Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File:                     tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier:          6OPhqBdyXl3t2MlQmVEposm4qR/yVVLS32QnniSeX5Q=
Subject key identifier:   AE:62:76:27:59:28:EC:73:96:86:C6:62:EB:3C:D0:8B:CA:92:21:94
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       019F8EA27446D0642CCBEC6D8EA7A36C6737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number:          0AAF
Signing time:             Thu 23 Jul 2026 11:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:38 +0000
Files and hashes:         1: SziyxY1sZxMSjtHJqiVs05V-vCk.asa (hash: Wrcy9/aQFlANW1WRGXEsgQya2i/bD8AmCJIRuIiIad0=)
                          2: nKY7wkxqr552tFA6FDOkz_QoAvw.roa (hash: fJ0VHAnJRXOGfnfiS67MPLPgf5X/K6jwriRMCPSDxNo=)
                          3: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: f4MpiPfIazZg+7OZh27/kPn2fHmH3Vzqa97yn1mARBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:74:46:d0:64:2c:cb:ec:6d:8e:a7:a3:6c:67:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: Jul 23 11:00:38 2026 GMT
            Not After : Jul 24 11:00:38 2026 GMT
        Subject: CN=ae6276275928ec739686c662eb3cd08bca922194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:06:6a:ab:1a:85:a2:18:84:51:a9:7b:05:
                    5b:01:27:20:72:d8:a0:06:67:2b:ba:82:47:ec:55:
                    69:a3:a9:3c:e6:5e:ab:33:73:89:d9:83:65:54:74:
                    f1:8c:14:07:b3:94:a1:6a:1a:d2:89:33:ef:41:b7:
                    6e:c2:fb:59:9c:e5:eb:ff:c2:7f:ca:0b:67:d1:9e:
                    fb:cc:6f:38:b0:0e:d7:a2:65:d4:53:5e:86:91:0c:
                    7e:07:73:6a:d1:dc:08:91:cc:aa:1a:30:bb:d4:6f:
                    48:f6:99:29:a8:81:07:00:f6:b1:43:5f:f5:f5:19:
                    9e:88:f1:61:78:78:67:2f:e6:b7:9c:c7:eb:96:1f:
                    8d:d0:18:76:f6:c7:17:08:61:20:a5:ac:60:c9:3b:
                    c0:a6:9e:67:67:9b:45:a6:1f:4a:8a:a4:51:81:88:
                    88:57:fd:6a:a6:bf:80:b4:6c:1a:0d:a0:8a:7a:95:
                    32:f8:2c:ad:ec:a5:62:72:51:9e:17:98:9a:a0:9a:
                    32:3f:90:c9:56:c6:f9:9b:ed:95:46:61:6e:e9:01:
                    67:21:4d:14:86:d6:00:d6:a0:c1:11:5d:63:90:1c:
                    90:ea:b9:36:a7:4f:3c:49:ad:fe:9a:11:1a:c8:62:
                    81:c1:32:02:7e:f8:b2:6a:24:73:1c:26:3b:41:b5:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:62:76:27:59:28:EC:73:96:86:C6:62:EB:3C:D0:8B:CA:92:21:94
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:48:f2:3d:67:bf:23:49:6d:f7:1d:94:cd:6a:ca:8a:d1:
         70:0d:a4:aa:5d:64:bc:49:5a:a6:31:d3:a7:5e:c0:28:98:22:
         09:d5:65:56:bf:3f:7d:bd:b9:de:2f:2e:39:59:76:03:9a:bf:
         0e:dc:5c:c0:c4:74:19:67:c0:c7:dc:a2:75:57:40:12:e6:e5:
         41:51:37:5a:62:17:c5:c7:67:05:08:0e:ae:d0:08:58:1b:1e:
         b6:f5:46:16:a6:db:01:7b:2b:1b:4b:fb:d1:9d:73:43:e5:c8:
         20:6c:03:8e:6c:e8:0a:24:a9:01:eb:fb:98:97:9e:fb:3d:bb:
         a3:54:c8:df:cc:7a:5e:40:bd:c9:2f:5f:1d:93:e5:43:e6:39:
         8d:f8:cd:d5:08:b3:02:c5:18:f8:f3:84:7e:81:0f:84:b5:a3:
         85:7f:b2:5d:3e:0a:4f:9f:54:08:47:fb:be:30:ba:31:15:80:
         c9:de:e5:bb:54:5b:91:5b:a1:22:fc:75:c8:bc:1a:cc:49:39:
         80:ec:ec:a8:1e:be:d8:66:7e:d3:77:7b:a0:19:b2:a0:25:55:
         64:57:f2:27:4a:1e:00:d6:a7:33:d3:cd:83:cd:40:d3:4b:98:
         3b:5b:74:68:7f:73:9c:9c:15:83:06:03:a8:60:44:02:71:59:
         48:d7:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:51 2026 by rpki-client