Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
File:                     80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json)
Hash identifier:          pHTZ/SrE6AHVJlq8TbR5BFdNU5tvX4aEDoFsIsqpTLQ=
Subject key identifier:   97:10:BA:9A:AC:B4:EF:D1:6C:2B:DF:4F:96:45:21:61:F2:7F:D1:5A
Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
Certificate issuer:       /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Certificate serial:       019F9090C425B31D1D878271E3AFC7E8CCAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
Manifest number:          0DAF
Signing time:             Thu 23 Jul 2026 20:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:34 +0000
Files and hashes:         1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: R9gqpOlrk/wVjODEFReGozlSMLMA3gzJY+aysRtquik=)
                          2: nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa (hash: V73akF511kFqlwWUk+buaBhxPXu4PPDC0iD4dONZGKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:c4:25:b3:1d:1d:87:82:71:e3:af:c7:e8:cc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
        Validity
            Not Before: Jul 23 20:00:34 2026 GMT
            Not After : Jul 24 20:00:34 2026 GMT
        Subject: CN=9710ba9aacb4efd16c2bdf4f96452161f27fd15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:81:74:71:1e:ee:67:21:a5:2c:d3:55:de:
                    21:31:67:af:b0:b9:de:ff:6f:5e:82:3c:e3:a0:23:
                    f8:82:65:45:06:1c:ed:8a:66:68:c6:c3:b5:2c:4a:
                    77:2a:54:0f:a1:c9:e9:61:91:26:64:d1:62:95:45:
                    95:e5:24:7d:a2:c5:1d:2a:7f:73:4e:92:e6:6b:59:
                    a4:2a:a9:43:e1:01:11:1f:51:a8:1f:b9:b4:1d:d7:
                    a7:5c:31:0a:d0:ac:5f:32:86:c0:5f:88:59:61:c6:
                    ce:e6:6d:6d:4d:14:b2:ac:ab:c5:01:88:e5:9c:22:
                    74:ef:25:4d:40:bb:00:ac:9d:97:5b:53:8a:76:f3:
                    03:63:3a:eb:f1:02:6e:be:0a:26:4a:7d:42:e3:10:
                    a1:31:28:62:f9:77:ae:2e:42:83:4c:20:53:2b:d2:
                    b2:95:e7:18:f1:67:4e:64:29:92:69:c8:f3:7d:10:
                    96:31:d9:44:20:de:a4:fd:d5:9a:6c:7b:f4:81:43:
                    85:32:af:e2:3c:f0:0a:db:3c:dc:8d:eb:50:36:12:
                    b0:2f:fc:22:ea:9c:4c:78:47:13:23:03:0f:cc:22:
                    61:d9:ec:71:f3:c9:0b:89:b4:16:c0:4f:23:b4:c7:
                    03:39:ce:00:fa:65:7c:96:cc:fc:31:0f:ae:f2:85:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:10:BA:9A:AC:B4:EF:D1:6C:2B:DF:4F:96:45:21:61:F2:7F:D1:5A
            X509v3 Authority Key Identifier:
                keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:46:1d:2f:1a:fe:41:7c:95:7b:fc:3a:ef:9f:50:df:3b:
         a9:a1:30:2c:98:b6:48:64:26:2d:6b:ce:11:ab:7e:fb:3d:80:
         f8:4c:b2:48:4d:46:62:e5:5c:df:48:d3:21:54:a6:5f:61:0c:
         aa:41:55:28:b1:ac:19:89:96:3e:59:ce:ae:6c:14:ac:c3:83:
         7a:a6:6f:9a:c6:04:80:af:1c:0e:a5:c7:47:fb:0a:0c:eb:3a:
         15:f7:46:16:e0:0c:c2:50:bf:6d:6a:e5:fe:0b:6b:5a:5a:f2:
         e1:cb:1b:b8:61:33:0b:b5:0e:43:3b:be:62:ba:aa:98:90:01:
         6d:5e:6a:77:76:40:be:85:0c:08:81:4c:63:29:d4:63:c7:ea:
         e4:24:1a:c3:ad:f8:c0:81:28:b3:ba:e8:6b:07:f2:23:7a:c6:
         a8:f8:c3:88:bd:70:3d:ab:d0:4f:5f:b0:0b:5e:c4:e1:f1:42:
         f7:13:77:62:75:41:d2:8f:89:5d:0a:0c:72:27:ad:fb:76:77:
         ca:a5:4d:11:4f:b2:d9:43:c4:16:2a:14:33:c7:7a:a5:88:25:
         86:5e:8b:2d:f5:e0:b0:da:27:ff:46:e1:8c:27:1f:22:da:f4:
         a1:e4:4f:b8:e7:64:07:1e:c3:3b:c5:cc:60:b2:c2:f5:7f:10:
         8b:69:e4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:43 2026 by rpki-client