Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
File:                     mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json)
Hash identifier:          15A6F8xrP6uCkKzeAzfJWNe0SWChMHQijpnRqGWQGxM=
Subject key identifier:   6E:46:CB:C5:03:67:E4:EC:0E:51:32:5A:76:4A:87:69:83:41:9E:5E
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Certificate issuer:       /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial:       019F93C965462680D13C2D6C16C5F3ABCFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 11:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:17 +0000
Files and hashes:         1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: 0gsr48yQpL7600Ycg2WdXLoKggMUfTvD8QYUAZbHt3g=)
                          2: nm8cLmmA3o4L2xPgTshW5L8vxeM.roa (hash: t+WoYax1GfjrQoojzMAiUt/9BDl447IgGJsQGcGrMlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:65:46:26:80:d1:3c:2d:6c:16:c5:f3:ab:cf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
        Validity
            Not Before: Jul 24 11:01:17 2026 GMT
            Not After : Jul 25 11:01:17 2026 GMT
        Subject: CN=6e46cbc50367e4ec0e51325a764a876983419e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4c:6a:cd:50:fb:0b:d3:6d:0e:c8:26:9c:ce:
                    ef:d6:af:04:8f:af:56:e4:33:8a:7a:f8:3d:73:8e:
                    b6:f2:e7:27:e0:f5:7c:9e:24:09:9d:ef:b9:0a:f4:
                    b5:37:4f:4b:d6:69:a7:3b:a9:d7:c9:05:04:a2:66:
                    3d:3f:cb:2f:31:35:6e:1c:a8:5c:66:66:96:db:86:
                    77:40:06:14:e6:09:ea:a1:85:45:4d:8b:ea:eb:4b:
                    a3:bf:dd:cf:f3:8f:93:c8:72:f2:3c:d8:83:5e:c1:
                    74:91:34:e4:38:96:7a:cd:33:dd:57:16:cb:7f:bc:
                    32:e8:b8:0a:8f:03:c2:97:ea:a9:80:f2:e8:d5:d7:
                    91:26:b6:22:4a:65:a4:eb:af:03:da:5f:bc:7a:f0:
                    4e:66:18:7d:42:d6:13:95:2a:29:92:d2:47:d2:44:
                    f8:f1:52:36:e2:a2:2e:dc:b1:35:ce:a6:bf:3f:cc:
                    be:f7:4d:61:dd:c6:8f:27:c5:2e:ff:cb:2a:c2:74:
                    e3:9e:ff:7e:0d:97:b5:99:57:a5:c5:d3:aa:8e:e2:
                    49:8b:b3:aa:0f:ec:a7:6f:74:5f:2d:3b:b4:41:81:
                    50:5d:3c:fd:f0:7b:96:50:32:f2:04:4c:41:83:f0:
                    68:ae:c7:4f:63:6e:1f:fa:2a:03:2d:cf:62:60:d9:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:46:CB:C5:03:67:E4:EC:0E:51:32:5A:76:4A:87:69:83:41:9E:5E
            X509v3 Authority Key Identifier:
                keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ce:b3:2c:ba:31:f5:13:0b:fc:3f:c2:1b:91:e5:46:f8:23:
         51:6e:77:b6:a8:e1:55:b8:13:47:dd:5d:0a:92:29:c8:69:4b:
         c9:0f:a7:38:75:59:1f:9f:9c:47:aa:ef:59:6a:c6:83:d8:0d:
         a9:90:42:69:c0:27:8c:f3:b6:2c:c6:c0:67:4f:6f:51:d2:e2:
         ec:de:ba:b1:a1:f4:a6:9e:9e:4d:5b:38:7b:8f:0e:76:56:0e:
         90:46:87:63:97:f3:b4:18:c1:fb:22:7f:2d:f1:06:cd:07:74:
         34:ce:d2:0d:d6:d2:f1:ac:09:28:9e:62:27:6f:62:79:62:d4:
         a3:d0:b7:ff:3b:c9:eb:55:c3:cf:4e:e3:8b:3f:20:2b:b6:0f:
         27:e6:0b:c5:97:f2:db:b7:d9:9d:5a:6b:d0:b9:5e:d2:ca:9f:
         30:14:b3:66:58:c7:57:fc:db:5c:07:66:b4:3a:e6:71:9b:ce:
         70:54:b6:69:d4:af:72:1c:70:fa:93:b5:0d:5a:a9:f0:ed:a0:
         b4:25:d7:3b:4b:b5:64:f0:1d:a0:b3:d5:c7:27:8c:76:dc:40:
         f8:ed:5c:34:5a:87:40:1f:fc:4d:a5:9c:80:4a:8c:b4:8e:ad:
         d3:4f:72:52:b5:1a:81:9e:8f:6f:95:83:7e:84:e9:5b:5b:a1:
         66:a1:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:59 2026 by rpki-client