Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          jxpLJrWQ+DJwiaA/djb1whW0qKJukQIuB6hJArP5vzc=
Subject key identifier:   EE:C7:F9:B2:06:CB:C0:94:1F:43:C3:51:85:E8:ED:0F:F9:52:1F:A4
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       019F913574ACDA7ED43082640F8EF0549B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          070E
Signing time:             Thu 23 Jul 2026 23:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:27 +0000
Files and hashes:         1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: G2XkWRcujzTttNYr4eDQqyYKMCh1PpbPystDIEOWepg=)
                          2: iz9gbVygmSBHL3t3PdATnT2zJmk.roa (hash: mrKo3a/hS44Co32MTqj4k1lL3E23S3iMQm9u18Qtexo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:74:ac:da:7e:d4:30:82:64:0f:8e:f0:54:9b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Jul 23 23:00:27 2026 GMT
            Not After : Jul 24 23:00:27 2026 GMT
        Subject: CN=eec7f9b206cbc0941f43c35185e8ed0ff9521fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:76:de:05:d8:94:d7:b8:4f:6d:d6:2c:6c:
                    93:b7:67:de:be:5c:48:a0:7f:6e:b3:35:4c:26:38:
                    5e:2b:bd:15:2a:96:7f:63:70:b8:9f:97:60:a5:db:
                    ce:55:56:23:d2:f4:39:80:e6:1b:75:6a:56:fe:ae:
                    73:11:08:26:ca:52:95:c6:a4:61:58:23:c0:68:44:
                    96:0c:0d:68:e9:b6:11:bc:89:a2:d4:57:83:37:d2:
                    0c:95:e9:17:2f:59:fd:45:bb:7e:26:0f:64:48:30:
                    05:bf:81:9a:12:21:25:72:42:e2:11:23:5f:22:5d:
                    dd:34:44:53:a0:b3:74:35:18:d4:fe:01:e6:4a:d2:
                    4e:f1:e4:27:b4:e6:8b:7d:f5:e8:c7:d1:cd:ee:86:
                    ad:b4:d2:db:59:87:78:18:82:5c:b2:56:a3:84:36:
                    cc:bb:a6:27:62:d0:d5:b5:c1:ab:df:d0:59:0d:cd:
                    b4:3e:c5:0f:f4:eb:17:91:89:d6:64:73:0f:44:48:
                    06:6c:b2:91:89:d6:ab:de:73:b4:60:3d:82:38:d7:
                    ef:ca:de:3b:3a:91:21:82:a8:47:10:c6:6f:98:3b:
                    74:95:c8:39:a9:f6:5f:d3:82:af:5a:0a:f7:af:72:
                    6a:4a:05:e9:e7:f0:44:10:ee:46:e9:bb:54:1a:15:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:F9:B2:06:CB:C0:94:1F:43:C3:51:85:E8:ED:0F:F9:52:1F:A4
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:26:94:ae:e0:9b:dc:19:2a:31:1f:1e:b5:75:55:6e:d5:
         da:41:70:26:59:35:5f:e8:88:cc:0e:d7:fd:26:b1:40:7d:f9:
         93:f6:c8:08:2e:f9:2b:ad:f5:ff:c6:d5:f5:15:4b:e2:ab:0d:
         e0:67:bb:3e:c4:13:ee:3b:8a:23:e6:7a:38:20:c5:3f:35:2c:
         85:90:1d:16:59:00:89:8f:a5:c3:d1:7e:d2:97:26:12:48:c1:
         e9:fe:ae:87:5c:bb:b0:d6:3d:a4:8c:6b:fb:a0:6e:7a:b0:80:
         82:11:d7:69:84:ba:25:6c:8a:66:96:eb:df:f1:fb:2a:47:fa:
         02:7e:e4:13:68:b8:27:b7:27:e7:29:3d:21:d1:7b:6c:d7:5e:
         32:a0:68:05:96:54:78:16:40:ef:6d:61:97:26:f8:be:9f:0d:
         cb:bd:68:44:c6:7d:a3:18:a4:35:4f:33:bb:50:f8:0f:03:88:
         46:35:89:6c:e0:0c:71:83:af:5f:2d:03:f6:71:de:97:e1:b4:
         40:09:62:b0:7c:d9:86:8e:78:43:bf:22:78:f4:cc:e3:0f:f2:
         a1:99:72:a7:21:43:9d:cb:ae:dd:47:9e:e0:70:42:29:b9:76:
         46:fb:95:f4:0e:8f:00:5d:32:05:79:e9:f6:dd:52:5b:3d:7b:
         f6:f3:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:41:43 2026 by rpki-client