Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File:                     0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier:          6l6bWyPjoXewvGvcnodRXaMOl1DGFXcfsw7rYItih18=
Subject key identifier:   96:FD:5C:DF:2A:63:CA:31:36:A0:23:28:CF:2E:A2:A4:C7:13:4C:D9
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019F8E6B9B9C8CFD32636EB732719D02FE61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number:          0240
Signing time:             Thu 23 Jul 2026 10:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:44 +0000
Files and hashes:         1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: FE8AjF/ueH4RyVJeciXyUcgdPDWwKf3xP/XHiUW/dJA=)
                          2: s1Jjt-tBcyKiknkMR9c7tqEPn8Q.asa (hash: /XbNiEDTN73gQoBflBgmdW5BP0chC8iUmBm5htzhbzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:9b:9c:8c:fd:32:63:6e:b7:32:71:9d:02:fe:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Jul 23 10:00:44 2026 GMT
            Not After : Jul 24 10:00:44 2026 GMT
        Subject: CN=96fd5cdf2a63ca3136a02328cf2ea2a4c7134cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:83:4d:37:4b:85:d5:21:44:75:69:ac:9c:
                    34:bb:c6:c2:b4:4c:38:ce:52:5d:e0:5a:00:74:3c:
                    8b:a5:98:8b:c0:b3:66:e5:84:32:fb:49:cb:16:b3:
                    23:7c:38:d1:de:6b:42:6d:3d:51:3f:da:ce:58:92:
                    1c:c5:10:d6:b7:fc:fa:32:e0:51:68:1e:bd:7a:97:
                    29:a1:04:14:53:8e:2e:d9:80:d4:d2:b7:51:e5:2d:
                    0e:9f:63:2b:7a:23:bb:0e:d5:78:ec:f4:9c:d9:a9:
                    82:d4:f6:4c:5e:90:cd:de:90:d5:af:b1:47:db:3f:
                    80:50:76:af:af:8a:50:b8:aa:6a:6b:db:c7:0d:02:
                    25:31:43:1f:2d:ae:0e:6e:a5:b0:3f:18:bf:07:a9:
                    7d:bf:c8:36:aa:14:31:db:a3:90:3a:1e:5e:2b:21:
                    78:1e:af:de:ca:49:e3:46:b0:53:6c:03:c6:f7:f8:
                    d4:3b:37:aa:9e:85:63:e7:c0:73:01:f4:7c:be:fb:
                    66:f4:e0:3a:2b:de:3b:b8:98:ec:09:e0:8d:9d:a5:
                    c3:ca:3f:76:cb:53:9c:20:6b:74:0f:73:0c:b1:c0:
                    17:a4:86:31:7b:0a:8d:60:d1:82:96:ea:fc:ba:9d:
                    4c:8f:e6:b1:92:6d:fc:3c:f0:d5:e8:a5:a4:78:23:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FD:5C:DF:2A:63:CA:31:36:A0:23:28:CF:2E:A2:A4:C7:13:4C:D9
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:8c:f0:49:5a:aa:9c:da:14:8b:73:d5:5d:02:dc:89:f4:
         70:e6:b7:cb:5a:17:4c:4c:3b:69:29:ea:16:07:66:45:5b:60:
         f1:be:65:aa:24:65:0f:d0:f1:4e:cc:7f:2c:f1:93:2a:8d:e6:
         47:02:fc:94:31:70:21:8a:60:ce:73:96:0d:6d:32:0b:f6:47:
         da:ee:e8:a5:98:22:0d:e4:4e:a2:4d:63:cf:de:01:4c:15:cb:
         60:db:00:33:1a:12:fb:ab:af:1f:5e:0d:e4:64:84:cb:ac:5b:
         85:2a:92:33:61:b0:8c:f0:00:2f:00:ea:20:5a:25:7e:b8:c4:
         a4:94:4c:74:7b:16:f5:63:c1:4c:71:d5:04:16:1e:f1:07:34:
         ad:2d:51:56:aa:5b:c0:cb:ef:57:57:41:29:4d:fc:b2:dd:80:
         4c:c7:a5:7d:83:11:5a:03:3c:8d:29:73:36:3c:b8:64:3c:c2:
         be:20:dc:e3:12:5f:f5:b8:32:73:9a:43:3f:aa:52:24:cd:f4:
         a2:8b:40:8c:75:6b:10:a5:13:1a:a2:16:39:de:58:81:6c:c5:
         78:a0:be:98:e2:db:79:c9:62:72:05:a3:b1:dc:5d:cc:37:32:
         ee:4b:46:a1:8b:c4:00:21:5d:bb:b3:80:75:88:01:ad:50:70:
         fa:6b:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:28 2026 by rpki-client