Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File:                     0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier:          HPtDaZXrSYCTC/EjHXt7TtMYcPJ15SM6qJMi3lB5UGI=
Subject key identifier:   65:FB:5B:7E:A5:F8:49:8E:56:60:6E:38:3E:13:28:AA:90:D1:22:FB
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer:       /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial:       019F8EA2AB4CE9ED40247DDDEFEDEAE611DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 11:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:52 +0000
Files and hashes:         1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: e+2MWG3UTDPvnHhm4gWNymu8a4KcOS5Nu7YHihjz04w=)
                          2: eIIxqZskipAH_XpPhKjF9X-64rY.asa (hash: VTutP00cFHBg9CdpBAccd7neZzunWQqoCOHiZUhg2dY=)
                          3: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:ab:4c:e9:ed:40:24:7d:dd:ef:ed:ea:e6:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
        Validity
            Not Before: Jul 23 11:00:52 2026 GMT
            Not After : Jul 24 11:00:52 2026 GMT
        Subject: CN=65fb5b7ea5f8498e56606e383e1328aa90d122fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:de:52:bd:f1:53:4e:12:1f:1a:45:c8:12:
                    30:61:06:0b:aa:f6:bb:c4:6b:a1:b3:81:ab:14:65:
                    60:ae:ed:2f:9a:dc:47:04:af:5d:0d:ed:82:fe:70:
                    bf:8c:65:4d:5e:bb:57:cd:23:c0:dc:e4:be:9e:cf:
                    8d:a7:8e:6a:79:04:0e:96:47:62:c8:b6:4f:5e:36:
                    fc:3c:3f:5a:6a:6d:42:46:58:26:22:b4:e0:f7:64:
                    05:ec:61:b8:99:63:9b:98:9c:b6:eb:79:ac:ab:2d:
                    81:0c:fe:53:5c:95:ad:3f:df:d7:44:af:2b:da:88:
                    de:56:15:f0:c9:20:8e:7c:c3:9a:44:02:4c:bb:f1:
                    59:ff:69:5d:57:8b:42:b2:81:5a:93:8b:85:0c:fb:
                    21:4f:d9:c3:4b:39:90:78:94:a2:3d:90:3a:b1:3f:
                    b7:37:27:89:87:77:83:69:04:ad:fa:27:d9:7f:8e:
                    9e:16:f0:96:aa:66:06:31:92:d0:76:58:a9:75:ba:
                    39:26:38:5e:dd:95:f8:68:e3:cb:b2:7b:1d:cc:0f:
                    a7:28:b1:3d:18:5c:99:11:98:51:4f:40:59:1c:02:
                    c1:42:76:ab:c4:57:45:34:8b:bb:5e:e9:fc:5e:19:
                    ef:1e:b1:46:07:c3:16:98:b0:82:3a:00:fe:c2:c8:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FB:5B:7E:A5:F8:49:8E:56:60:6E:38:3E:13:28:AA:90:D1:22:FB
            X509v3 Authority Key Identifier:
                keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:41:63:f2:7b:38:0a:61:64:bd:5b:d4:47:db:52:d3:cb:2f:
         f8:cd:89:be:fc:25:1a:87:f9:77:97:6d:64:14:eb:4b:28:ac:
         dc:8d:a0:01:16:35:68:3a:de:1e:7b:0b:f6:5b:d4:23:ba:fd:
         b5:bb:5c:da:90:99:c7:01:3d:60:e8:1d:18:f3:9c:03:ab:4f:
         13:85:ac:86:2b:30:3f:d9:14:48:b8:bb:d8:26:8a:67:22:86:
         51:f9:c6:1f:bb:c6:e6:d4:8e:e7:60:a1:95:c7:29:ca:41:5c:
         27:45:0e:d5:03:e1:40:3d:bb:1b:4e:08:d6:cd:92:70:81:e9:
         20:85:ce:97:1c:ec:92:68:15:2d:49:0e:d4:96:4c:99:46:e3:
         9a:60:77:a8:fb:97:ba:82:dc:14:f0:e0:32:b0:c9:fd:49:7c:
         f0:6e:13:0e:7e:ae:34:b1:1f:0a:e3:b5:8d:8b:db:dd:29:e7:
         35:bd:da:22:1c:ce:50:9d:ad:82:c6:7c:25:40:50:36:3f:2f:
         08:bb:3c:ef:3b:c6:13:a8:07:24:c5:15:73:ba:2f:57:2d:d0:
         84:00:47:fd:e5:64:f2:a1:e1:f5:16:e4:e6:7d:44:d0:79:2d:
         9a:51:de:c0:68:02:2b:39:5b:5b:ac:30:90:ea:d2:af:b3:2d:
         f2:42:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:49 2026 by rpki-client