Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File:                     Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier:          1UTk/RE4ZQqEatybecSrBywmEJAz1sISGwPTs06ngSc=
Subject key identifier:   8B:C8:31:BE:E0:A2:DB:A1:D1:05:4C:EC:C7:E0:92:41:D1:EF:DC:5C
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer:       /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial:       019F8FB4D3565D718BDA46DEACC191416E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number:          09A7
Signing time:             Thu 23 Jul 2026 16:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:20 +0000
Files and hashes:         1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: Jc1ryU5WPFz+7/EvIGFc6EpDk/NojT0nmDdkBQ8cokA=)
                          2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:d3:56:5d:71:8b:da:46:de:ac:c1:91:41:6e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Validity
            Not Before: Jul 23 16:00:20 2026 GMT
            Not After : Jul 24 16:00:20 2026 GMT
        Subject: CN=8bc831bee0a2dba1d1054cecc7e09241d1efdc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:3d:5f:6d:7d:31:34:7d:ca:e8:53:c2:14:
                    af:84:26:71:37:32:20:18:f9:f6:e0:92:35:b6:12:
                    5d:ba:25:8a:db:a4:1a:6d:6f:68:72:fc:e9:11:89:
                    fe:ab:9e:18:1a:8f:fb:9d:17:af:14:a9:6f:2e:23:
                    6e:e1:8c:d8:b7:fd:c2:51:0b:1f:ae:06:de:95:8e:
                    68:10:dc:6b:b7:04:0c:1d:57:aa:7f:07:03:65:c8:
                    f9:cd:76:90:4d:20:25:37:86:8b:8d:ed:f3:cb:ad:
                    b8:28:58:c5:fa:7c:39:a7:42:a5:7d:41:e2:80:fc:
                    17:1e:a3:08:0d:cb:42:8d:1b:4d:49:98:6e:80:54:
                    ee:26:a8:73:e4:99:c6:e0:0a:4b:55:04:b7:5f:ab:
                    e1:8b:f0:47:61:11:aa:ae:57:17:1e:a5:0e:57:63:
                    10:15:d0:7c:07:0b:73:e7:79:67:f0:00:36:ca:5e:
                    05:29:95:d4:d0:6c:84:3f:37:64:4f:da:12:46:13:
                    8e:44:1d:a2:ee:79:e3:e7:74:31:66:61:e4:94:69:
                    47:5c:6b:16:57:3e:bb:de:6f:09:87:e8:7a:9b:6c:
                    03:5f:8e:e9:28:0c:3c:26:6e:5f:ea:b7:33:af:69:
                    19:e6:12:11:33:b2:75:ef:98:fa:d7:57:b5:29:d0:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C8:31:BE:E0:A2:DB:A1:D1:05:4C:EC:C7:E0:92:41:D1:EF:DC:5C
            X509v3 Authority Key Identifier:
                keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:02:bc:32:35:40:17:94:4c:77:33:30:dc:d5:7e:f0:b2:8f:
         98:b3:62:a6:39:e1:1c:62:25:8f:c3:0e:65:29:a7:d3:fc:21:
         90:3e:bd:15:96:b1:55:b3:5b:be:eb:03:77:a9:01:a1:3e:be:
         e1:7d:a3:6d:e4:3a:1e:5d:cc:36:2b:55:f2:d4:b4:4d:bf:67:
         72:b7:3f:0b:4a:50:2b:c6:20:42:d8:43:76:9c:ae:bf:d6:af:
         1b:80:d6:b1:59:c5:c7:8d:a6:4d:c1:c9:e1:8c:78:39:04:35:
         20:aa:d0:02:79:4f:53:61:bd:90:56:0f:ce:e7:1d:5e:50:a9:
         e0:d6:b2:82:20:2d:a0:84:60:49:14:2e:b2:a1:c1:06:12:1a:
         f4:26:da:b7:10:97:0a:f3:09:6c:3d:ee:2c:c5:c5:d9:d0:63:
         4f:a3:2a:d6:7b:b6:5c:8b:db:f9:ec:e8:57:5a:b2:f5:2f:35:
         26:53:f0:cd:15:08:14:61:c8:41:62:c5:12:39:05:4a:e5:59:
         68:a2:29:52:ec:33:91:9f:36:68:7b:93:87:92:5f:70:7b:13:
         c3:ae:17:c8:6d:70:3f:9b:18:18:d4:b2:33:f0:11:68:99:a5:
         89:53:bb:21:1b:1b:e5:f7:cf:5e:4d:67:89:a4:74:c8:7c:4b:
         e5:0c:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:24 2026 by rpki-client