Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File:                     0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier:          gpgJccJ1THusOyxcYlXElol7TkypMI7HvjXarGUaAYo=
Subject key identifier:   30:36:7C:9B:DA:F4:5D:0E:F1:7E:65:89:A3:A8:BB:FC:14:12:2A:EF
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer:       /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial:       019F9211A2425EAF001414E220CC36A6BC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number:          1308
Signing time:             Fri 24 Jul 2026 03:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:56 +0000
Files and hashes:         1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: ndXsd/5gGqKRQ+jzL+bBSxqMP/FS06/JKaaMdqlRKrA=)
                          2: EAy4SNOanXhaxXxJSyGzCor_nI0.roa (hash: Ea+Uw6sz9cAh7cFY1x39RiJi5kY9NftCtSPZo+he5xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:a2:42:5e:af:00:14:14:e2:20:cc:36:a6:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3277a239664d245becf4214dde15923042a142f
        Validity
            Not Before: Jul 24 03:00:56 2026 GMT
            Not After : Jul 25 03:00:56 2026 GMT
        Subject: CN=30367c9bdaf45d0ef17e6589a3a8bbfc14122aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:88:08:9a:a3:dc:19:3b:bf:83:e5:b4:cc:
                    6b:ff:fc:01:1f:1f:56:99:31:b7:59:1a:7b:6d:2a:
                    15:78:ab:01:13:01:be:52:94:d8:1a:6a:3a:65:b4:
                    65:1c:26:95:85:b7:c7:47:c3:18:3f:2b:a7:54:a3:
                    9f:af:24:17:0d:03:87:2e:2a:e5:ad:15:c4:2c:ae:
                    8d:66:65:a1:68:65:f2:ca:f8:2f:b0:fe:37:f6:05:
                    c4:39:24:8a:60:47:ed:d3:05:24:85:2b:32:94:de:
                    25:2d:87:24:58:42:d5:99:55:83:a1:ee:22:c0:ed:
                    01:93:04:86:14:c4:a7:72:d6:3b:d5:79:52:34:ef:
                    0b:ff:ce:9c:e9:ae:c2:98:50:f4:e0:b3:4a:36:d8:
                    98:dd:1d:34:72:89:30:89:6c:9a:1e:ef:58:c9:c7:
                    12:09:2b:6f:06:4e:d7:75:70:9e:f6:b3:c4:b6:97:
                    e3:5a:b1:73:0f:b9:6e:5e:35:9f:ff:aa:8f:b7:57:
                    ec:4d:70:39:c9:12:97:1d:a7:6b:75:7d:4f:10:0c:
                    e1:10:ec:7b:f5:b9:68:6a:ed:3d:63:9b:65:8a:b2:
                    1c:ea:ed:e3:7b:13:3f:57:f4:02:1a:b7:6b:0e:70:
                    3c:2f:4d:eb:57:91:58:54:e7:7d:95:b5:54:f3:11:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:36:7C:9B:DA:F4:5D:0E:F1:7E:65:89:A3:A8:BB:FC:14:12:2A:EF
            X509v3 Authority Key Identifier:
                keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:63:2b:09:7d:e8:2b:dc:ac:57:bf:d2:36:ce:14:2e:ee:
         19:3e:20:58:1d:98:11:ba:7b:36:4f:26:69:32:cc:8a:4b:54:
         48:be:ca:2d:3c:8d:49:54:01:a3:6a:39:b8:91:86:fe:48:50:
         5e:21:2a:3d:2b:4b:ee:82:c8:4d:8e:17:5d:fc:f6:ed:9b:b6:
         b3:b0:c3:53:b2:71:2e:b7:3b:f1:c2:97:d0:54:cc:43:c8:33:
         e5:13:58:d9:d5:76:ef:49:9d:eb:11:7d:1e:a6:10:d7:ff:a9:
         d4:ab:9c:5a:89:54:d1:44:c5:da:14:12:0e:98:fc:65:63:73:
         fa:85:ee:18:f1:a0:1d:ac:6f:f3:ec:89:ec:e3:8d:89:2f:8f:
         5f:10:49:6d:c2:b2:df:0c:bc:d0:1f:ad:00:be:11:59:8c:50:
         4e:bf:46:46:b1:36:c7:37:7f:5b:11:84:fa:96:26:77:9b:85:
         3c:1c:1c:b2:cc:78:40:78:a5:fa:6d:dd:9e:cf:41:88:e7:f8:
         5d:ab:e4:f7:43:d7:c0:5b:bc:6a:5f:69:dd:ca:93:2c:31:d6:
         ee:b0:9d:5d:7e:7a:58:b8:bc:2e:5e:81:51:e3:a0:07:3d:95:
         27:a0:e6:a2:59:b4:ed:23:2f:31:c1:d8:fe:fc:13:64:26:1c:
         97:ed:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:39 2026 by rpki-client