Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File:                     0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier:          Xnnrp00TXFf+8uzrmXwxftc0vCHZt7elvMf6kIwzGbQ=
Subject key identifier:   7D:4C:27:64:3E:4F:2A:86:CC:F8:F7:1B:7B:27:34:84:15:0A:42:F6
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer:       /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial:       019F91A46B1E262262A2784E68BB844B50D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number:          0B5C
Signing time:             Fri 24 Jul 2026 01:01:39 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:39 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:39 +0000
Files and hashes:         1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: I3ApzHRLyLYEx2J75FQVC4Vc8UOCz0L7z1UnjR1IP7s=)
                          2: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (hash: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:6b:1e:26:22:62:a2:78:4e:68:bb:84:4b:50:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
        Validity
            Not Before: Jul 24 01:01:39 2026 GMT
            Not After : Jul 25 01:01:39 2026 GMT
        Subject: CN=7d4c27643e4f2a86ccf8f71b7b273484150a42f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:a0:85:59:cd:67:df:50:4c:dc:9a:f1:9e:
                    2a:44:54:c0:ae:e5:69:a3:61:e6:c5:57:35:04:e2:
                    9d:a9:40:73:e3:56:5f:af:93:a9:15:a8:0d:21:2b:
                    59:86:5d:df:53:96:a7:ca:5a:8b:7d:4c:4a:4d:bf:
                    69:dd:ec:df:71:c6:87:f4:b9:cd:0f:9c:2e:3f:ae:
                    ed:88:e0:cc:f7:ed:ff:dc:dc:f7:f8:9f:a8:4d:52:
                    b5:a1:15:93:b0:7a:93:2c:b6:e4:ae:71:9f:ed:87:
                    43:72:c4:39:46:ab:b0:25:c8:a1:7e:b2:4f:7e:b6:
                    41:ef:60:a5:a3:ce:ac:d4:a7:b1:16:c5:4a:54:9d:
                    d0:19:6c:bb:79:a7:87:9e:c0:46:f0:a4:08:64:92:
                    e9:2d:11:b3:ef:25:8c:0b:af:08:2a:85:60:0a:50:
                    a8:97:dd:4e:e8:0d:7e:28:03:48:c6:2d:2f:f3:ae:
                    0d:37:bc:59:0a:e8:f6:c7:a6:c1:54:6f:ff:c6:04:
                    85:34:37:89:29:ef:f6:53:ee:41:c5:18:86:7c:ba:
                    24:bc:b0:76:aa:4d:b1:02:42:ac:2a:16:29:6f:54:
                    9a:2f:82:fd:8b:eb:21:bf:5d:5e:98:7a:cb:39:48:
                    8b:bc:31:a7:f8:05:72:fd:14:40:c5:d2:52:07:6b:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4C:27:64:3E:4F:2A:86:CC:F8:F7:1B:7B:27:34:84:15:0A:42:F6
            X509v3 Authority Key Identifier:
                keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:26:23:b5:be:df:ef:a8:75:6e:d8:31:05:22:14:4a:02:
         0f:9d:17:b8:dd:f5:2f:84:51:6d:bd:a3:9e:dc:6e:83:4e:6e:
         8c:73:08:0c:d5:a6:3c:d6:2f:4b:39:f1:fd:5e:7a:d3:da:94:
         27:65:3f:91:ef:5f:c0:5b:81:e2:b6:3f:01:37:3e:c4:5f:46:
         de:9b:c6:45:be:ff:f4:db:6c:b9:18:ba:d4:64:92:71:3e:37:
         91:9d:13:4a:1f:5b:a6:3a:dd:c1:9d:26:e8:16:3e:e3:6e:44:
         e5:a1:f9:03:e2:bc:c9:6f:36:04:59:7e:f3:39:c4:8a:8b:15:
         8c:29:55:46:13:38:3b:67:55:a1:45:71:83:2d:6b:52:e4:12:
         42:13:87:72:ef:2a:4a:54:b0:9e:3a:43:8e:1b:bc:24:4b:ac:
         33:12:30:32:9e:31:8d:25:05:c0:d4:a1:d9:d0:39:94:38:01:
         1f:e6:cf:6e:cf:73:13:9f:59:2a:43:59:8b:a6:10:35:f6:a0:
         b9:b7:72:fc:35:34:ff:58:cd:bd:f3:27:e3:72:2b:3d:8c:a6:
         5e:e4:da:51:d5:df:39:32:28:52:87:2d:8e:38:74:74:ad:e6:
         29:80:4f:98:49:e4:8e:97:5f:05:d7:a4:44:22:3e:51:1c:0b:
         fa:85:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:20 2026 by rpki-client