Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          vudKD2gRejNriwn1jjMsgqJbOVRi1qbt7pCoYqUMiq0=
Subject key identifier:   AA:99:0A:E5:03:ED:8E:27:B2:AE:FA:D6:2A:A0:32:75:56:C2:47:9C
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       019F9090E82C8BECDD6502FDAAEE24C9E693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          0A9F
Signing time:             Thu 23 Jul 2026 20:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:43 +0000
Files and hashes:         1: 70GrOh32dQLUqU95-AO2TD0BpWg.roa (hash: JinzzeihpLTiA6O6jFrNum74gOx6URavCLmJpxWV2cM=)
                          2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: 71JTaWRLheP8k0RJtUPx1FK57CniDlg7rqZ1O5FZII4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:e8:2c:8b:ec:dd:65:02:fd:aa:ee:24:c9:e6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: Jul 23 20:00:43 2026 GMT
            Not After : Jul 24 20:00:43 2026 GMT
        Subject: CN=aa990ae503ed8e27b2aefad62aa0327556c2479c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b6:5c:42:dd:e2:d1:04:fd:4a:dd:23:b8:75:
                    2b:70:05:e4:44:27:66:ec:1c:ec:42:47:28:d5:7c:
                    a4:22:56:9a:92:08:fd:38:a2:b7:93:08:35:3b:4a:
                    b3:72:36:66:22:22:f0:df:37:43:64:d2:48:03:f2:
                    7d:0c:25:2c:db:91:a4:77:80:7e:33:f6:27:a7:f9:
                    b4:34:dc:20:57:bb:fa:ab:9c:21:fe:4e:a3:4c:7d:
                    cf:c6:56:4f:04:37:30:23:af:92:8b:fd:46:f5:fc:
                    db:90:7f:c6:08:f1:28:81:8d:09:aa:1d:f7:74:c3:
                    9e:f5:84:00:5d:7c:85:00:74:35:c0:a6:38:55:24:
                    1f:cf:c4:b3:88:74:6b:09:d9:7a:50:81:2c:60:c2:
                    fc:4a:64:ad:b0:5e:03:0b:2b:af:85:3e:42:f9:31:
                    20:d3:e8:cb:79:32:3b:2b:72:6d:bd:20:4b:80:0c:
                    75:5f:b7:64:8f:9a:1e:94:e0:a5:94:26:c5:13:c1:
                    2a:3d:e5:b6:5a:c8:c0:fc:1d:eb:e4:0d:cb:78:e5:
                    10:4e:b5:18:39:5b:0a:4a:81:84:01:b9:83:ae:1a:
                    62:41:f3:a6:8f:8a:80:8a:4c:cb:dd:a4:c1:22:7d:
                    29:ad:34:05:55:98:23:b7:ee:a1:f2:56:ba:07:3f:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:99:0A:E5:03:ED:8E:27:B2:AE:FA:D6:2A:A0:32:75:56:C2:47:9C
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:74:7b:d2:78:a7:d0:41:9f:ff:7d:28:2d:5b:7f:1a:8b:86:
         87:3c:9e:63:15:8b:de:1f:15:85:d1:74:71:c7:e6:94:38:d1:
         1a:1a:c0:d6:82:7c:1e:26:9e:14:a3:f0:22:93:14:f3:26:38:
         b9:0b:15:80:9a:e1:28:21:11:0e:c5:14:f3:71:e6:4c:a5:13:
         01:09:f8:2c:6a:d9:e1:6a:38:76:51:25:50:76:f8:08:94:47:
         97:57:49:30:91:6c:d6:12:3f:e7:7a:04:d5:d7:92:b9:01:5a:
         9d:1c:e0:0f:8a:43:b4:b7:e7:a9:15:ea:ef:19:1e:b9:92:6a:
         13:ee:d1:02:69:0f:55:57:04:1c:f3:92:df:c2:df:64:47:79:
         7f:69:14:01:65:46:8a:0f:e1:cb:ff:7e:db:21:58:f4:e0:2e:
         52:75:a7:7a:6e:fb:ce:d0:1d:74:9e:9e:c2:95:3f:68:ff:a6:
         1e:ac:19:cb:d6:2d:0f:87:11:c2:1a:33:55:42:a3:ae:21:a3:
         8b:1f:3e:aa:b8:98:46:c4:15:a0:d8:1c:d3:2c:12:d8:cf:eb:
         17:69:f4:d6:f8:44:3a:0c:15:06:d5:a4:0a:f6:35:b3:e7:94:
         ac:5d:c2:ee:1c:cd:fd:39:d3:9e:51:82:1e:38:8d:a0:9c:56:
         16:0a:41:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:12 2026 by rpki-client