Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
File:                     0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft (raw, json)
Hash identifier:          KqudG8odvx2t4SrSooQDjhfGMbKg8OHiAHcYaAT7CtE=
Subject key identifier:   8C:42:F7:CA:47:F5:C7:1C:50:B5:99:B6:5C:4E:DC:3A:46:42:AC:62
Authority key identifier: D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
Certificate issuer:       /CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Certificate serial:       019F8F7F491EBF57FB4BF1791AB5B45E4E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:51 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:51 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:51 +0000
Files and hashes:         1: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl (hash: 0OfgFJo/7QCpd8cr4zLd22/APLjjTldcpK3SIEmBax0=)
                          2: qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa (hash: 3FmXs9BuOt1Pjw7qiwT6Cdmaqxnd0jXH41KNLGc1iSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:49:1e:bf:57:fb:4b:f1:79:1a:b5:b4:5e:4e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
        Validity
            Not Before: Jul 23 15:01:51 2026 GMT
            Not After : Jul 24 15:01:51 2026 GMT
        Subject: CN=8c42f7ca47f5c71c50b599b65c4edc3a4642ac62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:9e:4f:1c:26:23:53:81:b0:d1:b0:5b:0d:
                    1a:f7:c9:6e:dd:7a:f6:64:25:3c:b6:a9:a4:da:ca:
                    3d:64:5e:74:0a:75:7e:29:48:2f:e3:d4:65:6f:1c:
                    5a:72:10:80:39:85:3a:1f:99:11:0f:ce:f3:3b:3d:
                    1e:25:ff:72:a8:d4:f0:e6:0d:2e:9d:2f:38:fc:12:
                    31:12:92:29:b8:a2:e6:a6:69:08:6a:d2:db:fd:f0:
                    31:72:d4:6b:0a:4b:55:8d:27:91:f1:0d:1a:10:eb:
                    bb:6d:46:d7:a5:12:4c:af:dc:82:ed:97:0d:0b:ba:
                    55:e2:91:16:b3:9b:1b:db:ed:20:f5:f9:7e:f5:23:
                    1d:dd:55:e2:cd:b3:0b:ef:2a:0d:8b:20:9b:bf:11:
                    0b:84:ed:c1:26:82:1c:da:1a:58:af:16:08:35:94:
                    39:42:42:83:d0:32:2c:b1:04:74:a9:f3:d9:f2:93:
                    4c:da:83:53:3f:e4:f5:5e:49:d0:59:3b:bb:9f:f7:
                    e3:97:75:51:a3:2a:32:ab:c6:e2:9f:59:9b:28:c9:
                    c2:a3:6d:81:b2:07:86:0c:c3:49:60:b1:67:21:fd:
                    b0:48:b1:99:db:30:ff:84:50:3b:6a:7b:c1:8c:80:
                    58:64:2f:6f:ca:48:97:d6:ac:ff:a7:22:ce:7a:ba:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:42:F7:CA:47:F5:C7:1C:50:B5:99:B6:5C:4E:DC:3A:46:42:AC:62
            X509v3 Authority Key Identifier:
                keyid:D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:92:54:bd:b1:35:91:e4:f9:72:ed:97:b4:16:a5:4c:98:02:
         a8:2f:b9:8a:fe:85:58:d2:1c:26:07:6a:4a:ed:d3:af:0a:31:
         c2:b0:96:86:a0:19:c4:67:e0:7e:90:6d:03:8b:b2:9c:8f:17:
         c9:82:b1:6c:70:28:36:00:b7:2a:ef:5b:bc:04:08:99:b4:23:
         3d:14:87:b7:24:39:53:ce:b9:96:54:52:28:16:26:fe:d6:9e:
         4f:d7:f2:cc:09:d4:c5:09:5b:c9:93:92:01:ef:01:a0:93:b6:
         46:6e:6b:d9:35:da:05:df:ff:6f:d2:3b:89:c3:f2:06:02:37:
         72:0e:e8:43:7d:af:ba:e0:9b:40:e5:84:5f:61:8a:05:fb:e6:
         d7:ff:e3:a0:63:9d:30:3d:c2:f6:a1:e4:75:bb:4b:94:18:93:
         6d:f3:a6:94:82:72:8d:49:e1:45:19:6c:54:1d:4c:d8:95:56:
         15:68:d8:03:4f:5d:c4:38:df:9e:1f:2b:de:3f:cb:b1:0b:67:
         21:dc:7f:30:e2:75:41:5b:c6:cf:c6:9f:cc:a9:7c:76:8a:f5:
         b9:bc:32:80:3e:d5:48:07:e5:d5:5b:d1:cb:09:70:98:4d:3c:
         59:af:e7:7a:cc:08:41:fe:48:71:51:7a:2b:24:e8:f8:9c:5a:
         4e:b4:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:10 2026 by rpki-client