Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File:                     A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier:          LpX7J7t8xpCV0g3DQa+Ri43jXbdXYp1BY9K2lfC2UNI=
Subject key identifier:   77:06:15:3D:64:EE:2F:75:54:B4:7B:E8:26:EE:51:15:BE:60:EA:B3
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer:       /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial:       019F95B6FE94D9F5BB331A3763917BD70563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number:          1618
Signing time:             Fri 24 Jul 2026 20:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:25 +0000
Files and hashes:         1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
                          2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: ZxjNK/V/LhNNhs840kqaTAsKeJCV0DGeOUsjxqaDwV0=)
                          3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b6:fe:94:d9:f5:bb:33:1a:37:63:91:7b:d7:05:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
        Validity
            Not Before: Jul 24 20:00:25 2026 GMT
            Not After : Jul 25 20:00:25 2026 GMT
        Subject: CN=7706153d64ee2f7554b47be826ee5115be60eab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:66:1b:59:36:1a:2a:88:59:52:a1:54:ae:
                    3a:4a:ee:02:67:22:2a:f3:d3:5b:05:57:86:8a:a3:
                    bc:f9:3d:f9:bd:b4:f8:c6:74:8b:8e:62:cb:e5:de:
                    2d:3b:31:ab:1b:51:8d:34:4f:d0:a5:2c:ee:4e:3c:
                    c6:f5:95:36:fb:f5:7d:72:ea:3c:c4:db:7e:8f:ba:
                    36:13:dc:f6:5e:f4:30:98:f4:d1:ff:a1:0b:24:3b:
                    54:c3:3c:84:ed:d0:23:b4:e0:75:d7:25:1a:70:ff:
                    c5:10:92:6a:f3:25:c1:84:b4:51:53:22:52:4a:f2:
                    56:eb:f4:63:78:b6:8a:cb:b3:25:e4:69:fb:11:67:
                    2b:30:b9:94:68:b4:f2:2f:57:d5:47:cf:db:0d:2a:
                    7a:57:cb:87:33:cd:70:21:c7:5b:59:3e:a2:81:4d:
                    b4:2c:72:f1:86:b0:29:5e:95:59:b0:3c:db:df:98:
                    0c:98:28:3d:a0:3c:1b:11:c1:e4:72:0e:1e:dd:c7:
                    3c:ca:26:09:7a:e1:27:aa:68:9c:39:41:5c:0f:7c:
                    9d:3e:15:02:54:1a:4d:63:fa:cb:94:0c:ed:2a:14:
                    71:0c:e5:78:2d:9b:4c:26:bf:70:47:46:a5:ab:7f:
                    8a:98:bb:f6:ed:88:08:47:69:b2:fb:27:e3:5c:a8:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:15:3D:64:EE:2F:75:54:B4:7B:E8:26:EE:51:15:BE:60:EA:B3
            X509v3 Authority Key Identifier:
                keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c7:2d:4f:77:ad:fe:12:de:2a:23:a9:12:7a:a5:a9:ed:39:
         4c:a9:f4:32:71:47:f8:ff:cb:6d:e5:3f:85:da:a3:c0:97:6a:
         7d:61:00:d7:ed:52:68:87:f1:ea:50:f5:30:80:9e:2c:0e:a5:
         64:2f:a9:45:8e:07:6a:c5:a1:f2:68:92:bb:19:1f:26:70:e3:
         03:9b:89:58:66:59:3b:1d:87:6c:8f:fe:e8:e3:97:26:b6:a7:
         2f:c2:24:7d:f8:82:c1:c4:b9:b8:72:4f:53:68:4f:b4:92:2b:
         77:ab:35:50:e8:16:1f:97:47:2e:b5:51:7c:eb:38:ac:0a:30:
         e1:38:da:81:b1:15:83:fc:07:8d:6c:24:36:b1:b9:93:1a:83:
         2c:02:01:42:de:18:34:14:06:02:4b:02:39:74:27:d5:64:97:
         1f:cd:3a:ce:84:ce:4d:42:46:e8:2a:b6:86:f6:43:a7:37:a7:
         ee:43:d5:af:01:7e:17:07:56:4c:68:f8:17:88:b9:e2:c7:2e:
         02:0a:0a:4d:66:8f:a6:96:d1:ee:70:a2:e9:05:30:78:26:f6:
         4f:4b:2f:a6:7a:70:94:39:27:4e:02:69:04:28:79:72:f9:b4:
         09:05:61:12:4f:34:ea:43:2d:3e:27:20:b8:a9:cf:d0:b7:0f:
         1a:07:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:33:51 2026 by rpki-client