Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          DY0bVnNrf057zMF5Ju47ry+8On8qDI9KlOWVTG7QRVc=
Subject key identifier:   7E:61:BD:FC:BB:F2:8F:59:28:F0:18:5A:24:2A:F6:54:58:78:13:C5
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019F927F41BE92D4EB31946DCA6EB016D7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0E67
Signing time:             Fri 24 Jul 2026 05:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:40 +0000
Files and hashes:         1: UCdBL2cD1nASc373rfpJddfKBRk.roa (hash: lFmC2crxbHri6/LBkNCkhFFRFW/esHZK/bXeT9XM8CQ=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: THn7VeUpA7JlT5Zh5gNDmfRIKkVouANhrFPUVu1E5Yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:41:be:92:d4:eb:31:94:6d:ca:6e:b0:16:d7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Jul 24 05:00:40 2026 GMT
            Not After : Jul 25 05:00:40 2026 GMT
        Subject: CN=7e61bdfcbbf28f5928f0185a242af654587813c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:f7:71:ef:fa:79:fa:85:90:c4:3e:f5:d3:
                    0d:4c:68:e3:25:e8:86:30:77:be:54:1e:2d:9e:1b:
                    78:36:79:64:70:50:98:8f:9d:7c:6d:93:03:f5:d2:
                    86:e8:c0:f1:4e:75:63:6d:5d:83:ea:f7:3d:d9:f7:
                    50:36:bd:b9:9b:3f:9f:d5:e8:f7:31:30:a0:16:c9:
                    a8:f6:dd:bf:d8:2f:d5:40:82:a0:2e:e6:8c:3d:80:
                    3a:97:23:11:9b:e9:ff:d6:f7:11:c8:e7:89:53:c4:
                    dd:2e:54:84:ac:25:1f:8d:a4:23:88:37:91:79:56:
                    0c:1b:58:f1:31:67:95:3e:52:82:09:1d:0a:bc:fe:
                    19:5c:7e:67:69:21:65:c8:6c:e6:a5:44:57:60:7b:
                    47:f9:5e:4d:1d:10:a9:26:51:87:88:a2:83:f6:a0:
                    c5:1e:35:02:9d:74:1f:eb:9e:18:35:0c:86:e4:7d:
                    cb:e7:58:5c:7d:9a:ce:ad:d8:10:b0:8c:53:96:77:
                    df:4c:62:06:f0:c9:3a:d7:5b:e3:f0:0f:fc:32:2f:
                    43:25:13:d4:22:51:0e:68:f9:d7:02:f9:48:06:fa:
                    82:71:c6:69:7c:e7:70:30:46:53:40:92:a0:99:bb:
                    bc:f8:92:88:5f:84:1c:68:42:e5:43:97:b8:ef:7d:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:61:BD:FC:BB:F2:8F:59:28:F0:18:5A:24:2A:F6:54:58:78:13:C5
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:cf:f7:93:d4:80:86:0e:62:08:ad:ef:37:83:b5:e3:42:
         27:ac:da:c9:75:10:02:91:6e:af:72:df:0f:af:03:44:ac:f5:
         63:db:06:21:3d:8e:c3:6c:ac:f7:4a:36:97:9c:c8:0a:2c:88:
         51:db:d2:04:3e:91:df:b4:ce:81:d1:29:29:3a:46:bb:9d:9d:
         76:48:fa:97:b1:20:3c:7a:ff:d1:55:fe:3b:41:4f:8e:c3:d5:
         00:ba:b5:17:c8:5a:4d:9e:6b:3b:1c:19:74:6d:fe:a5:3d:9a:
         d9:54:7a:a4:93:63:38:d0:a8:ac:28:f8:67:d8:20:fb:df:e1:
         d4:84:5f:75:e3:2a:cc:5e:3b:8d:d2:8d:19:7a:86:36:1a:51:
         66:4a:15:9f:dc:d7:08:70:58:03:99:1a:80:7c:45:04:85:be:
         86:03:25:5d:97:b7:e0:7c:40:c1:ae:f8:37:51:3d:1c:69:17:
         a3:6c:97:d2:5b:b0:22:ea:d6:18:71:da:11:9e:b4:8c:d3:ea:
         be:02:36:8f:11:09:5f:67:7d:7f:23:f9:86:de:da:e1:dc:f3:
         ca:f0:e8:c7:b5:6b:66:5e:f3:30:fa:bc:00:72:e1:32:28:da:
         fe:34:04:92:a7:b8:41:74:d3:97:6b:6a:9a:23:47:42:7d:df:
         26:85:70:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:59 2026 by rpki-client