Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          XlswcnwBDoWVgEGD+hu5EW8myengSMJvz3Cf2P2rUPc=
Subject key identifier:   D4:96:1F:B4:61:16:F2:A4:BA:25:39:D6:AB:70:8E:DF:D9:82:F2:39
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       019F8EA266529C5A68FDEF6858E07C1628F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          0B54
Signing time:             Thu 23 Jul 2026 11:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:35 +0000
Files and hashes:         1: PVIvAggMAtuREjhV8GPK-EuHdx8.asa (hash: /yi4srMyiV+9qj1Uy16aZQoRy4KHU28OFJInXDw+3jg=)
                          2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: PDEWj03ar/bklxXGLX/IBkOFAQw4My1NN3vfLm5GhTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:66:52:9c:5a:68:fd:ef:68:58:e0:7c:16:28:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Jul 23 11:00:35 2026 GMT
            Not After : Jul 24 11:00:35 2026 GMT
        Subject: CN=d4961fb46116f2a4ba2539d6ab708edfd982f239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:5b:bb:72:ad:d4:96:b5:e4:a4:c8:81:20:
                    2e:b6:1d:80:eb:ef:d5:69:b2:7b:8a:f8:e2:0b:bf:
                    36:41:6e:00:e9:71:cb:68:cf:38:cf:dc:52:ac:76:
                    6c:18:36:04:1b:b7:66:cb:73:8d:0c:33:6a:5d:3a:
                    a8:24:29:a9:4a:f3:28:3c:9e:0e:41:4f:1d:16:24:
                    40:9c:ed:0c:c2:4b:e9:68:57:57:a2:18:ad:01:bd:
                    70:42:51:a1:a8:ba:e1:a5:01:2b:07:f1:51:c2:40:
                    2b:c7:1c:89:f0:ea:37:31:f6:f6:e2:b9:20:4c:9d:
                    5f:9f:b0:89:bf:c6:4f:a6:f4:5f:5a:62:ba:6b:f9:
                    67:7f:4f:05:8f:85:78:40:65:e9:68:3b:50:98:96:
                    ba:bc:38:f9:0a:38:9e:07:e4:ae:70:bb:72:3c:0d:
                    59:46:c1:75:b8:8e:9b:78:6a:41:8e:07:de:87:93:
                    60:d5:92:4f:54:dd:5b:58:68:74:fd:f0:d3:7b:b7:
                    46:1e:7b:3e:16:f0:2e:e3:27:fc:82:64:33:1b:4d:
                    91:09:90:d3:b7:fe:c7:2c:9d:e6:17:57:79:fd:38:
                    45:26:bc:09:72:46:b8:a3:99:2c:2a:34:19:02:ca:
                    94:ed:0b:26:b3:a4:c4:f5:57:7d:ad:a6:ed:d6:66:
                    6d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:1F:B4:61:16:F2:A4:BA:25:39:D6:AB:70:8E:DF:D9:82:F2:39
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:55:7b:5a:f8:55:48:4a:49:fa:a8:2c:c0:9e:14:79:4c:
         3f:73:e7:b8:0d:b1:d4:a2:aa:c3:48:9d:e3:50:47:22:92:6e:
         56:6b:97:15:9c:16:85:97:57:06:8c:55:a1:6c:a9:29:9b:2e:
         8d:69:f1:8c:85:79:43:17:19:5e:43:36:68:75:55:21:67:42:
         7a:f0:7d:a0:8c:89:7b:01:55:87:84:bd:f4:f2:5c:40:e6:b8:
         bf:98:1e:30:4c:6c:a9:e1:8f:0e:4e:15:c1:ae:a3:bc:0f:cb:
         87:4a:4c:4e:c0:dd:76:4f:0c:79:cb:38:d7:48:18:0e:e6:c3:
         28:d9:c9:8a:23:f5:66:77:2f:18:e9:d6:a3:fe:99:f4:7b:af:
         bb:d1:71:03:e7:b2:4d:34:38:fd:c7:2a:de:3a:28:22:5f:9e:
         06:64:ba:59:f5:c9:f4:d2:82:aa:20:99:bd:4d:08:56:3d:78:
         88:a2:ea:94:1b:86:53:c5:19:96:ea:3a:79:ad:3a:32:7c:fc:
         69:e9:b5:5b:fa:97:20:95:c3:06:d6:03:97:37:99:db:56:1c:
         90:c3:6d:67:03:99:c5:00:d9:6e:7a:a7:9f:3c:50:82:c3:4f:
         e1:b4:21:91:6d:06:7d:4d:3b:14:e9:d8:f7:da:97:5f:62:d2:
         63:0e:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:23 2026 by rpki-client