Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File:                     9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier:          3WIeax4ACS/jFMjWM/IHn4o1W3+uakj/qNpxtQFpC/w=
Subject key identifier:   BC:3E:E2:99:39:87:19:0E:34:80:FD:A7:87:63:48:01:7D:6C:B1:7A
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer:       /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial:       019F935BFBE54E7BB16FB4611F4D350C8A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number:          13C2
Signing time:             Fri 24 Jul 2026 09:01:46 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:46 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:46 +0000
Files and hashes:         1: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: YXmGM/RXv4GNE4HBFlIhzd1J1ICnXlQLFKTlKM1DGI8=)
                          2: Q4ZIJI1vYpM5qyo29zUc5N-1r8k.roa (hash: 76giCIoxYSJ7Qzdp7ynPuA05qyt7r6q9BXWslTdrOTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:fb:e5:4e:7b:b1:6f:b4:61:1f:4d:35:0c:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
        Validity
            Not Before: Jul 24 09:01:46 2026 GMT
            Not After : Jul 25 09:01:46 2026 GMT
        Subject: CN=bc3ee2993987190e3480fda7876348017d6cb17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:5c:a0:a1:3c:95:e5:1a:d6:2b:79:b9:22:
                    ba:e6:25:38:eb:3b:ab:d7:bb:9a:98:f7:2c:49:ed:
                    e8:c3:82:e1:d5:a1:74:04:c1:76:62:d3:97:0e:83:
                    f1:5a:f1:e4:01:a1:05:d2:30:8c:ed:6d:ac:4b:ec:
                    62:4a:dd:61:17:0c:da:67:ca:ef:c0:89:38:d5:5d:
                    a9:b8:cc:17:ab:33:3a:c4:39:0a:ca:b4:df:04:c9:
                    3f:92:22:e1:4a:6d:c0:85:95:05:64:3d:f2:95:ce:
                    b6:68:a8:3a:72:f3:c0:8b:39:45:d6:ff:26:e9:9d:
                    7c:2d:1d:83:bb:cd:00:d4:ab:71:be:8c:c0:be:6c:
                    c9:33:95:f2:61:e1:a6:e0:d5:75:2f:fe:a6:19:63:
                    23:78:80:08:aa:2c:86:e9:d9:ad:50:22:97:b6:d7:
                    a5:d7:75:c8:4b:87:e0:b8:20:51:21:59:1d:ad:39:
                    6d:7b:37:86:38:7b:42:79:0b:78:b8:75:07:06:dd:
                    71:9b:5f:22:c8:28:ec:8d:0c:3c:bd:09:06:f7:58:
                    ca:74:fd:58:80:ac:6d:43:a1:f6:66:f0:47:c9:74:
                    b0:3c:e6:20:fc:5c:2d:78:43:7e:a4:2b:4b:d6:c9:
                    98:b8:19:0d:8e:91:6a:ef:39:55:cd:45:30:ec:07:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3E:E2:99:39:87:19:0E:34:80:FD:A7:87:63:48:01:7D:6C:B1:7A
            X509v3 Authority Key Identifier:
                keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:5d:14:a4:14:a0:03:3f:a0:2b:ed:1c:4f:a3:b2:28:d4:
         f0:90:6f:83:7f:c2:85:9f:5e:85:92:fc:ed:a0:10:dd:f2:45:
         ba:24:57:c9:9e:0f:9d:f2:da:0c:24:74:ff:27:ea:0a:e1:f6:
         49:79:74:ea:b7:22:0c:0b:7a:c9:87:d0:c1:c0:c4:97:95:2c:
         43:12:6a:1e:7e:54:11:12:86:36:64:23:64:36:99:4a:9f:84:
         13:cd:09:d0:58:26:99:20:ec:64:8b:73:e1:e6:79:2a:61:4e:
         0c:32:5e:4f:11:af:2a:c0:86:2c:4d:75:fe:c5:ec:b8:69:b1:
         d3:09:f1:59:50:1a:5f:94:ec:f9:95:80:60:3d:05:12:55:76:
         77:bd:30:e6:80:fd:7a:d9:e4:6a:48:f4:77:04:6c:37:7f:eb:
         aa:2a:d2:51:9f:d4:72:bf:7b:de:b3:3b:78:d9:9b:13:4b:57:
         9a:9e:87:cb:d0:ae:da:4d:1c:65:5c:88:86:69:79:e2:1a:2a:
         dc:d4:97:15:f2:fd:2e:88:79:16:88:c6:09:d2:d6:a4:7c:dd:
         b9:ec:37:d1:93:47:41:ae:5b:4e:ae:37:0b:24:23:b1:38:8e:
         98:7a:bd:f4:23:8b:24:38:2f:ba:c2:b9:9b:27:30:f3:8a:4f:
         65:2a:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:48 2026 by rpki-client