Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
File:                     s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json)
Hash identifier:          WYwS7uafuvihzxeLOFrZ3ypLJtkJD0DR7R3y3ozxVPg=
Subject key identifier:   C3:EE:D0:CC:14:AE:48:27:C1:FA:41:3F:9A:70:6F:26:41:7B:D5:52
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       019F92B60DA510254B8E526CCBB7802E2439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
Manifest number:          0CF0
Signing time:             Fri 24 Jul 2026 06:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:32 +0000
Files and hashes:         1: 6aTD1Diwy8BcVWDzJkFw59razas.roa (hash: x3rYw4DajkMDPWuTUBdkKJsPp8gMyPGdL85l8NrV1aI=)
                          2: A1MMmWpH1VcYaybeWVSpVP6t7zs.roa (hash: Jqv27h44k1NlIuCAhloJ5ggU5GRAPiARm4tystIe7FE=)
                          3: PoWJwB4rE5cT6-qKpPWoYwi3IiA.roa (hash: 1d979g1nxx2UUTWihXQHx7OPtde4Z16FjYLNKaWHQwk=)
                          4: oBXQMOceKxiCCzEWupGkaR0CA7U.roa (hash: KvNrba4A78wX0pvIzSMuYPlcM/0CRAGlh77hE8ILw/8=)
                          5: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: ofgYoUaEt5sEsG4raItN1w6F9hY0XUFBKt3N0cOVpMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:0d:a5:10:25:4b:8e:52:6c:cb:b7:80:2e:24:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: Jul 24 06:00:32 2026 GMT
            Not After : Jul 25 06:00:32 2026 GMT
        Subject: CN=c3eed0cc14ae4827c1fa413f9a706f26417bd552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:f4:19:54:11:c1:f7:43:0f:89:22:3a:12:
                    e8:21:f7:d5:16:c3:59:4d:1f:2e:7c:df:d7:6c:c9:
                    ad:18:06:3a:51:e2:04:94:26:cc:70:dc:1d:15:66:
                    9c:49:bf:68:50:0a:75:93:12:2e:98:1b:44:fe:8d:
                    ba:81:bd:9d:b8:e9:bc:72:4f:7c:38:14:22:7b:52:
                    ec:df:f4:1f:af:f9:f1:ed:26:f7:a9:0e:aa:1b:7a:
                    ab:b2:5a:e8:94:77:8b:55:01:36:26:c1:5a:bb:f9:
                    5d:5f:32:5a:1f:e9:a4:0d:34:95:8a:ae:6b:54:17:
                    64:41:ca:fa:11:4e:5d:20:01:11:77:ea:e1:d6:ad:
                    86:91:c9:66:5c:93:5d:ef:aa:ca:97:ac:65:13:eb:
                    5d:12:f8:1d:15:2b:73:a2:3b:10:84:86:8d:17:4b:
                    50:13:58:ac:96:ca:fb:fb:1f:c5:5d:d8:cb:92:ce:
                    12:ca:31:b9:de:a8:39:d4:3c:bb:e0:ea:73:9b:d3:
                    42:80:cb:31:c4:aa:d9:13:5b:69:9e:0f:54:a3:74:
                    88:5a:d0:d3:ad:ed:0e:22:70:eb:eb:3d:49:74:58:
                    ec:e9:06:61:12:58:67:fd:82:6b:c2:fd:a7:39:ce:
                    d0:3b:cb:cd:fb:85:f4:1a:1f:9a:3a:3f:b6:ce:57:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EE:D0:CC:14:AE:48:27:C1:FA:41:3F:9A:70:6F:26:41:7B:D5:52
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:36:a6:0e:fd:dd:dc:87:cd:24:cc:6b:6b:c1:89:9b:3f:f3:
         51:1a:f2:3d:c3:94:60:94:0a:44:02:05:6d:35:f1:2d:bf:9d:
         67:5b:c6:e2:e5:a4:a1:7c:12:40:2b:5b:69:19:cc:3d:39:ff:
         64:ea:2c:1e:b4:36:33:c9:05:c7:8c:28:db:91:75:e1:50:b6:
         a6:33:d9:85:01:2f:b8:33:7e:2c:70:94:55:d4:7d:98:c0:17:
         34:77:e4:b8:73:66:fc:ee:f5:78:59:ea:b5:3a:86:bc:72:68:
         55:ba:80:40:5b:24:e9:d5:11:2f:2a:88:ac:dd:2d:e8:85:67:
         91:b5:87:6e:51:35:e2:86:8b:b1:41:e9:13:d7:71:ae:e7:4e:
         aa:33:05:2f:89:24:7d:30:d4:3d:9a:51:e8:7f:38:95:40:d5:
         7a:d1:c9:41:d1:84:c1:93:ee:76:5f:d1:36:d1:00:16:3b:91:
         e6:24:99:86:02:d2:29:f9:37:ef:0f:66:62:ec:6c:06:9d:f1:
         22:45:5e:ed:d2:02:3f:9e:15:e5:ec:5e:70:e8:eb:3d:ee:56:
         ad:23:15:5d:18:8e:0b:ef:81:33:52:e3:64:e6:c8:e3:a7:39:
         9c:66:39:54:cc:5c:da:d0:a7:2b:04:42:44:42:ee:08:40:4a:
         31:ad:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:14 2026 by rpki-client