Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          ziYGpF/B2cvQUI1otGWdeWZ3iCl467TtZomsA6E7W4E=
Subject key identifier:   6F:DA:B0:73:2E:97:FE:AC:E2:13:9B:16:06:63:77:71:B0:74:17:7D
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       019F92B67839FE3330AC539514D8324EAD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          0A8A
Signing time:             Fri 24 Jul 2026 06:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:59 +0000
Files and hashes:         1: 0lvXa172UplN6y7av1cXq_FBnIY.roa (hash: wYYltyOrSFKK2j0JVE4ExTzSFfm4Tu29VSNIrOnj0/w=)
                          2: J0u4PbYIevSkqXDSEnsyGZVMqtc.roa (hash: aBXYYl48jca9wveAZI/GuYbbGGyv9mDo91i3PZYst5k=)
                          3: W7a_s-Jl-VcdTVf7k5VBlu09lYo.roa (hash: NXJVtq1VsU3W1ziELfQ1JwgkYM4PzBdJsNwmTSOSzqs=)
                          4: oFb4jBbqBQ0GaSAPZ2CPzXwpuXU.roa (hash: ReFO9yx5996yanj90nD2kh+KTbHdkiMkBpj9BJ+Y/vs=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: CUMAGMSO33UXSvY1mFfV9OuwWXlKnt2XmW6S3KkgHrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:78:39:fe:33:30:ac:53:95:14:d8:32:4e:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Jul 24 06:00:59 2026 GMT
            Not After : Jul 25 06:00:59 2026 GMT
        Subject: CN=6fdab0732e97feace2139b1606637771b074177d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:62:4b:f0:ed:46:1f:2a:45:b1:71:12:9d:
                    5e:b3:a6:c7:22:f1:9a:cf:b9:61:0c:dd:e4:ef:a4:
                    c6:97:09:79:72:dd:ed:3d:26:42:c2:12:33:07:f0:
                    b9:f9:38:b4:4d:0a:14:c0:90:f9:72:85:eb:60:66:
                    f8:93:81:7c:30:c6:f3:b9:b1:15:d9:77:7b:32:29:
                    3c:6e:51:5c:51:38:a6:79:06:19:91:f6:f7:9d:71:
                    11:e7:6c:a1:2b:db:24:9e:3f:32:23:e7:c0:66:1c:
                    73:ee:87:cd:76:e4:78:3b:d0:ee:de:1f:32:34:81:
                    a5:53:b2:7c:5a:84:0c:3e:d2:6e:84:f2:04:6d:1e:
                    5e:db:ec:a0:be:b9:e9:28:62:d1:47:23:4f:57:70:
                    68:eb:57:d7:29:80:a9:f6:e2:05:4f:d8:1e:1d:83:
                    a3:10:2f:5f:22:42:95:bb:fe:2a:33:a1:a9:25:2f:
                    40:ce:2c:af:91:49:c2:33:39:31:0d:ff:a5:e6:08:
                    ca:44:1a:c1:3c:ab:1d:22:25:d9:c5:22:ab:60:b4:
                    60:cd:36:1f:67:74:26:4e:7d:fe:83:02:f7:45:1a:
                    b7:9b:0b:20:09:4f:c7:77:70:27:07:1b:4b:c9:71:
                    ca:ae:1e:88:dc:5f:f2:61:7e:e1:8d:b3:05:5e:98:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DA:B0:73:2E:97:FE:AC:E2:13:9B:16:06:63:77:71:B0:74:17:7D
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:21:ea:da:58:20:29:65:f1:bf:7b:c0:8c:16:61:71:e9:
         6d:61:4c:67:bc:77:f7:f0:d6:42:ff:db:7d:7a:54:68:cf:ed:
         2d:3e:39:17:e7:3c:54:1a:a4:bf:b9:8a:51:56:46:a7:3b:34:
         a2:48:9c:5a:0b:52:77:aa:3d:b0:48:5e:2a:21:88:8e:51:f7:
         1f:80:4c:d8:3a:8a:ea:75:26:ae:a7:17:af:96:f3:8d:51:34:
         be:1e:ef:18:a3:2b:ac:3d:74:5e:fd:a1:9a:a9:19:66:d0:e4:
         d6:b1:54:7b:05:7f:1b:d6:24:76:49:a6:74:dc:aa:e1:97:87:
         f3:de:43:30:c8:6e:b2:32:0b:42:ca:59:c4:cc:99:2f:86:56:
         93:07:68:ae:0c:09:c2:f8:25:f6:27:99:0e:13:b7:f2:93:b8:
         10:63:9b:f5:ca:64:85:45:6d:e9:95:51:06:a0:97:57:76:23:
         a5:26:f3:b3:b9:c2:70:6f:86:32:90:0f:f0:16:13:d9:fe:f2:
         3c:1b:c1:a5:d7:99:16:d9:3a:1b:94:9e:d6:a2:92:af:21:c9:
         18:8e:93:3d:be:f8:72:36:c7:a0:56:4d:be:59:cf:eb:f2:16:
         60:ea:79:39:d1:a3:a4:e7:92:bb:44:e5:a7:18:d8:19:dc:02:
         7e:43:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:16 2026 by rpki-client