Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File:                     1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier:          HvFJus71pVeCa5iFtSBA7eH7FryaVAL/xcwiuk94p9Q=
Subject key identifier:   36:C9:25:D7:F7:E5:90:A6:41:87:8A:B1:B2:6B:F7:75:1B:DF:2C:81
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer:       /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial:       019F9323D17B671403F9D347749CA5E16A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number:          0908
Signing time:             Fri 24 Jul 2026 08:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:25 +0000
Files and hashes:         1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: 9+BMNCVBGjFjutTiNwdqH7BKUlROPv+gMlm2AAiGGDo=)
                          2: Y3xy27kzFffMPewtUpDREyfJrvY.roa (hash: tx10cTi8DLhzNW2hd7QG0hYENx9jGu/u+XgKab2XuPA=)
                          3: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (hash: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:d1:7b:67:14:03:f9:d3:47:74:9c:a5:e1:6a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
        Validity
            Not Before: Jul 24 08:00:25 2026 GMT
            Not After : Jul 25 08:00:25 2026 GMT
        Subject: CN=36c925d7f7e590a641878ab1b26bf7751bdf2c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:e0:da:5f:61:44:f8:8c:ee:f1:04:85:82:
                    75:b3:35:29:34:54:5c:73:5f:8b:53:b3:aa:fd:b0:
                    5c:47:1f:c3:d4:f2:c8:4e:ba:0a:29:90:7a:ef:c6:
                    e6:1d:b6:1e:65:f8:de:79:b0:4b:98:89:72:5e:78:
                    12:56:d9:16:38:28:84:ed:3d:56:de:ca:e0:9d:40:
                    af:ee:37:90:93:65:cd:f1:fd:22:0e:d5:b4:2a:27:
                    91:c5:8e:8f:f2:d4:e6:fc:da:79:a4:ec:d9:fe:28:
                    d3:f9:b1:38:da:6e:74:b3:ff:7c:e2:cc:9e:8b:2a:
                    bc:93:7d:e0:27:f0:e5:1a:41:5e:9a:5a:1c:57:36:
                    81:45:25:50:33:b2:54:7e:83:a8:f8:9e:2f:e8:07:
                    ca:5b:09:34:13:85:8d:6d:fc:7e:bd:c7:6b:6c:a3:
                    58:15:2c:20:f3:e3:25:e8:72:19:d7:e7:43:b1:8b:
                    cb:aa:39:24:42:28:08:17:c1:cd:de:f3:c4:4b:df:
                    ca:7c:4a:1f:58:3b:d8:6f:a1:e3:84:b8:ff:fc:db:
                    97:de:dd:83:b7:fd:7f:6b:f3:db:a0:65:44:21:8b:
                    6d:f8:24:d9:76:54:df:11:38:fe:58:e4:e2:8b:5f:
                    b5:86:ff:1b:df:13:a4:17:57:35:9d:5b:65:dc:75:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C9:25:D7:F7:E5:90:A6:41:87:8A:B1:B2:6B:F7:75:1B:DF:2C:81
            X509v3 Authority Key Identifier:
                keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:2c:fe:14:32:99:1e:09:43:cd:f4:12:2a:cd:54:be:a5:
         72:ce:67:ce:0e:a4:5c:d0:1f:6c:9a:9f:4e:ef:02:67:4c:ab:
         93:58:3f:21:71:dd:f0:b7:e2:64:23:5b:07:b3:6e:59:96:a3:
         b4:e5:5d:5b:01:7e:ee:ba:4a:b1:df:e0:2f:e3:df:e2:9d:c4:
         5c:86:c4:67:4b:c1:c3:13:cd:1c:6b:52:4c:00:51:e6:d7:43:
         38:77:57:ae:9b:85:ac:91:cd:18:43:0c:4d:ed:13:3f:78:54:
         26:ae:95:04:5a:55:81:68:6d:e3:81:a9:3f:b4:7d:e3:4e:be:
         e1:9d:5e:83:25:15:01:90:e1:71:cc:36:e8:ec:7d:ff:19:2d:
         3e:69:57:04:c7:b2:40:00:59:90:95:3c:f1:6e:a4:eb:cc:62:
         f1:4a:7c:36:2f:32:1d:68:a1:9a:9b:d6:f5:81:31:4c:78:5d:
         3a:d2:e3:b0:33:5e:52:a0:3f:7a:d7:c8:6b:e7:b8:0f:ba:01:
         e8:a3:a1:20:a5:ea:00:2f:e4:ff:fd:04:ba:e7:0d:28:42:a4:
         4d:c1:3f:b5:a0:d9:28:52:c7:f4:05:87:ca:25:7e:d6:46:d7:
         91:c8:a5:64:a8:90:8c:bb:9d:0a:41:a6:0f:a5:d9:ff:5a:03:
         58:6f:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:21 2026 by rpki-client