Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File:                     0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier:          iPa61/Bakol6XHz8IlA1H+tUDbAAouz0hD5dtILGcYI=
Subject key identifier:   B8:47:34:B1:CC:17:63:AB:DF:C7:01:51:4D:16:A0:89:59:99:41:6B
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer:       /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial:       019F916DA7BEB855C5DF835D4F28EF9267FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number:          0A55
Signing time:             Fri 24 Jul 2026 00:01:50 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:50 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:50 +0000
Files and hashes:         1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: +wdGS+9HQHH4iMj+2xhCf5eHH1YChUxxwGpwBBxJQLI=)
                          2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:a7:be:b8:55:c5:df:83:5d:4f:28:ef:92:67:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
        Validity
            Not Before: Jul 24 00:01:50 2026 GMT
            Not After : Jul 25 00:01:50 2026 GMT
        Subject: CN=b84734b1cc1763abdfc701514d16a0895999416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:b1:e6:df:e0:1a:bf:dd:2c:a1:47:3f:53:
                    c7:c6:36:1e:4d:81:bd:dc:a5:10:2a:95:97:ea:82:
                    fc:46:a0:a7:3d:5c:bc:2d:87:7b:d1:69:44:3d:53:
                    f8:ab:43:2d:eb:31:42:c8:d0:86:59:9c:d0:18:1d:
                    42:d4:85:a5:77:8e:99:16:d2:25:e7:b0:c8:56:9e:
                    87:e3:6d:26:26:c5:79:22:1e:e1:81:24:4e:23:82:
                    45:38:92:58:d6:5f:f6:f0:62:81:10:6f:69:d1:28:
                    7b:7a:ae:16:32:8c:d3:9d:d8:aa:86:e4:ad:cb:14:
                    35:89:a9:2b:27:2d:4a:cd:a0:89:f5:b5:d2:10:82:
                    c2:0c:1d:1d:34:38:de:0f:09:42:33:ad:f6:0f:0e:
                    2c:96:2a:71:5c:3e:4e:4f:13:fc:c7:ba:0e:9f:ec:
                    8d:a2:3a:c2:7b:b3:59:6a:0e:b7:82:bc:33:13:1c:
                    a0:45:fb:11:76:2b:c4:58:d7:23:44:96:40:6f:9e:
                    e9:45:92:3b:96:4b:39:6b:f5:09:1a:28:8a:71:2d:
                    08:db:77:ee:12:38:70:ce:a0:4c:ef:d9:9e:f4:11:
                    1e:30:b3:f2:fe:1a:56:82:47:f3:8c:56:81:29:26:
                    e7:cc:b9:ab:49:28:53:46:7f:f0:4a:ca:e7:94:78:
                    ce:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:34:B1:CC:17:63:AB:DF:C7:01:51:4D:16:A0:89:59:99:41:6B
            X509v3 Authority Key Identifier:
                keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:1c:08:4f:6e:b5:7b:c3:c1:74:96:b5:2f:2e:72:9e:c9:
         c4:7a:d2:8e:d6:9e:49:df:17:83:90:ca:0f:b9:9e:2b:c6:32:
         14:9f:95:fc:b7:f4:92:5b:6c:31:9d:bf:42:cb:ff:77:5c:d5:
         eb:50:44:31:1f:e9:2d:24:3e:21:7e:d5:2f:4b:7f:d3:2d:59:
         b7:49:4c:46:80:94:4b:b6:73:47:07:15:bd:cf:66:ec:4e:d5:
         f7:7f:fc:25:7a:a0:48:26:60:48:8a:9c:9b:4a:6d:c5:f3:10:
         37:f1:4c:f4:f7:92:26:2a:31:59:55:22:0f:c1:ba:dd:62:9e:
         c5:1b:0c:78:e7:8a:d5:35:1e:ba:9a:19:c1:c8:d5:34:68:f2:
         85:20:aa:02:8c:da:4e:ea:59:4c:f4:36:fc:9f:e5:7e:b0:c0:
         ca:c2:a1:b9:fe:79:c1:f6:65:a2:17:8d:64:df:b0:9c:26:23:
         ee:b8:a7:c4:a3:c8:eb:c6:f5:21:d2:43:ee:87:4f:9e:46:03:
         97:68:cc:f7:0c:b2:6b:47:b5:d0:c6:7f:1e:94:d4:93:fe:91:
         fd:bd:65:63:cc:d4:c9:99:cd:06:89:fb:c6:ea:c5:de:28:23:
         37:0d:a8:aa:d9:27:ce:8a:c4:a3:b2:16:d7:9c:5c:11:28:ee:
         46:dd:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:18 2026 by rpki-client