Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
File:                     moidBLkf1wkovxGCfAlEQhytSjQ.mft (raw, json)
Hash identifier:          BxlPCINgWeoBNPSZPYjUWZoJbzuIlYW4coY5y5Mnsps=
Subject key identifier:   CD:73:64:3E:D2:17:BC:43:C9:F7:E2:5C:FA:81:6D:DC:EA:8C:FE:FB
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Certificate issuer:       /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial:       019F92112589A7D9886B530CB7E1C485322A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
Manifest number:          11
Signing time:             Fri 24 Jul 2026 03:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:24 +0000
Files and hashes:         1: moidBLkf1wkovxGCfAlEQhytSjQ.crl (hash: r8MB59xnOkOjT6chB8cOna1Py9yf9aFrdyJmMk7c/9E=)
                          2: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (hash: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:25:89:a7:d9:88:6b:53:0c:b7:e1:c4:85:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
        Validity
            Not Before: Jul 24 03:00:24 2026 GMT
            Not After : Jul 25 03:00:24 2026 GMT
        Subject: CN=cd73643ed217bc43c9f7e25cfa816ddcea8cfefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:64:e5:4c:a6:62:dd:52:5b:87:88:55:b9:
                    9e:ad:05:80:d3:a5:ad:c6:22:65:29:5f:41:bb:e9:
                    2b:46:d8:41:1e:39:76:8c:45:6f:19:27:00:b3:60:
                    68:db:00:cf:45:45:aa:e5:20:68:6e:0f:03:af:4a:
                    6f:f8:eb:41:de:3f:62:29:1f:05:d7:3f:0a:a1:65:
                    f9:f4:13:f0:ae:8c:72:0e:85:cf:b3:7c:d0:6c:42:
                    26:2b:62:e3:6e:a0:ca:1d:50:f5:5e:c4:52:0c:55:
                    85:d7:02:3e:a0:17:95:f0:65:11:de:ac:9f:eb:53:
                    03:66:02:36:fc:57:96:95:ca:86:e5:af:2f:0a:ae:
                    1e:38:72:b1:ea:e9:86:b8:ad:d3:ff:e2:1f:91:13:
                    a3:59:4b:04:45:37:43:5b:15:ec:48:42:19:ff:fa:
                    d0:a0:1b:41:33:60:5c:b5:3b:0b:d7:84:74:50:f7:
                    73:8d:6d:46:19:7b:79:01:2b:9a:aa:d6:2c:12:4e:
                    c9:46:23:35:06:f1:68:e1:65:ae:34:9a:ac:50:fb:
                    94:83:a9:ea:23:2f:bf:41:d3:7f:2c:3f:e7:eb:94:
                    90:e0:ce:d0:29:82:c0:60:a8:c6:de:c0:49:02:1f:
                    c7:4e:68:fa:f3:53:5c:8e:72:04:27:a8:42:4b:21:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:73:64:3E:D2:17:BC:43:C9:F7:E2:5C:FA:81:6D:DC:EA:8C:FE:FB
            X509v3 Authority Key Identifier:
                keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:31:9f:f6:50:da:54:96:4d:85:db:a2:c2:97:44:95:9d:fe:
         9b:31:af:17:34:c6:d9:e3:f2:8c:a2:e3:26:ea:30:12:2e:da:
         39:a1:68:0f:bd:ae:bc:56:96:e9:97:c9:84:ae:e2:e5:ea:68:
         57:0b:a2:aa:44:85:57:33:3d:45:70:e3:13:f7:c2:11:3e:ed:
         e2:5b:87:91:ef:e0:76:f9:98:5a:58:4d:d5:8c:73:bc:f1:7f:
         2d:82:50:30:a3:b8:89:23:e8:2e:77:67:65:86:e4:f8:69:5d:
         cd:2c:68:72:cf:c2:59:42:ae:4d:f5:00:28:a5:be:60:82:7b:
         65:a5:db:fd:39:7c:7b:85:17:d9:15:76:a3:9b:44:6d:3c:65:
         ba:16:87:48:9d:de:c5:66:34:44:67:45:ff:7b:29:9a:ad:bc:
         bd:9a:f6:6d:fc:f8:03:ca:37:b0:e0:03:df:78:a0:b8:ad:4d:
         b8:8c:b3:52:c8:19:94:4b:31:c6:75:5d:1b:37:a3:4d:95:13:
         0d:f0:89:2e:b0:76:5f:fb:a2:d1:4a:2c:7e:2c:16:47:d8:0d:
         d0:70:75:db:17:e5:43:7e:b1:4e:4c:c5:c0:01:2c:82:b4:90:
         f3:37:62:11:c5:5f:aa:c3:ed:e3:2c:b1:06:e0:cf:11:ff:4a:
         ca:ce:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:17 2026 by rpki-client