Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File:                     0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier:          A7BZ8gVHK1/aOOA658tN1TzayrWwzIX9GT1/aWP0B2A=
Subject key identifier:   6D:43:2B:DE:97:3D:58:AD:A3:78:43:74:33:A0:C2:8D:6F:EA:FD:D2
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer:       /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial:       019F90FEB711F70A665675538144337760AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number:          15CB
Signing time:             Thu 23 Jul 2026 22:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:39 +0000
Files and hashes:         1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: TuQLKnAkuCtXVpjMnz/N7afpd/5QKi1XW/mVLEGiioY=)
                          2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:b7:11:f7:0a:66:56:75:53:81:44:33:77:60:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0041ff7980379b798049256868dff39819c2604
        Validity
            Not Before: Jul 23 22:00:39 2026 GMT
            Not After : Jul 24 22:00:39 2026 GMT
        Subject: CN=6d432bde973d58ada378437433a0c28d6feafdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:fe:36:b0:33:48:a0:b5:ca:ed:da:da:66:
                    4f:08:56:73:97:73:0b:76:93:88:7e:50:0c:13:d4:
                    ee:59:c8:6b:ab:d4:1d:89:e3:20:19:ea:a8:d9:34:
                    ec:81:2a:1f:60:6e:64:a2:d2:ea:ec:c4:19:be:2e:
                    46:18:af:03:c7:8b:31:59:47:7a:b4:d2:91:6c:7d:
                    a6:69:a0:ad:1d:4a:eb:a6:63:b0:8f:a3:29:db:48:
                    24:59:1d:00:d5:29:cd:4b:51:2d:36:86:f4:08:a4:
                    d8:6e:d0:f4:3b:4e:ac:bc:94:f2:d6:d5:32:07:a9:
                    45:41:98:98:c6:39:85:5a:4a:be:86:86:c3:63:58:
                    df:24:f7:cb:fd:69:8c:af:e1:ad:6e:34:20:d2:33:
                    89:d6:3e:42:7b:72:f3:ff:d3:b2:7e:f7:5c:7a:e0:
                    dc:27:9f:82:7f:4d:bd:d6:0b:17:dd:20:9a:43:34:
                    ec:be:2f:2b:42:e6:5f:56:06:1d:8f:f5:d2:89:de:
                    af:0d:2b:64:1d:16:c6:e0:d7:74:38:d3:1f:35:06:
                    3a:35:0e:64:26:06:8d:aa:ca:92:5e:35:a4:2c:0d:
                    43:6b:6c:84:1b:38:89:eb:d4:b8:88:31:f6:1e:8f:
                    ab:23:e4:00:f9:75:67:28:99:6d:01:8e:4c:ea:21:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:43:2B:DE:97:3D:58:AD:A3:78:43:74:33:A0:C2:8D:6F:EA:FD:D2
            X509v3 Authority Key Identifier:
                keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:ec:06:dc:61:c0:3a:cf:b6:cc:ae:39:4b:d4:ae:f0:1a:
         6e:df:27:d6:f2:62:c3:61:ea:9e:6d:2f:82:f0:d6:ac:f7:70:
         d1:82:a1:c8:4b:7a:d4:f5:aa:35:2e:cc:01:12:06:60:d2:3e:
         32:00:83:07:73:be:e8:76:35:77:83:8e:9e:1a:d0:54:10:40:
         42:b1:e1:aa:a4:46:a0:01:24:56:56:67:45:c6:0b:c8:c6:fb:
         fd:70:9f:bf:21:73:99:27:e7:d8:c1:0b:ba:95:8f:3d:27:10:
         00:e8:b0:d6:81:20:45:1f:09:be:bd:c4:a7:b0:f1:d8:d7:b3:
         56:fe:fd:3d:46:5c:10:91:25:7d:d0:37:78:79:0a:5d:2b:43:
         86:b4:58:58:72:61:b5:d1:b1:3d:ba:79:52:4f:20:b7:fd:cb:
         fa:20:18:45:ea:cf:b1:5a:52:b9:45:15:8c:43:06:87:c1:16:
         08:3d:51:11:f9:ef:df:7c:73:c2:c9:69:cd:da:9b:0c:c3:77:
         60:07:c2:9f:4d:72:35:1c:fb:d8:3c:be:4d:1f:91:c4:6a:5c:
         4b:1e:2e:a2:7b:fd:7d:b1:84:fe:09:aa:3d:e8:60:de:f0:85:
         12:0d:ec:5e:b9:c4:bc:7d:75:cf:9f:57:5f:32:45:c9:38:86:
         34:c1:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:34 2026 by rpki-client