Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier:          K0X5etBhODQ0pjj0EbK+3YWRFD1jNwEgEPVGWqiZhGE=
Subject key identifier:   8D:B8:95:50:D4:88:B9:97:F6:59:26:EF:6E:AA:A5:81:C8:31:E5:56
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer:       /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial:       019F93C989F93A06EB828891DBDBD6921393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number:          1070
Signing time:             Fri 24 Jul 2026 11:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:26 +0000
Files and hashes:         1: 59tmjDQfU-ncRC8Varmb6pF2lz8.roa (hash: 3aX8v2tZST5i3tJwk6iAtRnox6a+RxiF+ijUKhsx+YE=)
                          2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: IbYQtpwdg8gtTl+FXykDMc178smWiG6CAERZPiCekHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:89:f9:3a:06:eb:82:88:91:db:db:d6:92:13:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Validity
            Not Before: Jul 24 11:01:26 2026 GMT
            Not After : Jul 25 11:01:26 2026 GMT
        Subject: CN=8db89550d488b997f65926ef6eaaa581c831e556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:20:4b:55:78:5f:7f:7d:ee:ab:8b:18:c2:
                    17:65:27:11:14:31:99:52:f3:5b:07:75:94:f4:53:
                    3f:1b:22:93:fc:fb:a8:23:9a:57:4f:c0:64:a2:93:
                    a7:ab:eb:78:97:83:bd:69:4f:85:7b:98:4a:7d:39:
                    3c:be:29:99:89:1e:77:68:b4:e6:64:6b:2b:a8:a0:
                    8c:38:97:5f:8d:54:a9:50:4d:1e:12:83:39:30:cc:
                    63:d9:23:1a:f0:95:22:e9:62:14:20:d4:84:43:51:
                    5d:c9:c6:f5:87:76:4c:d6:28:26:91:14:f7:4a:2f:
                    5d:fc:dd:74:d8:57:e9:fe:94:03:de:a9:5a:37:86:
                    e1:81:c5:cf:71:db:9c:5d:a3:58:1c:c2:dc:1c:ec:
                    ec:1a:9a:ec:93:49:12:c4:71:0d:ae:6e:07:a9:84:
                    eb:7e:5c:11:00:72:f2:a3:ad:47:22:dc:55:eb:a9:
                    a2:62:92:e7:47:5c:24:0a:f2:26:6e:f6:66:99:6e:
                    f7:ff:40:f2:af:e0:a5:69:fa:3e:14:36:86:69:8c:
                    8b:42:05:11:43:e5:79:fb:30:8c:a2:c9:71:9b:94:
                    59:c8:74:4d:94:90:89:58:7c:ad:be:60:74:a9:49:
                    0b:f1:e0:36:86:dc:07:84:c0:ac:73:5d:89:ed:8f:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B8:95:50:D4:88:B9:97:F6:59:26:EF:6E:AA:A5:81:C8:31:E5:56
            X509v3 Authority Key Identifier:
                keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:1f:ca:cb:ab:43:21:4a:18:cf:37:45:a5:18:61:2e:55:
         77:27:34:7e:0c:dd:3d:80:e1:e5:bb:cd:a5:1f:2f:52:4f:72:
         af:a1:10:da:c9:cd:72:b9:1b:e9:a3:3c:e4:9a:96:95:5a:0e:
         15:20:d6:61:66:2b:79:cc:3c:f9:7a:08:c4:7d:03:50:d8:3d:
         29:c2:49:14:ed:26:cb:df:77:1a:bb:4f:8f:b3:3a:3f:d9:09:
         50:b7:ac:e0:b3:50:9c:59:7d:b4:5d:8d:50:73:1f:c7:67:e1:
         bb:76:c6:e2:7b:41:e5:aa:cb:be:43:0b:52:95:b3:db:da:c1:
         00:6f:22:9e:58:40:5b:18:b0:49:25:12:13:da:69:16:c1:12:
         d3:95:98:a0:50:bf:80:b2:85:dc:2c:d3:94:94:97:27:bf:18:
         7c:f3:21:04:7e:cd:d4:a3:9c:53:f9:12:c9:0d:48:20:3a:c9:
         0a:90:43:16:52:e2:74:09:85:ea:59:47:5d:e4:70:68:66:8c:
         79:2a:20:04:91:43:24:cd:41:b7:e2:c8:12:d0:3b:4f:ee:43:
         58:1e:b7:8b:86:ae:4d:0d:eb:84:dd:05:ca:71:9e:6a:2b:35:
         e1:4d:7b:95:c8:49:fc:ab:e0:17:1d:8a:55:bc:c9:8b:6a:3a:
         b5:89:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:05 2026 by rpki-client