Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File:                     lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier:          YBwrGxrhlKSxn0zPQpTTl4qHqeL8S1nLrlpbxyUP2aM=
Subject key identifier:   C6:AB:A8:47:D5:16:D5:BE:3C:C5:34:E9:68:C8:6A:41:CB:1F:6B:D8
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer:       /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial:       019F91A42756FB02AB24CDE36EEEBDDD095C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number:          05A0
Signing time:             Fri 24 Jul 2026 01:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:21 +0000
Files and hashes:         1: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (hash: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec=)
                          2: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: g6y/bvCFIl/7U5SMgSP3Cf5lZu62yhU7VcauD/NjKRU=)
                          3: uFxrwUPGahsgU0NhkE7IqtKwEU4.roa (hash: ARBCNl7Ei4KTeE+J4rvd49qxKn5dAvgnf3fgdzfEo9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:27:56:fb:02:ab:24:cd:e3:6e:ee:bd:dd:09:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
        Validity
            Not Before: Jul 24 01:01:21 2026 GMT
            Not After : Jul 25 01:01:21 2026 GMT
        Subject: CN=c6aba847d516d5be3cc534e968c86a41cb1f6bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:6c:7c:30:ec:10:e9:4b:a6:e9:31:3d:ab:
                    ab:70:06:b0:b0:2f:a7:8a:09:09:cf:d9:86:86:8f:
                    53:13:a8:c5:ca:53:0c:8e:70:0c:b0:7b:6f:5b:91:
                    59:f5:a5:2f:ad:0e:12:31:fb:c5:a2:c5:bf:27:ea:
                    93:ea:93:29:57:1e:49:c4:e0:a4:13:d6:5a:75:a4:
                    e1:d1:4c:85:08:03:d5:48:a3:68:15:1a:c2:68:ba:
                    43:3e:00:17:7f:7a:0e:5d:38:03:76:f6:c6:9e:2d:
                    d8:97:32:84:1a:dd:a5:22:52:9b:c2:65:9b:fa:91:
                    ee:ba:2b:71:74:26:e1:35:f3:d1:c6:12:08:ae:9a:
                    7e:e3:b7:a5:6c:75:3f:2f:36:f6:71:12:11:fa:ee:
                    f8:94:7b:c1:c2:59:ed:3d:62:56:3e:e7:b3:ba:aa:
                    cb:fd:0c:d9:57:34:21:79:7a:83:34:ba:4e:60:08:
                    3c:d6:be:ee:60:3d:b7:0d:40:30:15:43:97:72:b6:
                    5f:54:be:e5:9f:27:4f:7e:15:9b:2b:e8:ef:70:86:
                    d1:94:43:ab:28:84:43:4a:03:f3:17:0c:9a:06:be:
                    f5:6a:c6:8b:f9:1a:5b:d4:c9:8e:ca:7d:bb:84:cd:
                    bb:ea:39:9a:df:47:58:c8:c1:33:1e:c0:bf:34:5c:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AB:A8:47:D5:16:D5:BE:3C:C5:34:E9:68:C8:6A:41:CB:1F:6B:D8
            X509v3 Authority Key Identifier:
                keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:3c:24:b5:2a:72:f5:0c:87:01:cb:ac:f6:41:ab:bc:a6:
         c6:8d:eb:b3:cd:4d:a8:1f:a4:5d:83:96:c1:e6:ae:ab:a4:cf:
         4e:8a:b0:48:11:16:8f:95:95:33:0a:7d:37:6c:4b:d0:98:96:
         00:b5:16:9e:db:a1:4b:95:f3:c9:76:8c:34:ac:ca:d4:c5:73:
         2d:29:35:28:a5:81:ca:43:de:0b:eb:de:1e:48:57:b4:0a:f4:
         f4:6b:d3:01:3f:e8:22:61:f8:d5:8e:b9:54:3b:99:76:13:98:
         08:ee:f5:7e:d5:88:94:26:1f:d5:f6:77:7a:97:3e:af:c0:a9:
         7d:77:58:6e:1f:1a:0c:e4:d9:bf:49:01:cb:b1:b0:48:b3:cc:
         a9:67:fc:29:45:0b:c1:4c:2b:9f:8b:a4:28:2e:4e:c6:20:fa:
         80:a3:8e:2a:48:e5:90:8b:14:bd:96:05:07:b6:75:e8:44:9f:
         3c:38:b4:17:22:dc:9e:ea:b1:d6:58:eb:9b:49:17:c2:25:d6:
         2d:d4:29:14:a6:86:af:ef:bd:c8:62:4b:4a:6c:e5:ef:a9:e4:
         9c:ca:ee:57:7f:fc:ba:c2:ae:76:bc:4c:31:19:f5:7f:c4:fe:
         5e:27:94:32:2d:ff:f2:89:31:82:bb:aa:da:f0:8e:21:2a:1e:
         50:cc:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:12 2026 by rpki-client