Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          b30fVo/1tkg2io70fdjxv0ixhq1yD2c8IKHxG+IynZk=
Subject key identifier:   B6:B8:A7:89:F6:29:A7:E2:B7:8E:07:F3:64:5C:9C:AF:CB:D2:32:E3
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       019F92114DD69568199E23A9C5CD01F4F05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          14F3
Signing time:             Fri 24 Jul 2026 03:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:35 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: 86DFb5jY9fwpIRpZVB2VukxiF/URLus4l0kPTWbXveI=)
                          2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:4d:d6:95:68:19:9e:23:a9:c5:cd:01:f4:f0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Jul 24 03:00:35 2026 GMT
            Not After : Jul 25 03:00:35 2026 GMT
        Subject: CN=b6b8a789f629a7e2b78e07f3645c9cafcbd232e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:07:4a:44:9c:27:6c:9f:ef:8a:d5:42:27:
                    97:14:c3:3d:bc:81:07:ec:a3:2e:6f:4c:1f:0b:d4:
                    8c:8f:98:1d:29:9b:31:62:e2:d0:a5:00:48:3a:68:
                    69:59:2a:89:f8:2f:dd:09:ba:c6:7b:29:5e:71:f7:
                    89:35:13:5d:9f:34:d4:11:39:30:ae:37:10:96:23:
                    98:bc:68:6d:73:68:4e:fb:5b:30:07:a6:0d:81:40:
                    6a:10:4e:8b:90:a7:df:9f:7d:d0:15:34:fa:35:93:
                    6d:7f:74:c4:3d:1e:75:83:0e:cd:9a:23:c5:02:32:
                    4e:59:6a:cf:2f:7e:80:03:92:67:00:63:21:40:5e:
                    aa:85:83:0b:11:ad:cb:d3:01:78:2d:8d:68:a4:70:
                    8e:a9:2b:9b:98:95:5d:c2:72:d6:da:e0:a7:79:16:
                    5b:06:c4:8e:e8:fb:0c:de:c8:20:94:5d:14:ae:37:
                    bf:19:03:c8:fc:89:4c:fb:eb:59:7c:a6:73:26:b1:
                    df:45:21:4e:8b:9e:cc:1c:dd:ed:a5:65:cb:7f:60:
                    7f:b1:de:66:37:8c:67:6f:3e:bf:b0:17:06:9f:38:
                    14:8b:0c:81:97:4d:98:ca:c0:c8:b6:6b:96:88:af:
                    d6:7d:b8:69:fe:3c:a5:10:12:51:ae:b6:cd:79:bc:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:A7:89:F6:29:A7:E2:B7:8E:07:F3:64:5C:9C:AF:CB:D2:32:E3
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:51:6c:c4:ec:bb:ba:51:13:9b:14:8e:e5:9d:8a:83:37:cb:
         7e:e5:7b:fa:d9:68:77:63:60:5e:c0:4e:6d:b9:46:68:02:19:
         38:cb:18:59:0b:95:97:5d:8b:3b:a4:fc:d3:47:ef:7d:c8:b3:
         49:a6:5a:4c:32:65:4a:db:fe:e9:b5:2d:48:c7:44:96:15:39:
         8f:d5:67:f0:de:ec:b2:65:97:d9:61:dc:49:00:8c:0a:c1:b4:
         9e:bf:18:94:7d:0e:17:10:fb:62:e1:17:b4:fb:20:ff:65:0c:
         df:7f:74:e0:4b:85:a7:af:97:38:89:16:17:63:dc:3d:ad:18:
         bc:86:c8:2a:4e:1a:d0:68:5b:98:ed:89:2f:b0:cd:fa:79:d4:
         de:a3:7f:e8:58:11:7e:5c:69:73:5c:38:07:1b:74:69:64:9f:
         a1:5f:c5:eb:37:02:4d:8f:7b:4a:03:ee:35:a7:aa:68:2b:01:
         bd:bc:bb:95:a1:2b:85:a1:98:cb:a4:83:af:67:7f:36:5d:b6:
         f0:34:d5:b6:20:f6:27:3d:73:6e:28:80:ad:ff:c3:75:32:1c:
         f7:0f:e1:85:7d:b4:f6:3d:b6:00:dc:28:9b:7e:98:a5:79:29:
         64:a2:b9:e2:ce:c6:fc:ff:61:5f:2a:f0:13:f2:eb:fe:ae:27:
         c1:bd:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:04 2026 by rpki-client