Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          z7r9meaQva6hj0QPyYyr7dwPw/iGObVM+mdhhmPkmTk=
Subject key identifier:   49:38:68:EA:19:0E:B0:02:25:0E:EB:4D:58:50:53:15:61:E3:8F:C5
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       019F92B65C93C5DD556F7C93800028CC14DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          08FD
Signing time:             Fri 24 Jul 2026 06:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:52 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: n1+AITbTLXVl6dobTdwzULQZ2kBJZPHC9MX/SejVmtA=)
                          2: BYWS08eTtraOfHT_fVMPk7guHlM.roa (hash: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E=)
                          3: PiwQrJXVrX4qSCMDoPit1fwGxYw.roa (hash: maZooA2YaSXCCk76FIXDQQ5gHOUIoguMUZYt68Zbq38=)
                          4: XlbisSjtE0VEsvYZfBE1a7SwnPo.roa (hash: ywquchTaiRzJ9EyzBmBuS7GF3u7LPVkY7qatrsHV8Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:5c:93:c5:dd:55:6f:7c:93:80:00:28:cc:14:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Jul 24 06:00:52 2026 GMT
            Not After : Jul 25 06:00:52 2026 GMT
        Subject: CN=493868ea190eb002250eeb4d5850531561e38fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6e:56:57:5f:a5:e9:e7:45:82:9e:7c:88:1f:
                    af:b8:23:e7:ea:0c:63:f8:f7:ba:c8:da:5d:5d:ed:
                    bd:da:66:cf:d7:98:77:23:57:0c:26:85:54:fc:7f:
                    58:77:4f:7c:7d:86:4d:e6:a8:1f:d8:d2:f8:9f:1f:
                    c0:36:9d:5b:c5:ab:af:60:0d:73:77:8b:dc:b1:9f:
                    61:3b:63:68:ad:a9:c8:e4:48:9b:7e:6e:20:a4:5a:
                    3f:3b:8f:85:b8:3d:75:1c:ad:e0:f4:0b:3d:b4:11:
                    96:0f:56:21:ad:4a:42:40:23:ee:27:55:37:1d:ab:
                    86:d6:a8:5f:48:61:8c:10:0f:4b:f1:f7:5b:0a:86:
                    b4:2d:08:f0:a0:46:44:04:8a:d6:fb:91:bb:28:e1:
                    e7:ce:90:c7:10:e2:32:b6:df:21:be:50:1e:2b:34:
                    12:f3:48:92:98:0a:ce:b2:b2:5b:0f:0d:e5:7e:f2:
                    ab:f8:36:0e:37:6c:54:b5:37:bd:83:95:29:80:ad:
                    78:b6:48:b3:7a:89:f8:ee:1b:a9:3b:1b:f6:84:c6:
                    3a:0e:7f:bd:b5:75:1a:28:60:9b:94:af:73:6e:b9:
                    be:93:2a:00:98:be:09:a7:e0:1d:4d:40:1e:4b:8d:
                    a2:9e:e9:e3:be:91:00:e8:4c:88:71:65:4f:2d:f9:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:38:68:EA:19:0E:B0:02:25:0E:EB:4D:58:50:53:15:61:E3:8F:C5
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:94:25:43:c0:d9:67:fc:50:da:fe:b3:ca:8d:b1:80:ca:
         ad:1a:ea:22:92:cd:f7:6f:21:dc:6b:24:75:eb:74:8f:22:a5:
         68:05:e6:77:93:9e:87:22:58:dc:0a:1e:c2:6a:37:41:6a:09:
         a5:d8:24:7f:99:c8:b2:5a:59:e8:56:da:a1:70:5d:4e:af:c2:
         21:22:ca:03:3c:05:c1:58:c2:59:71:c9:cb:8e:e3:0a:2b:8b:
         c9:34:b2:1f:28:fd:68:0d:33:61:ea:2b:d6:1d:cc:0f:92:97:
         72:31:a0:38:1b:7c:0a:3e:c8:e9:e1:15:13:b8:81:cf:fc:1e:
         98:95:46:25:ff:51:19:4f:0f:37:77:e3:8e:a1:e8:b3:8e:07:
         4a:31:83:c3:02:26:5a:be:59:be:22:66:c0:5b:ee:a9:10:32:
         05:77:e3:95:03:de:24:5f:f8:a8:f2:6c:49:d7:18:07:cf:f4:
         60:a5:09:a3:25:c9:7f:d3:25:44:76:0d:06:32:ea:72:8f:54:
         f4:fc:6e:ca:19:7f:04:04:36:a4:90:6d:d0:14:9f:e8:a7:81:
         88:14:46:d9:2a:57:b5:76:2b:73:22:8e:1d:ae:77:05:20:b2:
         4f:d0:b3:e5:ad:f4:48:c1:43:ac:82:65:3a:b2:c8:c6:23:18:
         66:00:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:37 2026 by rpki-client