Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          czHbmchWg1y4jsdA3QOw1XizE7wV1cUaK6RwUAMq7GY=
Subject key identifier:   5F:E0:36:6C:0B:2E:C2:2E:4C:31:90:45:0D:A0:81:A2:CD:FE:D6:76
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       019F92B65D329B335BEB59ABD9479A4992F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          0E78
Signing time:             Fri 24 Jul 2026 06:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:52 +0000
Files and hashes:         1: 9jeDYK_knLWdWNHtP5D0cVO31qY.roa (hash: 6Wo1Gq7cJQHP7npXhJpTMr2r87iqorsL+3UpSfgjQL8=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: TTngWLe6nVlnB0OF992MWKpZVdCvN7GAgkoZTpAkCZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:5d:32:9b:33:5b:eb:59:ab:d9:47:9a:49:92:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: Jul 24 06:00:52 2026 GMT
            Not After : Jul 25 06:00:52 2026 GMT
        Subject: CN=5fe0366c0b2ec22e4c3190450da081a2cdfed676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:1a:e4:8c:e1:51:3d:59:55:37:5d:12:66:
                    d8:49:38:11:a8:95:2d:f2:51:d9:59:11:3e:c0:78:
                    89:5b:7d:76:7a:ee:58:86:af:f0:e4:de:8e:70:26:
                    63:18:71:93:b6:07:7d:5a:ae:8c:18:3b:c1:9b:e9:
                    90:c8:f4:c7:10:eb:7f:57:c4:fa:b1:bc:d5:be:15:
                    66:6f:f8:5f:cd:42:57:e5:58:e0:91:6c:e3:9e:3a:
                    db:1a:6e:48:3c:cd:f5:25:7c:6e:ff:19:47:b8:5e:
                    bf:02:97:76:64:bc:a8:85:8e:b8:8a:f3:21:b9:d3:
                    28:26:e3:33:49:9b:bd:2e:aa:00:2e:10:6c:0b:3d:
                    0c:62:c9:1b:be:28:01:5b:4d:40:33:52:01:1b:cf:
                    35:a9:59:74:c5:86:ee:1a:4d:5c:ae:bb:ca:50:12:
                    2b:2d:bc:00:54:87:9c:6b:a6:6f:bc:07:06:69:4a:
                    e2:36:97:24:e6:80:ea:74:61:8f:07:63:0f:3a:30:
                    c1:c3:77:fb:a9:12:50:e7:72:b5:5e:0b:62:a0:d1:
                    fb:ab:ef:11:27:d9:65:97:bb:ba:5a:5a:d3:54:b6:
                    27:35:48:6d:6f:57:67:05:a3:ed:e1:7f:b6:0b:6b:
                    dc:3f:19:67:01:ea:5f:5a:16:3f:65:31:e9:14:5f:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:36:6C:0B:2E:C2:2E:4C:31:90:45:0D:A0:81:A2:CD:FE:D6:76
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:d7:e2:cf:3b:9d:0f:d7:0d:90:cd:83:4e:4d:c1:9c:06:
         8f:1a:0c:4c:59:9d:50:40:c4:15:81:e7:98:92:64:2f:a8:7a:
         7a:5b:44:05:9a:10:1d:c8:ea:31:b1:25:70:53:9c:f5:91:a1:
         a6:f2:30:77:44:f7:75:1c:da:15:32:2a:b1:32:1d:b9:82:62:
         19:53:02:13:82:e5:d1:c7:90:d5:9e:08:ef:53:65:05:e5:35:
         f0:6c:57:48:c4:9f:91:b2:05:4c:d9:00:59:86:18:7c:11:e6:
         5b:cf:1f:ab:8d:30:b6:33:f4:14:bc:59:5a:c1:ec:bc:ec:2a:
         c9:f1:82:39:41:fa:17:4f:63:e4:f5:5f:f7:97:aa:3d:07:75:
         4f:3d:f1:5d:b7:f1:a3:17:6a:dd:81:3c:58:ff:07:83:ae:4d:
         27:09:51:4c:f7:02:cb:a3:00:e8:52:a1:85:a3:19:2d:dc:5a:
         ea:ac:b0:22:d1:b3:77:85:d6:68:df:85:e5:fa:10:1a:35:6d:
         9f:88:92:32:7b:64:cd:34:44:a6:5c:cb:0a:2e:f3:f3:b2:0a:
         7f:0f:03:28:91:f7:d7:5f:29:c0:88:b2:09:d2:0d:4d:1d:34:
         e6:99:3d:03:cc:80:74:c4:c2:2b:17:58:7d:f3:f9:97:45:93:
         20:24:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:59 2026 by rpki-client