Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File:                     0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier:          NoEypjMwfnWkTD4s0kXpIt/FCtvUe/1rMZY/Ub4K2lk=
Subject key identifier:   7E:82:99:B1:0F:B2:DD:7C:F3:07:25:6A:15:75:A6:7B:17:22:2E:E9
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer:       /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial:       019F91DACF99A1EAE5A997BC2FFBC30632BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number:          1918
Signing time:             Fri 24 Jul 2026 02:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:04 +0000
Files and hashes:         1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: xEHezRJVraV6ValWsgaXvmpxkmIlZH0I0JzRDYmyeiQ=)
                          2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:cf:99:a1:ea:e5:a9:97:bc:2f:fb:c3:06:32:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
        Validity
            Not Before: Jul 24 02:01:04 2026 GMT
            Not After : Jul 25 02:01:04 2026 GMT
        Subject: CN=7e8299b10fb2dd7cf307256a1575a67b17222ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:31:7c:2a:45:69:e0:a4:78:ac:35:52:e3:
                    87:57:4b:2c:63:29:c5:80:95:7f:6a:43:0a:86:2c:
                    8b:a4:be:4e:78:ca:82:b5:8b:28:10:c0:33:6d:6e:
                    90:71:e0:49:33:25:75:a5:81:e1:23:7d:03:c6:e0:
                    97:af:92:10:8a:cf:e5:c6:72:ca:55:83:5e:dc:80:
                    14:9b:41:7d:8b:41:6e:4c:e0:3b:fd:34:84:83:3b:
                    da:5b:f3:3f:74:c2:59:0b:83:ca:6d:18:67:68:a8:
                    c6:04:bd:df:01:6b:09:c5:79:60:83:1b:c9:8c:b5:
                    df:ff:76:d0:57:e4:8d:e1:8a:01:6a:0e:87:bc:a3:
                    99:2a:b2:13:c3:37:7b:b2:65:5a:91:45:7f:a8:03:
                    88:ed:f0:73:dc:93:ac:e8:09:5b:26:0e:9b:94:48:
                    0d:23:f3:39:f8:9e:33:a4:1d:1b:fd:16:82:50:bc:
                    3a:da:c1:c0:07:b3:da:35:87:fa:e4:29:de:b3:51:
                    71:36:89:73:ba:f9:71:5e:b9:5d:75:fb:00:d6:70:
                    85:1d:ce:be:85:09:c2:74:fc:5e:23:f6:9a:d8:4d:
                    00:37:4d:9b:f3:70:de:60:33:ba:c2:22:cf:f8:80:
                    d8:19:80:d3:5f:2f:f0:05:c9:44:c2:4c:4f:fa:3a:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:82:99:B1:0F:B2:DD:7C:F3:07:25:6A:15:75:A6:7B:17:22:2E:E9
            X509v3 Authority Key Identifier:
                keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b7:e9:85:55:09:ff:08:25:1b:ac:de:54:d9:a0:ed:c6:07:
         14:c4:6b:84:4c:ea:39:85:25:86:30:0d:b7:fc:ae:00:52:68:
         14:00:96:e9:d8:89:f9:c8:24:d6:98:be:2f:e0:63:bd:1c:ef:
         2d:8e:1a:4f:50:54:77:da:05:e6:18:a4:9a:84:b6:fe:f1:67:
         ef:60:cd:bd:4f:f8:e3:10:52:82:62:c0:2d:16:d3:c5:ba:f5:
         da:6b:d9:c6:a2:4d:7a:4e:66:ef:96:b2:9c:0b:80:19:09:3a:
         77:06:c6:b7:73:4f:42:18:6f:0a:b4:e6:98:56:6e:80:ac:da:
         b1:06:51:95:16:9a:1b:5c:f5:f8:91:f5:ef:cd:7c:fa:bf:af:
         0a:4d:a3:75:3b:e6:16:15:b4:a5:f2:70:8f:29:ed:cc:1b:22:
         69:4f:a7:21:18:9d:e9:7b:2e:47:8b:a3:11:f4:71:07:ca:c0:
         6f:d3:97:39:fd:d7:56:0d:b1:06:cb:3b:f5:ab:e5:d7:17:21:
         1a:dc:47:db:83:1e:09:17:51:7b:41:7a:b1:33:87:f7:cb:42:
         1e:9f:6a:12:f8:45:b5:2f:54:74:43:7a:f7:b9:59:88:e4:28:
         34:b7:60:3d:2e:7e:4c:d8:3a:fe:4d:2f:42:a7:d2:89:50:c7:
         93:05:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:22 2026 by rpki-client