Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File:                     9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier:          YwE8z2/474jc029oP3+jYsptRpvyWAO6TrALiM4z2vo=
Subject key identifier:   55:36:A9:17:40:39:D8:D7:D4:AE:D0:CD:55:2D:51:A0:57:15:E9:D1
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer:       /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial:       019F916D7B35F6255BCEEDFFD6CE6750B09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number:          05DE
Signing time:             Fri 24 Jul 2026 00:01:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:38 +0000
Files and hashes:         1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: y9S16ZRB+pS8EJmobhvDxLmVg5g711FtVCCRCteJ/8U=)
                          2: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (hash: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:7b:35:f6:25:5b:ce:ed:ff:d6:ce:67:50:b0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
        Validity
            Not Before: Jul 24 00:01:38 2026 GMT
            Not After : Jul 25 00:01:38 2026 GMT
        Subject: CN=5536a9174039d8d7d4aed0cd552d51a05715e9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:be:56:5f:25:b6:b1:20:49:31:12:96:32:
                    b3:6a:04:6e:40:cb:15:51:7b:2d:d2:e7:4e:80:f9:
                    98:bc:38:ce:78:7d:48:8c:1b:e1:26:e0:f5:be:8d:
                    66:c5:b5:6a:0a:49:19:39:d6:91:51:12:c6:24:1e:
                    36:27:c3:aa:be:44:8c:73:39:a2:48:b0:12:0d:48:
                    d1:60:60:94:f3:64:b2:0a:95:72:1a:48:23:ce:42:
                    17:51:63:28:d4:04:3c:eb:2d:33:0b:2d:d5:ab:1f:
                    ac:4b:9c:32:d0:80:b5:f8:55:20:5d:64:87:12:07:
                    1e:23:e6:1b:c5:c9:b2:ce:49:11:74:74:67:1f:95:
                    3b:b0:e2:44:4e:dc:b5:49:ad:77:66:3f:5a:fa:8c:
                    09:0a:89:aa:96:18:0a:1b:e5:aa:d8:e9:28:34:77:
                    11:92:84:f6:7f:60:7a:f5:36:45:d3:02:3f:3c:c1:
                    eb:08:58:5c:f2:91:b2:7e:57:14:e1:13:40:0a:88:
                    d9:39:48:08:9c:ab:97:05:3b:21:db:09:d8:1f:6d:
                    63:7d:d9:f9:c0:91:f9:cd:4e:b7:a8:ba:4d:db:a1:
                    6f:d4:45:35:5d:4a:00:8b:08:dd:bf:f6:df:28:2f:
                    19:bd:3d:0c:6f:42:54:14:3d:ef:4b:f6:8d:ff:72:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:36:A9:17:40:39:D8:D7:D4:AE:D0:CD:55:2D:51:A0:57:15:E9:D1
            X509v3 Authority Key Identifier:
                keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:ad:b8:6f:df:fb:05:e0:80:47:b7:de:67:da:ab:28:ee:
         21:48:06:e4:a6:77:42:b3:39:be:cc:bb:07:6a:3a:07:c9:dc:
         e0:d8:17:c5:fe:7f:43:d4:e0:4c:7f:c0:91:d3:be:e0:ee:cd:
         ff:8a:b1:57:52:7f:1d:08:18:ae:ba:97:e9:79:35:85:f7:b6:
         8d:46:2f:8d:5e:be:d8:55:40:f3:55:2e:c1:73:c9:f4:fb:8b:
         7d:34:dd:0d:26:82:a7:57:d6:9e:46:3a:cc:df:8e:c9:c5:8f:
         8e:22:7d:ab:2d:bb:75:2a:0a:f7:72:a4:35:b0:51:39:a7:97:
         fb:51:04:67:db:44:33:4a:b8:3d:54:2d:d8:64:d9:02:b9:b0:
         1c:d4:d5:86:6b:33:56:df:3b:35:9b:6d:98:4a:07:7b:a2:02:
         f7:92:40:5f:89:cc:17:7e:9b:3e:91:91:8a:66:a8:8f:82:0d:
         16:89:97:0c:7b:f8:7f:7b:83:41:b7:6f:6b:8a:16:d9:6b:a0:
         f5:7a:fe:21:d9:73:ae:a7:55:84:8f:6a:66:f1:04:7b:9d:6d:
         48:40:f9:7b:f2:45:21:6b:db:6a:24:32:b1:a7:e4:08:c7:99:
         c4:aa:8a:c5:68:0f:79:fa:a7:60:62:d8:fb:56:12:6f:77:ec:
         ad:b1:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:02 2026 by rpki-client