Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File:                     tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier:          pyOGD3Pzt/7Dqt1/YnKwNJpYQAi009XmQqWoJiX/IvA=
Subject key identifier:   0C:13:6B:3A:98:04:CE:0D:67:A4:E1:F8:E8:2F:02:B6:CC:0D:F6:48
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer:       /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial:       019F95127E2B01C8275804B5337676E18103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number:          0723
Signing time:             Fri 24 Jul 2026 17:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:44 +0000
Files and hashes:         1: Cu5RcCDiT9wnSYDAXin97C5_ar4.roa (hash: mZ2GDzOYBdCLGqwEYWo/X2TbRkRCTGHd2uJn3YPq5Hs=)
                          2: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: AzVynN/bKwe0kDIpE277p3t/JsI6iV75+twLAfq26mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:7e:2b:01:c8:27:58:04:b5:33:76:76:e1:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
        Validity
            Not Before: Jul 24 17:00:44 2026 GMT
            Not After : Jul 25 17:00:44 2026 GMT
        Subject: CN=0c136b3a9804ce0d67a4e1f8e82f02b6cc0df648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a5:2b:47:40:1f:24:e1:0d:dd:7d:98:cb:0c:
                    a1:ea:90:c8:eb:5a:c7:42:30:a3:ac:3a:8c:7c:51:
                    9c:78:7b:f5:b7:b3:ac:f2:49:c4:8a:82:3e:16:c9:
                    57:61:08:5d:50:4d:f3:e2:47:10:dc:81:ba:46:cf:
                    88:86:56:9e:2e:c5:42:da:cb:bd:a8:90:6e:35:4e:
                    29:a4:f9:bd:13:80:6f:1e:da:5a:98:b5:71:a2:14:
                    7b:64:91:49:2d:f8:12:ff:b9:28:be:e4:6a:f5:20:
                    f5:dd:96:b6:c8:ba:e2:48:c5:22:da:72:af:17:4e:
                    ba:f7:06:0a:6d:35:16:fa:15:cd:32:c4:32:5e:44:
                    68:72:eb:ba:43:7d:c6:5f:42:90:75:81:8d:07:00:
                    f5:e5:d2:eb:3e:87:77:74:75:df:1c:17:af:41:1f:
                    ae:e3:5e:f7:c0:eb:3d:3a:22:a6:37:88:87:b4:53:
                    38:fc:92:73:df:e4:b4:f5:d1:d1:9d:13:f7:14:3b:
                    3a:99:56:dd:34:f8:3b:01:b0:a7:f0:87:4b:e0:3b:
                    93:0a:6b:6e:c0:d5:96:18:c3:8f:6d:d5:5c:90:55:
                    1d:2e:95:49:ae:96:29:a5:db:77:7e:02:25:a1:95:
                    5b:0c:05:42:f4:37:fe:8f:39:3a:fc:5e:53:14:ab:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:13:6B:3A:98:04:CE:0D:67:A4:E1:F8:E8:2F:02:B6:CC:0D:F6:48
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:be:07:45:88:45:81:fe:3d:83:b8:2a:dd:3b:ae:d0:d5:31:
         a6:be:f4:7f:41:c7:f6:a0:a2:9c:31:09:52:72:3b:ce:ee:b0:
         34:bb:83:dd:fb:b8:03:a3:8b:6a:f2:61:00:df:9c:59:3b:2b:
         81:49:08:eb:a8:c1:ae:94:bc:dd:c1:1e:6d:cc:8e:c8:7c:d6:
         c8:50:53:8c:f3:52:bc:70:90:38:6b:55:01:6c:15:1a:68:6f:
         16:d8:d6:3b:ad:0d:b5:71:f3:39:5b:cb:b3:d6:48:b2:eb:72:
         35:db:f5:c0:ff:ba:89:20:f1:0e:e4:74:d7:d5:ad:99:f1:08:
         85:d5:9a:c9:1c:eb:1c:a3:d7:91:3e:b9:45:17:d9:59:7c:5a:
         ad:34:21:2a:fe:6e:45:52:52:70:43:71:58:1b:40:4b:1f:fa:
         3a:34:c4:b7:20:2a:c6:37:d1:42:96:9d:52:5a:5c:92:62:f6:
         ce:43:e0:e0:ca:97:30:35:71:8b:62:98:4d:99:ac:80:3b:bd:
         1f:a9:ad:af:e7:0f:5c:72:b9:d0:d7:35:23:18:16:19:6a:a1:
         c8:94:8a:d8:a1:7f:21:1d:71:a7:00:ff:be:eb:d8:19:08:1e:
         5e:25:8c:80:2c:c0:30:c5:c1:eb:06:6d:88:32:ef:98:25:3d:
         79:89:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:57 2026 by rpki-client