Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File:                     B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier:          SkMcoz443q4UPutzZcEj4TrVNg6QHQTHEpIyRYudzbg=
Subject key identifier:   F9:97:C4:2F:47:70:17:2A:9D:BC:3F:A3:36:3D:AD:B1:4A:38:10:33
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer:       /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial:       019F90599DB86FE9A04F45D17DE06552F488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number:          0A9D
Signing time:             Thu 23 Jul 2026 19:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:19 +0000
Files and hashes:         1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
                          2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: 6WmZLdKg6C/eN2aUxpOu1bKdFNe13pjCebM1yqhcj4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:9d:b8:6f:e9:a0:4f:45:d1:7d:e0:65:52:f4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
        Validity
            Not Before: Jul 23 19:00:19 2026 GMT
            Not After : Jul 24 19:00:19 2026 GMT
        Subject: CN=f997c42f4770172a9dbc3fa3363dadb14a381033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:41:24:28:4d:dc:68:d2:55:2f:8c:2c:01:
                    5d:bb:c6:7b:4d:66:77:91:bf:8a:30:0b:38:f9:25:
                    c4:8a:cb:e8:02:a5:52:0b:92:83:c2:83:8a:62:6a:
                    43:d9:17:92:2b:c9:a7:6c:b1:e0:ea:9a:80:48:1f:
                    1b:67:cf:fc:77:79:fe:dc:be:ec:d9:54:58:1b:9f:
                    a3:48:b6:bd:31:90:46:a8:66:91:47:2f:1f:83:f5:
                    fa:92:c3:98:6e:4b:64:bf:0b:3a:4a:52:47:d8:4c:
                    1c:4a:fc:bf:f9:97:ad:7d:8b:1f:22:45:e7:5e:65:
                    77:e8:62:e6:1c:83:97:01:83:e8:5c:7b:27:a5:3c:
                    be:d2:b3:f5:cd:39:af:c3:0c:8d:ba:bc:48:ef:b4:
                    84:45:4c:58:17:8e:24:96:31:f2:e1:fc:f4:09:c6:
                    0e:30:fe:ff:63:16:b1:33:22:89:78:b7:74:0d:9d:
                    f8:e3:a5:f6:3a:8b:3b:05:1e:86:43:ea:24:6e:92:
                    07:9c:15:4e:a7:48:e0:3d:a9:b5:3b:49:a0:99:08:
                    c2:47:e2:c2:08:8d:83:ef:85:78:55:4d:cd:10:21:
                    85:60:12:27:39:3f:70:6a:af:1a:a1:0f:25:3c:18:
                    36:46:2e:da:97:a0:40:f5:3c:ed:fd:ed:7b:7b:19:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:C4:2F:47:70:17:2A:9D:BC:3F:A3:36:3D:AD:B1:4A:38:10:33
            X509v3 Authority Key Identifier:
                keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:f5:b9:8e:0f:c5:fb:32:3b:54:c1:2d:71:cc:86:a5:50:
         aa:b5:b6:ce:75:54:d2:9b:ff:ac:7e:d9:5b:e5:7e:02:4b:6e:
         82:c7:ea:4a:1b:d2:c3:16:63:60:a7:22:2a:c1:52:b8:17:6b:
         69:22:8d:16:90:17:02:88:be:33:e6:1c:fe:27:78:5e:e8:70:
         92:04:28:f6:56:d3:5e:70:40:7d:18:b4:9f:c9:7b:f5:0a:7a:
         4e:8a:7e:95:d4:2b:cc:9b:33:80:da:90:14:56:f0:3e:35:0b:
         16:fd:10:35:1b:18:6b:58:72:5f:11:de:5e:5e:2d:76:a2:35:
         82:14:b2:fe:f4:4c:fd:d1:e8:d1:91:d4:06:9d:e2:30:f1:47:
         a7:ae:b4:96:b4:fc:8c:3c:70:96:14:79:dc:0e:60:ce:69:6a:
         c7:ff:7f:8b:5d:22:29:b5:bb:d0:fc:f9:bb:bd:3f:8d:8e:7a:
         8f:f1:6b:d3:07:1c:a3:34:3f:73:e8:67:c4:92:5e:5f:78:5c:
         c4:ed:bc:d6:6f:7f:3f:d1:b8:d5:3a:41:87:38:4d:4a:8c:83:
         eb:09:b4:42:cb:08:83:bc:bc:ac:04:bb:20:0e:ff:46:f6:78:
         c9:ac:bf:8b:da:e9:44:83:92:67:1d:38:92:31:b9:51:5f:f5:
         49:55:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:22 2026 by rpki-client