Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
File:                     0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json)
Hash identifier:          sT00PLTfmNADFOF/bxLf1IU0aixRJoNemJWGt56LmlA=
Subject key identifier:   93:87:3E:90:2F:76:86:8B:7F:CF:EC:03:37:E1:D1:85:D6:21:CF:C0
Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
Certificate issuer:       /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Certificate serial:       019F9022AC4057FDEC3CC76357468E579B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
Manifest number:          024A
Signing time:             Thu 23 Jul 2026 18:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:19 +0000
Files and hashes:         1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: fD0H7wNpPziToze8rkRct/SoMG/HKNXIOKgJOTrf8as=)
                          2: dIxRZVoK391SO4N57N0kDl39xT8.roa (hash: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:ac:40:57:fd:ec:3c:c7:63:57:46:8e:57:9b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
        Validity
            Not Before: Jul 23 18:00:19 2026 GMT
            Not After : Jul 24 18:00:19 2026 GMT
        Subject: CN=93873e902f76868b7fcfec0337e1d185d621cfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:97:35:b7:12:42:99:03:7e:03:a6:6c:6d:
                    d9:d3:b3:b3:42:30:ce:a3:6a:0a:d1:7a:09:9f:f1:
                    93:aa:89:5b:b8:c3:e9:09:f7:38:6b:ec:22:85:df:
                    1f:f4:19:f8:ce:4b:91:c5:55:02:dd:74:e2:e4:e1:
                    4d:45:e6:5b:c7:54:7a:16:9e:48:98:e0:85:e7:4b:
                    49:b3:d7:f5:8e:11:f0:87:b3:c2:91:f8:0c:5a:b1:
                    82:2b:6f:ad:09:17:8b:12:c4:4a:d4:35:a1:48:47:
                    7b:ca:8e:ff:1e:4b:c0:e1:c7:29:89:72:b9:4a:b2:
                    fa:e5:b0:b3:fe:f6:60:38:7c:9c:f6:9c:90:26:58:
                    1c:c1:1a:9c:d1:39:60:ff:bd:53:2c:4e:48:ec:49:
                    7a:d3:6a:ed:95:9e:24:99:6f:f1:ab:7c:63:e2:c5:
                    a1:4d:7a:9c:f2:bb:ba:5a:1f:e6:5b:e4:3e:a0:9b:
                    5f:9b:6c:3c:04:b6:79:86:d5:02:67:9a:a0:a4:96:
                    b1:e4:8d:72:13:2b:89:c3:b6:4c:c1:97:f4:37:27:
                    35:e0:15:06:12:28:b0:d2:c7:33:e2:9e:c7:b6:fd:
                    c6:f0:29:ae:83:ec:40:0e:67:dd:cc:08:21:09:58:
                    80:6c:3f:9b:c1:d2:15:74:2e:89:e0:4c:59:2a:43:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:87:3E:90:2F:76:86:8B:7F:CF:EC:03:37:E1:D1:85:D6:21:CF:C0
            X509v3 Authority Key Identifier:
                keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:89:1e:0b:be:1a:2c:70:05:a9:0c:98:69:93:10:08:c9:28:
         38:47:ed:a6:a0:74:90:da:1d:be:92:08:0d:3b:de:da:48:fd:
         99:dc:7d:85:64:c2:d7:82:37:12:f7:81:c9:ab:33:78:32:7e:
         fd:27:9d:1e:90:13:5c:46:e8:72:cb:b8:ea:67:47:e9:de:8e:
         45:bf:49:12:22:45:ab:6e:77:6e:81:1a:fc:87:10:92:44:12:
         4c:79:59:84:7a:4a:b8:73:3c:98:b2:7b:89:fd:8b:90:1b:b0:
         59:93:06:7a:05:0a:be:c2:13:fa:6c:28:f1:2c:d2:e9:89:6d:
         55:b9:7c:ae:d4:ff:e4:39:80:37:43:ee:85:2e:33:83:b4:89:
         37:1e:38:01:36:37:06:13:b9:27:96:d3:29:e5:18:0e:7f:e8:
         f7:2d:58:66:e0:31:54:54:91:0d:42:bd:87:14:4f:dd:72:67:
         cf:13:73:29:17:5a:04:68:18:69:b7:7f:42:b0:b1:4d:4b:da:
         93:ca:2a:ca:46:b6:1a:15:67:c4:59:7c:f1:5f:47:17:a1:f3:
         f5:32:df:fe:b4:2a:f4:1c:63:b6:df:d9:36:b9:b8:31:33:ac:
         df:11:07:9a:8e:6b:ec:56:ed:bf:7f:87:9c:8d:15:d6:40:1b:
         32:c4:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:58 2026 by rpki-client