Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
File:                     88l76mwoNiWsmbJkJD6K1iNUZco.mft (raw, json)
Hash identifier:          02+pSGTHvA+87RNrSBZRqZIcYJP4MJ9c8eHvpHZcOaE=
Subject key identifier:   BF:DD:C3:F9:B1:BA:31:FD:23:BA:75:0C:EF:D4:C5:A8:5F:F1:CB:5F
Authority key identifier: F3:C9:7B:EA:6C:28:36:25:AC:99:B2:64:24:3E:8A:D6:23:54:65:CA
Certificate issuer:       /CN=f3c97bea6c283625ac99b264243e8ad6235465ca
Certificate serial:       019F916D63A595D3F41EB8529C8CB1189046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:32 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:32 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:32 +0000
Files and hashes:         1: 4Ov0JI_v7tP6AVK_zNZvfvoYzKc.roa (hash: gmmvZ4kv5G8/nDWnHozolqVwbEIVkGaSQ9wqwlKxhk8=)
                          2: 88l76mwoNiWsmbJkJD6K1iNUZco.crl (hash: X9DzSo2gbi7QF+37QWM2BBhb3nlztIAE65p/3yby78s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:63:a5:95:d3:f4:1e:b8:52:9c:8c:b1:18:90:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c97bea6c283625ac99b264243e8ad6235465ca
        Validity
            Not Before: Jul 24 00:01:32 2026 GMT
            Not After : Jul 25 00:01:32 2026 GMT
        Subject: CN=bfddc3f9b1ba31fd23ba750cefd4c5a85ff1cb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:c0:37:38:62:f0:eb:be:b1:6b:0e:e7:a5:
                    c2:08:6b:ef:45:b3:57:ba:17:bd:dd:b4:7b:7b:a8:
                    61:f8:5b:cc:ea:55:55:55:7e:b7:81:56:30:1d:ca:
                    cb:e3:c7:3b:df:8e:36:68:61:2e:8c:a4:25:77:27:
                    8c:cb:60:57:81:65:33:58:d3:54:2b:4a:f9:01:8a:
                    83:42:5c:1a:a6:28:30:34:cf:35:4b:97:b7:91:f1:
                    3e:fe:05:51:05:d0:13:ae:da:0c:1c:64:c6:3b:a3:
                    7f:2e:7b:03:64:aa:4e:29:98:b2:d6:77:1b:1a:01:
                    eb:26:ce:8a:96:6b:9c:07:dd:22:84:73:36:5d:85:
                    c1:95:a4:19:07:63:55:f9:23:40:8d:14:f4:d8:db:
                    fe:66:3f:de:63:0e:2a:bd:66:ad:e0:d8:c6:22:07:
                    50:3a:f2:f9:ff:87:76:f9:16:63:30:0d:c8:52:48:
                    96:5a:d6:fd:66:0f:9c:df:06:d9:e0:a5:cb:bc:f2:
                    84:a1:fe:35:db:d0:9c:e1:61:f4:89:d6:da:51:f7:
                    c8:06:e0:a7:1a:d5:28:80:3c:4a:e3:62:5c:1b:db:
                    89:7f:31:0a:f5:5c:2b:54:b7:c1:be:73:99:92:e0:
                    dc:3a:81:a6:d4:a9:c4:80:7c:ae:1d:d0:b3:7d:3d:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DD:C3:F9:B1:BA:31:FD:23:BA:75:0C:EF:D4:C5:A8:5F:F1:CB:5F
            X509v3 Authority Key Identifier:
                keyid:F3:C9:7B:EA:6C:28:36:25:AC:99:B2:64:24:3E:8A:D6:23:54:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:be:a6:8f:dc:28:dc:e5:45:02:5c:01:98:4b:f1:fc:54:
         64:6e:e2:6b:75:b0:a9:d5:f7:4b:75:a6:57:a8:5f:7c:1a:c1:
         e2:5f:c5:5e:9f:95:2a:df:50:ae:56:78:33:78:89:a6:c8:68:
         65:43:06:76:7e:3b:f4:69:70:e2:6f:e3:34:9c:07:2a:30:9a:
         4d:64:ad:4d:4f:e4:d2:27:40:f8:24:d3:88:97:46:a4:55:7d:
         b0:37:b6:d7:a1:76:f7:c9:be:20:0f:9b:a0:73:2a:f5:65:65:
         bb:1d:53:d2:be:86:2f:91:63:bd:b6:db:b2:71:72:0c:b0:33:
         96:83:58:e8:d9:5a:5e:b3:b4:7d:65:f9:75:f0:f3:38:92:39:
         18:e0:f8:78:20:5f:5a:c7:a2:f0:53:58:b1:48:ee:84:67:9d:
         42:d3:f5:3f:b1:21:5f:b3:ff:42:1f:f9:2a:e8:ea:79:f0:5d:
         f0:10:58:d0:28:85:e1:f8:3f:16:07:8a:02:00:e3:8e:e0:3d:
         3f:1b:62:d4:99:e5:05:bb:20:d0:cc:2a:64:ce:c4:7c:fa:3d:
         1e:db:0b:ce:7b:02:e1:31:85:53:b6:30:d8:44:1b:73:ad:35:
         28:43:64:25:d2:6f:9d:69:7e:f4:59:e5:fd:0c:c7:00:8f:fe:
         eb:18:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:20 2026 by rpki-client