Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File:                     mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier:          g40ih7f5IORexgetsieMfB1igIZEsaarj8kkxNE6rLk=
Subject key identifier:   CC:7C:91:ED:06:0E:4F:70:77:C9:5A:30:A4:9D:24:32:AF:5A:A8:E2
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer:       /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial:       019F90C7D5EEEE7D1D0A61850C753055D83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number:          087B
Signing time:             Thu 23 Jul 2026 21:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:43 +0000
Files and hashes:         1: kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa (hash: fG/gmFQxL44rDJ/8bE+/AVQ5a2QcbRZO0R8IThxbrH8=)
                          2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: rPR0aqpIP8TV2rxNIYjf03hN6Cfu+4/Yccf1azN2E9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:d5:ee:ee:7d:1d:0a:61:85:0c:75:30:55:d8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
        Validity
            Not Before: Jul 23 21:00:43 2026 GMT
            Not After : Jul 24 21:00:43 2026 GMT
        Subject: CN=cc7c91ed060e4f7077c95a30a49d2432af5aa8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:d5:d2:9c:55:fe:0d:0f:02:fb:86:54:b1:
                    16:96:71:8d:46:37:13:4b:65:88:46:6d:8a:db:4e:
                    03:10:8d:7f:c5:a9:4d:7d:08:9e:45:86:ff:ad:96:
                    13:86:f5:81:7f:07:5d:65:6e:81:70:f3:30:71:9a:
                    ad:0a:a9:a5:54:55:f3:dc:99:46:5a:60:5f:39:57:
                    15:52:30:4c:39:18:1c:84:85:74:1e:69:f2:50:2a:
                    8d:07:84:5f:8f:47:ca:f5:ae:52:9b:aa:6c:d9:cf:
                    2f:6e:d9:df:55:26:66:dd:fe:e2:1b:c9:55:51:5b:
                    52:9c:b9:f3:4f:20:20:30:54:34:76:9b:ef:fd:53:
                    82:d5:2e:72:5c:b9:e6:3b:bf:d9:18:c8:0e:cb:a2:
                    7d:32:8f:18:61:e2:70:4b:62:54:fe:41:c8:70:95:
                    79:85:c1:5c:dc:67:8f:c9:e2:f8:f6:62:6c:b4:d0:
                    f9:5e:76:39:82:3f:94:00:2d:e5:75:e1:51:f2:e0:
                    6b:fa:08:df:12:7e:f3:da:b1:56:75:cf:dc:c0:9a:
                    06:01:9a:24:d7:04:ea:af:0a:67:b4:4a:96:3f:04:
                    87:5c:1c:b2:00:cc:3d:73:19:b2:16:c0:54:ef:34:
                    1c:8d:2e:98:2a:6e:81:24:c0:ff:84:75:b6:20:8f:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:91:ED:06:0E:4F:70:77:C9:5A:30:A4:9D:24:32:AF:5A:A8:E2
            X509v3 Authority Key Identifier:
                keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:8a:fb:76:c9:66:ee:bb:da:0e:19:97:72:cf:da:db:9b:
         dd:f1:37:df:2b:9d:6a:03:27:27:25:de:18:0b:2b:9e:eb:1e:
         2c:0f:9c:92:9a:d9:bd:b5:c7:70:df:c7:c8:c7:31:1b:72:30:
         9b:1e:3f:9c:e1:67:64:2d:3a:5f:4a:e8:80:61:a1:65:f3:59:
         3f:f9:23:f3:89:4f:b3:50:e5:81:ea:d6:fc:b2:8b:33:8f:15:
         c0:92:58:7e:e9:77:95:23:73:1f:6f:e5:fe:43:0a:96:04:e5:
         bb:98:9f:25:0f:b8:50:34:0e:49:e2:99:9a:dd:ba:a1:b7:c8:
         db:f9:5d:5a:91:33:aa:38:17:bb:5f:d1:f8:cc:d0:7c:b8:b8:
         7b:26:93:4b:75:0c:96:40:ba:6d:d4:a8:c3:78:26:94:00:9c:
         5d:ea:ab:22:dc:92:d0:72:fd:73:89:4e:eb:f5:1f:cb:7e:8d:
         06:55:86:f0:2d:62:5b:54:07:f2:7c:f7:e1:88:4f:44:c5:6d:
         16:d1:b1:78:9b:7d:20:ff:3a:33:89:52:27:b7:45:73:bd:9f:
         87:25:fa:77:00:4e:bd:d1:10:be:49:ac:0d:5f:2b:f2:c5:d3:
         5d:39:1d:de:06:b1:6c:07:62:81:dd:d0:95:e7:28:bc:ca:96:
         8e:4e:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:54 2026 by rpki-client