Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File:                     phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier:          5LUJNXt+5OD4xasLioY67wLx1py1xMULI2TvdzJsVlg=
Subject key identifier:   83:88:F8:25:03:CB:4E:5E:3F:36:33:F2:62:86:A3:FA:BE:CF:FF:09
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer:       /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial:       019F91DA2236045F595477BE37D1530E85E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number:          16E9
Signing time:             Fri 24 Jul 2026 02:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:19 +0000
Files and hashes:         1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=)
                          2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: NJgWixGwrDSxu0r/SiZAIg/AJPmywoWIT8DVR646jWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:22:36:04:5f:59:54:77:be:37:d1:53:0e:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
        Validity
            Not Before: Jul 24 02:00:19 2026 GMT
            Not After : Jul 25 02:00:19 2026 GMT
        Subject: CN=8388f82503cb4e5e3f3633f26286a3fabecfff09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:e8:82:f2:d4:a2:8f:6f:ab:e6:24:87:00:
                    3e:23:01:f4:87:73:b2:bd:4a:45:c7:bc:3f:d1:4d:
                    a8:a6:9a:18:ed:53:d6:04:65:9f:2b:f3:af:80:fb:
                    0d:52:8e:cd:d0:c1:03:dd:bb:a2:a2:82:21:f4:c4:
                    82:0f:ca:70:84:57:c6:e2:87:58:87:58:3f:d3:af:
                    87:d1:76:47:6a:6f:80:45:56:fd:97:e1:f3:a3:27:
                    0d:bb:0f:2e:04:64:e3:36:3a:bf:1c:6d:2e:6b:5c:
                    8b:3e:d8:0f:b8:6b:72:e1:51:82:5b:10:d7:6f:fe:
                    96:ac:f7:d6:8a:b7:e7:00:32:cb:6e:d8:2e:4a:26:
                    94:64:bb:3e:ad:30:4b:24:4b:90:1c:ac:92:c4:dd:
                    0c:9f:e2:e7:c7:7d:96:ad:0a:df:48:e0:38:4e:dd:
                    88:cd:27:e5:45:a4:73:fd:b3:bd:32:79:50:23:0b:
                    af:46:d1:10:70:d1:e3:81:f8:6b:5f:f5:fa:f2:6d:
                    d8:b0:00:f7:f9:cc:15:ed:5d:39:6a:6e:a4:cb:2d:
                    5f:3e:26:4f:ed:7d:ab:92:54:49:c3:6e:34:d5:95:
                    a0:ee:50:df:f8:ec:93:bc:c6:8f:32:ac:8c:f5:53:
                    3f:d6:6d:09:71:39:1d:2b:27:2a:6c:d2:d5:6d:2c:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:F8:25:03:CB:4E:5E:3F:36:33:F2:62:86:A3:FA:BE:CF:FF:09
            X509v3 Authority Key Identifier:
                keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c9:12:1e:c8:71:d9:d2:ab:6f:c1:d6:65:1b:ce:ab:73:a9:
         42:83:81:03:7c:fc:1d:1c:7e:2e:3d:ff:6a:6d:e8:84:66:43:
         d0:4e:8a:4b:e4:37:3f:57:b9:c1:f5:50:25:89:4c:b5:ab:ba:
         27:55:b0:ac:5c:f9:e7:88:ee:66:9a:32:bd:70:c3:0d:ca:78:
         96:a3:83:bc:b9:75:00:94:0a:10:54:f5:24:06:55:fc:9a:8f:
         8c:f8:7f:e1:20:68:21:d8:0a:db:94:6a:bc:b3:e2:67:69:5d:
         d2:90:da:2a:61:f2:0b:ee:fa:61:f6:97:74:e2:33:e9:df:b2:
         87:74:34:4b:ca:fc:c6:8b:bc:df:ac:69:8d:ad:d9:c9:56:db:
         f8:c9:36:e0:47:68:80:56:05:8f:dd:70:96:ee:1d:dc:ce:24:
         e9:71:59:86:6a:f7:13:7c:32:25:9c:84:b4:a8:58:0c:0d:c0:
         0d:9c:fd:dd:19:26:85:03:1a:a6:6f:28:90:4a:4d:6c:e7:68:
         9f:d2:f4:77:a6:a2:a0:a5:95:37:63:24:e3:af:52:e7:f1:27:
         1c:7d:c3:ac:6a:bc:c4:c9:29:9a:07:76:46:5f:fc:7d:c0:c3:
         92:52:c6:7e:db:26:ce:b9:c1:f9:3e:4d:d0:63:c3:c9:6d:38:
         3e:9d:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:21 2026 by rpki-client