Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File:                     0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier:          vaVfwykxpI/mafr5bCltpd/0Wq8/c7kBOf2ZlReuniA=
Subject key identifier:   B2:D3:6A:B9:EB:11:B7:1B:BE:DE:F3:12:75:EB:75:58:AC:82:8A:C2
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer:       /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial:       019F92ED218DAA4C4F029B873DF0E07044C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number:          07B4
Signing time:             Fri 24 Jul 2026 07:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:41 +0000
Files and hashes:         1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: jrPHrQZpo5NUBAqdbJS9+zsQ0379ob33YfNN9v9NDBo=)
                          2: 1-MrxZrcPXM7BvaVdVabElQiwAhg.roa (hash: 5Yrq+V+8IPQZLxO9mgzwmCCXtczV+ZsgweXRxHjq37Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:21:8d:aa:4c:4f:02:9b:87:3d:f0:e0:70:44:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
        Validity
            Not Before: Jul 24 07:00:41 2026 GMT
            Not After : Jul 25 07:00:41 2026 GMT
        Subject: CN=b2d36ab9eb11b71bbedef31275eb7558ac828ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:16:cc:d0:01:ba:28:e7:8c:10:9f:71:00:
                    62:9a:9c:4a:5c:92:83:66:24:fd:0b:d6:e8:07:c8:
                    82:62:df:75:a6:57:9e:22:7b:80:2f:84:f4:0d:33:
                    75:83:eb:52:5b:fc:2b:76:58:32:25:73:25:2f:80:
                    a2:b1:61:e1:ea:14:43:3a:5a:40:5c:62:d7:80:cc:
                    6e:48:75:66:30:2d:e9:e4:7b:12:2c:0f:40:39:34:
                    38:9b:ff:d8:5c:87:5c:7c:a1:2b:dc:42:d8:cc:e8:
                    f5:46:c5:ae:1f:c6:9d:a4:25:60:9b:af:68:8a:d8:
                    0d:4e:81:ef:5b:98:58:a8:c3:2e:17:21:ef:06:36:
                    2a:be:a5:bd:1a:9b:29:16:18:2b:52:05:f2:25:5e:
                    5a:24:46:84:7a:80:83:8b:15:27:80:37:ab:29:dc:
                    09:80:aa:07:bc:6f:39:ab:4c:48:9a:c4:60:70:02:
                    36:98:45:57:9e:5b:0e:7b:87:1f:e2:1b:2c:83:29:
                    b4:18:d6:7d:a8:96:b0:89:70:9d:06:f9:39:e1:07:
                    e9:f2:f2:96:f2:d9:ce:3c:90:e8:e5:98:bc:3c:e6:
                    e4:e9:02:ef:65:2f:53:14:b2:5a:7b:fb:2f:09:c4:
                    cf:64:d4:41:a8:18:b2:6a:19:24:09:bb:71:27:ab:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:6A:B9:EB:11:B7:1B:BE:DE:F3:12:75:EB:75:58:AC:82:8A:C2
            X509v3 Authority Key Identifier:
                keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:73:ea:bd:87:a9:17:ef:e6:ec:3d:e1:69:9e:3b:16:73:
         e9:e9:8e:5c:97:16:3b:f9:35:72:60:78:93:5d:39:03:d4:f6:
         63:14:29:8a:fb:4a:9f:97:12:b3:4b:b2:1a:e0:41:66:7a:35:
         8a:11:5b:2d:b9:4e:e8:42:cf:fa:b2:e4:c1:fb:f5:53:0f:d2:
         7e:40:dd:6b:08:32:f7:81:15:66:07:b5:f4:17:91:93:e2:7d:
         09:02:fc:b4:24:ac:4f:b6:43:cf:f6:23:9e:b2:70:a5:b5:7c:
         de:20:f9:78:a0:d1:fa:0c:20:38:86:4f:0a:ac:97:53:42:d8:
         4c:d1:16:6f:9a:d7:9f:3a:92:f4:5f:2d:c9:95:b4:89:fb:8b:
         1b:5d:41:ec:21:f1:09:e5:8b:c7:f0:64:78:16:d9:03:fc:23:
         b9:5d:cb:ba:83:14:75:c7:bd:e4:f0:99:7f:d9:3a:40:ad:75:
         29:2f:3b:d4:a9:98:81:da:17:39:75:c6:99:d0:ae:7e:ed:90:
         4f:6f:b8:f3:e4:ee:29:19:a8:d1:65:80:f0:9d:d2:c3:0b:c9:
         85:f6:c8:1c:8f:09:52:ea:07:96:66:c0:c9:e6:36:39:e4:3f:
         e8:98:eb:c1:3e:4a:36:bb:b2:94:fe:55:1e:c3:f5:34:af:7a:
         e6:1c:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:48 2026 by rpki-client