Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File:                     mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier:          Z2fwjOxFJ3CIH+9uxg+AtbZzNVY8R1OCpk6Pzc/uKk0=
Subject key identifier:   50:15:D9:07:10:DA:4E:25:2B:D4:8A:17:52:1B:D0:07:0F:2D:B5:3E
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer:       /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial:       019F9512661D02C2112AF0385E490388217C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number:          0F23
Signing time:             Fri 24 Jul 2026 17:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:38 +0000
Files and hashes:         1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
                          2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
                          3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: L0Yd25rkZMy7/dV3HGGHWa5KwuEH3Dnbo+DqS61AUJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:66:1d:02:c2:11:2a:f0:38:5e:49:03:88:21:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
        Validity
            Not Before: Jul 24 17:00:38 2026 GMT
            Not After : Jul 25 17:00:38 2026 GMT
        Subject: CN=5015d90710da4e252bd48a17521bd0070f2db53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:cc:11:27:2c:52:71:91:af:6f:bf:2e:bc:
                    64:14:21:a7:52:86:18:4f:d7:2a:73:93:6d:7a:3d:
                    52:dd:4c:c0:1b:a2:23:e4:56:4f:d9:48:6a:a9:33:
                    23:b6:3f:e7:7d:37:19:a4:af:90:f8:0f:f0:3b:4c:
                    4d:e7:a8:27:9a:f8:32:9a:6d:fe:21:2f:bb:ab:23:
                    4b:1f:92:bf:eb:30:8e:63:0f:12:bd:6b:12:0d:b7:
                    45:b7:19:68:ee:16:f0:ef:f2:7b:4a:b7:f8:60:50:
                    33:aa:40:10:8a:ce:b3:c0:35:4b:0e:c4:03:31:39:
                    cd:50:86:28:86:eb:5c:ca:0e:d4:69:1b:a5:36:0d:
                    e2:f1:7b:88:d4:56:24:47:ae:d3:ee:da:51:c2:2f:
                    2a:4a:6a:a0:ca:0d:90:ba:73:e1:96:ad:17:c5:f0:
                    14:73:cf:a9:84:95:af:fb:04:bb:25:ad:d9:b2:cf:
                    e2:3c:f6:4e:da:88:b2:03:2a:0e:c4:21:25:f4:ad:
                    13:45:4f:bf:81:2a:58:aa:76:ef:50:0d:df:e9:d3:
                    8e:49:6a:60:a2:d3:a9:64:fc:ee:ab:1b:6b:08:68:
                    2f:e5:48:81:5f:91:bc:03:61:c9:0d:94:b0:11:ae:
                    12:d3:d9:63:57:86:33:ae:6e:6f:b7:72:a2:b4:40:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:D9:07:10:DA:4E:25:2B:D4:8A:17:52:1B:D0:07:0F:2D:B5:3E
            X509v3 Authority Key Identifier:
                keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:16:66:8e:b4:9c:3f:3d:0d:37:e2:e5:fe:b1:cc:1d:a4:4c:
         e0:cc:b9:7d:b5:85:09:f1:d9:46:89:94:0b:9b:17:85:ca:a2:
         7c:72:fb:9d:9e:92:8f:04:4e:15:77:29:7d:80:74:ee:a7:26:
         d8:62:00:02:d0:fe:65:8e:6d:8a:55:1d:b7:74:1e:73:71:7c:
         08:05:a7:87:b5:b0:f4:29:83:0f:4d:5b:b4:71:e7:e6:2a:28:
         aa:1d:dd:f8:d8:dc:0a:c1:0e:4c:82:47:de:f3:78:a7:26:db:
         7b:08:e0:8a:9b:08:ee:32:0f:4d:ab:54:f2:07:77:55:5b:bf:
         fa:df:36:0f:17:fa:d1:6c:79:64:36:5a:8c:0a:b5:6f:19:92:
         8a:90:9e:bc:a5:75:94:52:9f:5b:ba:47:ec:44:62:f2:39:58:
         e8:93:15:28:0f:c7:3f:81:04:0e:4b:72:74:c4:c8:28:55:c0:
         e9:a4:8f:4c:a0:92:b0:f9:fa:ac:f1:1b:1a:e7:ad:8f:67:a3:
         96:64:e0:1d:c4:d1:05:05:e7:a5:d3:78:fd:7d:14:f6:ab:87:
         fb:cb:59:98:0b:cc:0e:80:bf:b1:64:2f:e6:10:db:4d:1c:28:
         59:18:c5:71:c8:5d:1b:c9:6e:53:97:51:2e:05:1e:79:16:d3:
         aa:84:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:42 2026 by rpki-client