Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
File:                     0GlUz1FOymLFVom9iTCykiF6nnw.mft (raw, json)
Hash identifier:          3UtK2u9kYdHKDUAGoWhIxa3HhPc5Q6AyL8cjeP9GKGc=
Subject key identifier:   8C:29:65:F4:59:35:A6:07:4A:EC:1E:95:F5:5B:E9:F0:B2:1C:F8:39
Authority key identifier: D0:69:54:CF:51:4E:CA:62:C5:56:89:BD:89:30:B2:92:21:7A:9E:7C
Certificate issuer:       /CN=d06954cf514eca62c55689bd8930b292217a9e7c
Certificate serial:       019F8FB588E7487C6F4E246F099E95603278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
Manifest number:          018C
Signing time:             Thu 23 Jul 2026 16:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:06 +0000
Files and hashes:         1: 0GlUz1FOymLFVom9iTCykiF6nnw.crl (hash: xz6Pe1X0LjSXzxFuBp2aHXZ9Gk1GoHrHu6hHCE+RJfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:88:e7:48:7c:6f:4e:24:6f:09:9e:95:60:32:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06954cf514eca62c55689bd8930b292217a9e7c
        Validity
            Not Before: Jul 23 16:01:06 2026 GMT
            Not After : Jul 24 16:01:06 2026 GMT
        Subject: CN=8c2965f45935a6074aec1e95f55be9f0b21cf839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:22:79:79:ff:ab:9d:76:6c:25:6f:bf:14:
                    f3:b8:0d:ca:dc:7a:c9:97:5b:94:0a:0e:2f:65:27:
                    c2:b2:ac:c3:60:c7:59:51:66:a7:bb:b2:43:79:5d:
                    20:54:6a:f3:48:fd:87:d8:31:78:35:e5:39:fb:3b:
                    44:05:e8:5c:29:27:07:f3:66:e7:76:d5:37:59:cb:
                    09:47:85:14:50:25:18:97:f3:c3:b2:58:c1:4f:2c:
                    75:b6:e6:6c:b4:1b:4a:65:dc:db:70:1d:ce:8b:05:
                    f7:6f:31:af:e1:8c:fb:7a:a5:4e:6a:51:7a:91:3a:
                    08:23:64:f8:d0:19:db:80:cc:57:91:30:1b:db:85:
                    b2:60:43:e3:21:07:0e:92:b8:21:07:3b:f1:8f:42:
                    23:38:8c:33:a4:f7:02:3d:18:7a:11:57:df:97:0f:
                    de:11:bb:0d:20:a9:ad:a3:d5:f9:67:31:64:be:77:
                    a2:86:ca:8b:69:11:41:11:3d:ff:bd:5b:94:75:3a:
                    19:6d:a6:2c:d7:cb:4c:96:a2:92:30:e5:13:bf:36:
                    66:1e:a5:88:1c:57:13:28:c9:7a:b7:97:b0:3b:b2:
                    5a:b0:92:77:10:e1:12:ba:40:e9:76:13:49:7b:52:
                    ff:81:2e:c6:d0:58:e0:ae:4d:0c:e3:f9:a2:6d:f6:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:29:65:F4:59:35:A6:07:4A:EC:1E:95:F5:5B:E9:F0:B2:1C:F8:39
            X509v3 Authority Key Identifier:
                keyid:D0:69:54:CF:51:4E:CA:62:C5:56:89:BD:89:30:B2:92:21:7A:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:79:e6:b3:f4:72:34:dd:5f:d2:47:d7:5c:3c:5a:b1:5a:
         4a:c2:5c:6c:6d:c6:fe:dd:f2:23:ce:e9:da:d1:39:35:78:49:
         48:7c:00:ef:02:93:82:a4:36:33:88:9e:4c:b3:f9:47:37:0a:
         6d:83:0c:27:b7:5c:29:b1:f6:27:0d:53:36:cc:de:dc:79:b5:
         1b:d4:fe:ac:ec:c1:af:85:b1:2d:df:d1:52:3a:42:c9:5e:61:
         e5:f6:b2:05:e3:26:c7:09:de:2b:a4:d5:2e:0d:3e:4a:3e:d0:
         1b:36:87:b1:e3:75:96:a5:df:5c:2e:fe:0f:79:49:59:f9:c3:
         c2:6d:93:2a:23:3c:bc:be:79:85:62:2f:7c:0e:fb:84:33:5c:
         1e:a5:c0:19:66:43:be:6c:7a:43:67:3c:a3:0c:07:f2:7a:b5:
         34:b5:a1:33:69:93:42:d3:51:18:91:63:27:9f:c2:13:77:82:
         34:46:da:93:10:1e:12:84:98:3f:05:91:fd:51:2f:b5:3a:a2:
         9f:9b:e5:10:2c:a8:23:31:9d:af:36:af:f9:ae:5d:c5:11:91:
         b4:f9:28:bc:ba:13:28:63:a9:b1:1e:9f:82:50:d2:f5:5e:51:
         f6:00:12:e0:c6:de:c4:6e:29:19:ff:04:a2:d0:09:c4:10:07:
         d3:53:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:10 2026 by rpki-client