Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File:                     cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier:          lnyK2wu7uoJGYw5/rv9ab4NjCoO8hKJ37h0Y3tKEQXU=
Subject key identifier:   97:BE:4C:0E:14:3A:8D:20:03:5C:C5:B0:E7:CB:B4:BC:2C:7E:60:82
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer:       /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial:       019F93923545E53AE32E03BF5568B4664075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 10:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:00 +0000
Files and hashes:         1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: 7eBwRD4+buO/ARR3SrjfNbdkjCEU8gwXPKjjolDzYNg=)
                          2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:35:45:e5:3a:e3:2e:03:bf:55:68:b4:66:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
        Validity
            Not Before: Jul 24 10:01:00 2026 GMT
            Not After : Jul 25 10:01:00 2026 GMT
        Subject: CN=97be4c0e143a8d20035cc5b0e7cbb4bc2c7e6082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:34:25:22:28:a7:e4:a5:cd:5f:93:07:f5:
                    af:a7:d3:c5:be:f3:81:cc:86:eb:bd:7a:5a:a4:3b:
                    f5:ef:fb:0f:74:45:67:e4:9e:03:d7:ee:32:67:0c:
                    e5:6e:17:a9:55:ac:a3:36:f1:f2:fc:1b:e3:c8:68:
                    0c:06:bf:6e:86:a6:d1:ee:e9:88:87:d0:48:3b:40:
                    19:b8:bf:a5:ff:31:07:af:41:04:38:1b:c0:65:33:
                    08:87:29:32:7f:bd:cb:86:07:89:d5:59:ac:3e:c1:
                    0d:b9:09:c5:21:97:46:e4:18:75:09:a3:05:46:bc:
                    c3:57:b9:c0:7b:2d:f4:8e:98:0b:5e:df:d7:ce:40:
                    f2:49:15:7e:fa:5b:51:00:8e:23:a2:9d:0d:e3:55:
                    e7:8e:c8:a6:ac:97:81:5e:3e:b4:e2:c9:80:4a:a0:
                    99:6a:11:ad:28:29:3c:a3:60:8e:8c:d9:4d:c7:f8:
                    df:8f:06:a1:55:43:53:45:84:27:28:d1:c0:d8:78:
                    dd:d9:57:63:b2:9e:45:39:ce:52:8a:6a:17:a3:64:
                    8a:37:e8:11:9c:0c:a1:cb:6e:be:78:d9:03:4e:1c:
                    01:cc:c8:ad:7e:f0:20:20:17:f9:f0:e2:47:52:cb:
                    8d:e4:97:30:48:26:ce:15:6f:09:e6:33:7f:82:b1:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:4C:0E:14:3A:8D:20:03:5C:C5:B0:E7:CB:B4:BC:2C:7E:60:82
            X509v3 Authority Key Identifier:
                keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:8d:ef:fe:72:d1:fa:ca:8d:16:6b:2e:59:ad:fa:f6:b1:
         c2:c5:ba:f9:81:0b:e2:1e:63:9e:c4:c4:a8:ec:c3:e9:63:eb:
         aa:ec:fe:9b:25:2a:5d:d3:97:e5:f2:8d:86:a2:c1:b6:18:9e:
         d7:fd:3f:59:27:fa:ca:4f:5e:5f:37:70:85:7c:12:5c:c7:af:
         a7:e2:c5:6f:0a:78:01:8c:ca:04:93:9d:19:ae:d2:7a:d4:a5:
         6c:98:fe:08:ca:a5:c0:39:58:ea:e3:91:67:c8:73:7a:60:41:
         49:5c:81:35:f1:e0:1a:66:65:6b:33:e2:cb:a5:82:80:1f:68:
         56:30:f9:9a:80:f3:c7:a6:53:86:78:bc:b6:c4:ed:fa:6a:3a:
         60:5f:b7:d7:b1:b7:f1:23:b6:b4:34:6f:87:6e:a4:48:df:7c:
         37:a6:f0:08:19:b3:ee:45:10:5b:39:6d:75:73:f0:0c:1d:a4:
         a9:71:55:29:7f:12:12:75:ac:63:73:77:3d:e2:4f:93:1f:33:
         67:89:9c:1c:8c:1a:f9:36:e8:db:b9:6e:a4:8c:eb:69:11:68:
         24:00:88:ee:ad:c4:c8:3a:06:e9:77:a6:56:3a:ba:fe:bd:59:
         6f:75:dc:19:d8:a5:5c:d4:18:84:3f:05:3d:84:33:60:da:f2:
         75:93:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:53 2026 by rpki-client