:e0:22:d3:e0:e3:1e:2f:3a:68:f2:53:73:
                    88:b5:dd:5a:33:85:a4:17:74:19:52:81:6f:df:82:
                    32:6f:d7:ea:50:4c:93:d3:f0:3c:f8:4e:a0:7c:be:
                    0e:d1:04:d8:06:41:25:5f:ae:af:6c:de:18:9b:5b:
                    11:d0:48:29:0b:c9:a4:cd:9f:9b:cd:cb:25:91:be:
                    21:8c:cd:b2:5c:66:0a:4e:73:6c:5a:04:0e:9a:df:
                    bd:4b:64:1a:11:f1:8f:23:b4:f0:1e:1e:04:09:c8:
                    ff:81:aa:d3:13:12:cd:f1:69:32:81:d7:b8:0b:7d:
                    ef:26:2f:e7:87:d2:c5:d8:dc:a4:b5:cf:b9:ef:c9:
                    39:3e:af:ef:80:10:8e:65:2a:cb:47:8f:e5:b6:3b:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BB:A5:F7:A5:7E:D0:52:0F:81:D3:9E:47:52:9F:63:8A:42:E2:69
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:bb:2d:19:0d:c3:92:28:a0:38:a3:fa:b0:3e:e9:72:57:89:
         fb:cc:95:55:af:a6:57:f5:f4:43:71:a7:86:b1:8a:d5:10:41:
         94:f3:12:fc:dd:69:a6:a2:83:ff:81:af:b0:67:d8:aa:c0:b2:
         de:34:fe:1d:b1:5d:53:d5:9e:c7:d7:bc:72:da:ff:e0:7d:85:
         57:9b:88:23:61:dd:cb:e9:9a:1f:c2:e4:3b:6b:0c:cb:d9:76:
         9c:20:28:57:e2:33:02:46:07:6f:b2:67:bc:c2:c7:78:63:83:
         03:26:f9:0b:27:1e:79:86:44:ea:f8:a9:a7:fd:5b:51:a4:4a:
         a4:98:c7:56:04:6f:da:93:17:0d:34:84:97:05:94:d1:ef:ee:
         1a:4d:3c:44:cf:fc:cb:93:26:6a:37:0c:83:b1:f0:eb:7c:df:
         2a:50:f8:9f:64:0e:7a:b4:cf:75:7a:e3:bf:81:e2:e6:f8:d7:
         6a:87:9c:3c:b3:8c:2e:88:38:a6:06:62:47:ae:24:00:4a:82:
         2e:c0:de:9b:b1:48:20:35:52:80:7b:fd:23:9b:dd:96:df:13:
         57:01:33:31:6c:03:4a:52:46:fd:5a:4e:7d:8f:58:5e:a8:0b:
         ab:2c:e7:92:c6:ce:c3:ae:c7:dd:df:3c:40:df:51:51:35:39:
         33:74:e7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:00 2026 by rpki-client