Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
File:                     91anOU_9JyHWClrS6Saj0OHIu3k.mft (raw, json)
Hash identifier:          isloHQbyO5pDm23D6PpQnihUJQeBWqmmejD7DAfUrHo=
Subject key identifier:   E7:05:3D:23:B1:46:18:FD:9C:CC:8B:A7:EC:5C:CF:54:66:44:8D:54
Authority key identifier: F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
Certificate issuer:       /CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Certificate serial:       019F8F7EE5C22BA82B968E7BBAEB204771BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:25 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:25 +0000
Files and hashes:         1: 91anOU_9JyHWClrS6Saj0OHIu3k.crl (hash: LMC5MOHc6xYrC8FPTIZ5vp+0pRdsjQGVcVNykavzIcs=)
                          2: UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa (hash: xmWFoDrPk0aUWmQMRX8ayV7sBUWalQjY9fCBxeyV5bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:e5:c2:2b:a8:2b:96:8e:7b:ba:eb:20:47:71:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
        Validity
            Not Before: Jul 23 15:01:25 2026 GMT
            Not After : Jul 24 15:01:25 2026 GMT
        Subject: CN=e7053d23b14618fd9ccc8ba7ec5ccf5466448d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:f8:43:97:73:04:a9:03:6c:9e:5b:a1:f0:
                    aa:91:4e:7a:2a:6d:35:01:54:71:f7:a0:47:2c:39:
                    e3:e8:a0:55:d9:34:99:fa:46:e8:f2:50:9b:c3:58:
                    f9:7e:94:85:84:4f:d9:f0:d9:cc:9c:1e:23:99:7a:
                    4b:f9:9b:a8:d4:84:42:c4:14:83:ee:75:7b:4b:88:
                    7e:83:ea:90:97:d0:c8:52:5e:45:74:31:5e:2a:65:
                    7d:73:0b:39:eb:e5:9e:78:76:2e:61:9b:d0:54:4b:
                    3c:04:13:92:4b:ea:73:a2:ef:fe:e9:91:3d:7f:4b:
                    fd:ef:9c:27:ed:66:a4:57:a2:1b:af:37:08:9e:49:
                    61:4a:f6:d6:51:96:33:63:5b:fb:05:03:00:23:77:
                    cf:23:e5:31:cb:07:bf:a6:56:ad:f7:4d:07:e3:c3:
                    be:39:df:04:65:44:f8:c1:b3:3a:c6:82:8f:aa:94:
                    ba:02:c1:fa:3d:c3:3b:fc:9a:32:fc:10:31:3e:9f:
                    44:b1:74:e6:d0:0e:69:db:e5:fb:41:79:e9:f1:a0:
                    9e:90:4a:3b:4f:82:d5:5b:d4:20:fd:3c:45:d5:32:
                    d0:d6:8e:e2:20:f2:a6:8e:21:90:94:de:c5:63:5d:
                    2d:2d:e9:67:56:41:36:b5:50:17:0f:cd:20:24:8f:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:3D:23:B1:46:18:FD:9C:CC:8B:A7:EC:5C:CF:54:66:44:8D:54
            X509v3 Authority Key Identifier:
                keyid:F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:e8:b1:44:fa:88:d9:c6:6e:3c:b5:6a:cb:8c:a2:0d:d9:
         3e:12:52:e0:f4:a4:33:40:bd:dc:48:e4:1d:0c:98:fa:b3:53:
         a5:61:67:b9:af:d5:12:f9:e8:99:69:77:1e:c6:a7:95:f7:34:
         6d:dc:d0:82:e6:ee:3d:75:4b:1f:02:db:3c:83:13:9a:f8:85:
         11:40:31:11:f6:c7:10:40:11:52:5d:59:07:8b:21:c3:ca:fd:
         2c:f2:6a:dd:62:89:28:1c:e0:c6:6e:b2:52:26:52:68:8d:5a:
         8d:e7:38:1b:36:bb:0c:f8:d7:a6:35:bd:b5:dc:98:54:92:d6:
         c5:c6:15:f6:78:61:d2:bf:85:31:24:02:6b:1b:6b:83:eb:1b:
         a1:47:31:74:60:0e:e1:23:95:fc:a6:45:5b:ab:ea:af:15:81:
         41:d2:37:76:f6:79:76:d2:44:f3:c8:bf:d5:e8:10:de:5c:f3:
         4c:82:a7:e7:d2:82:ff:cc:02:df:50:9d:da:90:55:df:dd:77:
         c8:6c:46:24:6f:66:52:1c:86:78:e8:e0:e7:73:52:5f:fc:91:
         1f:6e:4d:fc:92:fb:dd:4e:f0:d5:2a:c9:56:31:26:d0:4f:f0:
         2c:c0:b2:15:24:ae:f0:a7:c1:35:41:78:c3:79:6f:77:72:a2:
         e7:df:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:39 2026 by rpki-client