Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          6oghQq49Hdeg8Z/DDR6a3YqEof4sMSfmzzBwE/PtuuM=
Subject key identifier:   0F:C5:25:75:17:9F:A1:5A:A9:68:54:D0:3A:BD:1A:33:45:C0:D7:6B
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       019F9211114230F14CF1CA42574F71C2DFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          0B61
Signing time:             Fri 24 Jul 2026 03:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:19 +0000
Files and hashes:         1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
                          2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: NxinCVwh/LGlzGKXhVtv8fK8MLAQ2iF/HOdBTqEUI6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:11:42:30:f1:4c:f1:ca:42:57:4f:71:c2:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Jul 24 03:00:19 2026 GMT
            Not After : Jul 25 03:00:19 2026 GMT
        Subject: CN=0fc52575179fa15aa96854d03abd1a3345c0d76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:5f:5f:93:97:bc:ff:5e:15:dd:ab:96:71:
                    14:91:a2:52:02:ed:4b:eb:df:e1:dc:8b:38:d1:25:
                    91:63:76:9a:f8:96:63:2f:87:d6:5b:51:a4:fb:57:
                    21:85:aa:f3:92:d0:35:ff:3b:09:e8:03:1f:41:a5:
                    9b:78:9a:6f:2c:8c:bc:84:df:7b:b0:bc:b3:76:1b:
                    76:26:4e:3f:cb:3e:5a:52:58:da:01:29:17:e2:c8:
                    91:1b:8c:b7:17:dd:3c:5c:cf:73:6e:72:e7:6e:5c:
                    f2:75:5a:67:96:ac:e8:83:f3:6d:ac:eb:5b:77:04:
                    24:22:7f:9f:f6:03:ad:24:f1:01:d2:31:24:ad:21:
                    7f:49:d2:4c:db:8e:01:5e:3a:13:8d:fd:a3:17:c0:
                    30:dc:eb:7e:a0:45:4e:8d:30:44:3a:d3:c6:8a:f9:
                    82:06:6e:e7:dc:90:f2:5f:83:07:17:e2:73:20:39:
                    b3:2a:db:69:b3:f5:50:ff:3d:f3:d1:49:bf:0b:ca:
                    c3:8c:be:2d:e2:12:ec:82:2b:35:c4:06:09:ee:3b:
                    da:e1:a2:75:af:3c:ce:01:9f:bd:71:8d:c3:06:64:
                    81:1a:96:2e:1a:f7:65:c4:18:37:18:07:90:4c:79:
                    bb:6b:ef:ac:a5:62:49:a4:ed:68:10:23:7e:db:88:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C5:25:75:17:9F:A1:5A:A9:68:54:D0:3A:BD:1A:33:45:C0:D7:6B
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:62:cf:c5:1e:51:f6:14:a5:20:c4:e9:03:fa:c1:e5:35:30:
         b2:1b:39:a7:ac:0b:62:2e:a8:cb:a8:96:e5:52:fe:35:54:e1:
         d6:eb:ae:9c:d5:bf:95:dc:aa:b8:d8:cd:92:20:01:2b:9d:29:
         ac:6c:d5:e0:a8:d2:95:83:38:ec:d2:81:42:c0:ca:a6:a2:7a:
         15:43:02:43:e8:2e:ba:a5:33:4d:c1:ca:67:ad:7c:e5:57:67:
         37:ed:8d:3a:0a:88:f4:6c:2a:14:1f:55:51:1f:30:e1:d0:b0:
         7f:b6:60:84:86:29:dd:e8:31:57:4c:d1:e9:90:34:94:f4:ba:
         44:c6:34:9a:5a:cd:39:e2:4e:27:66:2a:eb:16:31:73:37:67:
         34:7d:ce:1d:43:f2:49:a6:6e:8b:86:d9:be:8e:19:30:b2:bc:
         18:10:f9:40:e3:95:6b:3c:0f:35:a8:6b:20:9b:88:84:c2:a0:
         06:88:3e:61:1a:c0:8e:bc:cf:5f:20:f0:8a:ab:a1:95:0a:23:
         6c:ab:e3:dc:e4:da:86:90:ea:82:c6:3e:76:ea:ec:ef:a0:de:
         85:56:46:64:b0:bf:7b:a2:27:59:7d:c0:cb:ff:4a:66:f5:c3:
         62:b0:ac:78:19:4f:3c:b2:6e:bb:ca:3b:96:c7:04:b1:73:ff:
         d9:7d:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:12 2026 by rpki-client