Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          9WwRkXMue2izhE70AvIt4kcLCNMdkcGOc/cGqC0pVtU=
Subject key identifier:   AB:B5:5D:47:AA:9B:53:A0:D2:28:D9:B5:D8:4C:F6:F4:C5:1E:D7:44
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       019F92EDF2AC88DE2879536413F913A82537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          0E20
Signing time:             Fri 24 Jul 2026 07:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:35 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: ZC0xCZUGjF1YvhuQsAhMllyrV7isoUxGjJ7GILKmC/4=)
                          2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:f2:ac:88:de:28:79:53:64:13:f9:13:a8:25:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: Jul 24 07:01:35 2026 GMT
            Not After : Jul 25 07:01:35 2026 GMT
        Subject: CN=abb55d47aa9b53a0d228d9b5d84cf6f4c51ed744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:06:e8:af:9b:05:fc:8f:67:38:17:99:17:
                    11:6d:0c:2c:62:23:cd:92:6f:8d:e2:d4:e0:58:a1:
                    41:e8:a3:ea:69:ea:b4:39:e5:3b:58:05:d7:8a:03:
                    01:2b:3f:7d:c2:21:1a:05:b8:4a:02:61:12:e0:2e:
                    f2:7b:7e:ba:07:d5:35:9e:8b:cc:ea:7c:36:9b:26:
                    27:34:50:a7:fd:ee:ed:31:76:6f:2e:0d:3b:7e:50:
                    f3:87:91:ef:2e:d8:19:79:76:01:94:2b:0a:91:65:
                    92:90:70:d3:37:f8:bc:9d:c5:e8:8d:b1:e1:02:29:
                    7d:d9:43:db:d6:5d:77:ab:7a:e8:e8:53:c1:fa:84:
                    f9:aa:31:77:07:ed:83:62:54:79:50:b7:bb:4f:f6:
                    ea:c3:6c:e6:b2:04:c8:d8:ff:7f:2d:6a:32:1d:d3:
                    5a:d1:ce:b2:39:a2:34:59:bb:9b:47:63:29:c7:44:
                    2f:9a:54:3a:3c:db:f1:41:32:93:e0:90:4a:30:2d:
                    e3:21:e4:89:33:0c:fd:c8:0d:2a:ce:b9:8c:e3:3d:
                    49:1a:78:5b:cb:8d:87:83:c0:66:53:30:84:71:a2:
                    35:c8:38:2f:b3:39:4e:1f:bd:1c:64:a3:d8:4f:82:
                    77:a1:02:bd:ae:c0:ff:b2:44:1c:23:5a:b1:41:dd:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B5:5D:47:AA:9B:53:A0:D2:28:D9:B5:D8:4C:F6:F4:C5:1E:D7:44
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:40:b4:4e:d3:10:1d:91:53:e2:e7:c0:7e:1d:39:84:1e:
         e0:db:4a:ea:bc:5f:e8:77:a5:fa:da:65:9d:66:f0:95:ca:6e:
         b0:23:51:a3:30:95:55:3c:a9:50:c5:63:2f:67:9c:68:1b:99:
         e9:56:d4:e7:56:ea:35:4e:22:8e:7c:0b:e5:f4:c5:d7:5a:ff:
         a4:e9:16:f9:8c:a8:e4:95:45:f4:94:a3:cc:f7:f4:03:d7:53:
         d6:f5:0d:18:a0:03:0a:fb:b0:0c:1c:ff:01:7e:d3:3a:4c:f5:
         fc:a9:2b:3e:43:70:e0:2e:7f:6c:61:e9:e5:25:ca:d6:e1:04:
         53:20:8b:47:64:80:9a:51:7b:ec:d2:f8:c8:4e:70:51:5b:79:
         84:0e:d0:90:40:cb:5c:ac:bc:11:69:80:44:d4:35:8e:94:f0:
         b8:8b:ee:dc:97:75:a0:b3:4f:32:aa:b6:47:ee:a2:95:b7:bd:
         13:af:c3:0d:0d:ec:50:5c:e0:7d:be:6e:37:0a:c5:a3:83:17:
         23:56:72:4d:21:31:18:57:5e:26:08:09:4c:ef:d1:8d:eb:62:
         f2:d0:96:df:ab:6e:71:eb:bd:a1:a0:4f:0f:43:4d:87:90:04:
         f6:00:02:23:0a:63:47:30:7e:ae:55:8b:c4:7c:fc:a1:10:6c:
         c1:e2:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:19 2026 by rpki-client