Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File:                     mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier:          pfMsLw8ZX22Oa7JU2aKU764NYv6edx8pGwjdxu21EFc=
Subject key identifier:   BF:40:79:57:26:84:EC:57:58:C4:05:75:2E:D7:AD:5A:81:A7:22:E5
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer:       /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial:       019F94A46A0562C800B5E9841247E9CFE33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number:          0924
Signing time:             Fri 24 Jul 2026 15:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:30 +0000
Files and hashes:         1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: xvgodzVDi0KyEKQhWhylfriwKE/k40jgNtGyLh94sUw=)
                          2: qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa (hash: sAeYUG9d4ti78IMqnSOELZESU1YQF01cfT/pGko2jnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:6a:05:62:c8:00:b5:e9:84:12:47:e9:cf:e3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
        Validity
            Not Before: Jul 24 15:00:30 2026 GMT
            Not After : Jul 25 15:00:30 2026 GMT
        Subject: CN=bf4079572684ec5758c405752ed7ad5a81a722e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:81:56:2c:ef:40:eb:8e:c4:4d:84:44:26:
                    01:ef:1b:a5:72:a1:3e:4d:8d:2d:8d:52:f5:2f:7c:
                    75:14:8a:a7:55:7b:0d:b2:a3:89:bc:e2:ff:47:cb:
                    a9:25:d1:44:71:30:32:da:5c:29:24:39:94:7d:b8:
                    3d:b0:9f:0c:ef:59:a1:7b:64:9c:6f:68:ad:ff:ea:
                    4d:0c:35:a5:4a:73:81:a7:8d:da:2b:fa:ad:bf:d6:
                    d0:bd:44:c5:7b:6b:ac:ae:2f:99:37:c9:29:0a:a0:
                    6a:6b:b1:a0:43:66:67:db:3c:48:78:56:d6:50:84:
                    95:51:a2:db:05:28:fe:a5:e8:9a:05:0f:0b:7b:0e:
                    d3:42:80:3a:9a:31:ba:80:01:f1:4a:3b:2d:45:9b:
                    64:75:b4:60:d3:65:85:9a:f7:66:c0:4a:3d:1f:56:
                    49:b4:56:44:3c:e6:87:cd:84:23:4b:c3:db:c9:da:
                    4e:f6:57:19:f1:3c:e1:42:39:65:7b:53:67:72:b5:
                    37:74:11:b5:c2:50:62:40:58:a0:d9:19:ee:20:09:
                    40:ba:da:4f:e4:f6:a1:cc:b9:f8:67:8c:b5:de:70:
                    ce:2c:de:11:17:45:9d:fb:9c:b9:52:43:3c:e1:c8:
                    c4:8d:a9:2d:08:98:34:0e:75:78:ec:17:1c:de:cd:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:79:57:26:84:EC:57:58:C4:05:75:2E:D7:AD:5A:81:A7:22:E5
            X509v3 Authority Key Identifier:
                keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:17:1b:fe:57:31:16:33:51:a5:47:dd:db:18:66:f0:bb:
         95:64:31:4c:c3:69:ff:de:42:ec:bc:a6:df:b3:0a:51:c8:b0:
         40:2c:82:f5:07:48:89:a4:90:aa:cf:d9:9a:65:e6:e6:e3:84:
         e4:cb:33:6b:fb:f1:84:e8:ee:db:6a:c7:dc:48:00:0c:c6:f4:
         d9:e2:46:81:45:47:af:6a:21:69:1d:25:4f:4c:b7:86:b9:14:
         d0:0b:40:e6:14:0c:69:20:49:15:93:bb:67:1e:e0:42:a1:e0:
         ea:8b:7f:37:3c:e7:f4:10:a7:2f:cc:c4:d5:f8:93:fa:73:0d:
         ff:1a:57:b8:b8:9c:74:13:bd:5b:d6:df:b7:aa:10:08:54:56:
         1b:79:62:33:e8:3e:c3:64:c0:eb:fa:1d:d6:ff:15:a6:b3:79:
         75:c7:b1:37:9b:49:ae:d7:5e:20:d3:24:19:00:11:32:45:17:
         8c:21:72:11:6d:4e:6b:37:73:cf:2a:35:c3:36:80:ed:13:be:
         1a:79:84:af:d4:f6:97:04:ba:91:3e:b1:cd:92:6f:48:17:63:
         74:74:47:44:59:8f:1d:cf:90:cc:56:8d:d2:4f:4f:22:53:a7:
         6c:cb:a7:fb:e4:38:89:bd:21:75:26:46:a8:34:9a:e3:fb:66:
         4c:aa:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:16 2026 by rpki-client