Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File:                     itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier:          YAaCRBVNAdKDO6HcbIK+nfC84XWBSW0pctIlC0rkdy8=
Subject key identifier:   55:1C:2A:82:EE:9E:BE:DD:3B:2C:3A:77:1F:B2:3C:F6:2E:CF:BA:C2
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       019F9211AE945E1A0B476909557F5184C9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number:          0F61
Signing time:             Fri 24 Jul 2026 03:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:00 +0000
Files and hashes:         1: 7hmJknF3g0jZ2PzjgnEt6tkUwkk.roa (hash: 0kxSwLIeU1LRwwQYmR17mV6US+bp2NYwjzNIshTtU+0=)
                          2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: SJfd65FFLYbJUO8DgN7jcIlZaS8w+3SfADzV5jpSu0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:ae:94:5e:1a:0b:47:69:09:55:7f:51:84:c9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: Jul 24 03:01:00 2026 GMT
            Not After : Jul 25 03:01:00 2026 GMT
        Subject: CN=551c2a82ee9ebedd3b2c3a771fb23cf62ecfbac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:21:c5:bd:0d:93:3b:17:69:48:df:da:f9:
                    bd:7a:ee:c2:94:a3:90:38:42:9f:43:6e:c9:01:fa:
                    b2:7d:b1:76:72:d6:97:27:c1:65:1c:5c:ed:fd:fb:
                    40:07:c0:d2:3a:48:9e:9f:4d:ac:d1:a0:b5:a5:db:
                    c9:22:a2:7e:83:8a:66:ee:a1:8d:6a:79:8f:d4:48:
                    dc:69:47:a8:b4:d5:20:4d:90:5f:bb:07:f7:a7:71:
                    b2:54:60:12:35:12:75:25:6b:21:86:b2:cc:3d:d6:
                    d8:c6:5d:b4:c4:f1:81:ab:51:49:70:f9:e8:96:ec:
                    dc:25:1f:e6:14:46:12:eb:be:07:0c:68:18:fd:0c:
                    d3:1d:37:e3:a4:24:6e:48:d0:af:b0:86:17:71:d0:
                    12:26:73:60:8f:ba:32:34:44:e5:1a:fb:da:62:67:
                    05:43:40:bf:f1:d9:8e:ad:36:87:75:c3:9b:f1:b9:
                    fa:05:3f:dc:4a:0f:e6:ca:90:46:a4:6d:8e:71:01:
                    9a:cb:b0:45:7d:0f:b5:02:cb:71:8f:ea:c1:57:56:
                    2c:6d:d4:df:e9:7e:cc:b8:81:e1:a1:a7:ee:3e:a3:
                    fd:84:0a:c9:24:47:2f:2a:c8:90:86:26:ca:2c:c2:
                    b0:6c:44:e1:51:8f:17:5c:e5:cd:5b:9c:e6:f4:10:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1C:2A:82:EE:9E:BE:DD:3B:2C:3A:77:1F:B2:3C:F6:2E:CF:BA:C2
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:f4:e0:86:a9:64:d8:bb:34:19:c6:55:49:da:09:3a:60:
         29:36:3e:ee:a3:8a:92:bc:f4:49:4d:4a:a2:81:ed:ea:ea:88:
         4a:e5:1b:d1:1d:41:5a:21:00:6c:0e:f3:74:47:01:2c:0a:9a:
         a3:ea:0b:26:c7:87:7c:cd:c3:cf:15:08:ae:1b:bd:e4:a8:6a:
         5b:eb:12:eb:a2:59:01:cc:ee:55:54:da:3c:da:17:8e:e0:09:
         af:cd:5c:bc:81:fe:cc:8a:04:9d:85:c0:ab:06:0c:0d:5b:36:
         55:f4:31:6e:ce:98:26:6d:e4:d9:36:e5:11:8f:d3:01:35:0f:
         6b:91:cc:34:ab:06:f2:80:44:46:9e:b6:93:70:ff:86:77:ce:
         0d:1d:0d:a3:22:ee:41:30:9e:8d:85:3a:8a:d3:a4:3d:42:a4:
         65:b4:35:8d:ee:49:fe:23:aa:b7:ac:2c:80:00:fd:18:fc:52:
         cd:8e:d9:e7:93:e0:50:a5:3d:3f:28:88:b0:c2:3f:34:b2:18:
         21:72:7e:6f:10:eb:16:de:ba:e9:51:ff:ec:95:b6:fc:8f:ad:
         68:62:2b:a8:c2:f4:ae:0d:0a:8b:22:cd:90:85:d2:89:78:73:
         04:6a:a1:07:ab:f9:ab:d2:b2:d4:16:da:a9:db:fd:70:d2:99:
         11:5b:f7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:51 2026 by rpki-client