Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File:                     Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier:          THeoOT6ZrDMNTz/99e4UIYA2qA2YE8RD3MqAi15zdVo=
Subject key identifier:   05:1E:E5:27:CE:76:10:C9:70:61:91:53:06:A2:F5:EE:F5:8A:89:10
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer:       /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial:       019F8FEBD5AD409EEC313C755642120F3305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number:          09DD
Signing time:             Thu 23 Jul 2026 17:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:25 +0000
Files and hashes:         1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: b5F5QeN0JvjAqXKbtWYB1iEis74q9FwFSm69PEaBn/E=)
                          2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:d5:ad:40:9e:ec:31:3c:75:56:42:12:0f:33:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
        Validity
            Not Before: Jul 23 17:00:25 2026 GMT
            Not After : Jul 24 17:00:25 2026 GMT
        Subject: CN=051ee527ce7610c97061915306a2f5eef58a8910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:ea:2f:7d:fe:f6:06:d6:30:8d:8d:d1:0a:
                    17:e4:ba:c0:3e:3f:a7:00:e5:56:e6:a2:a9:34:09:
                    b9:62:dc:81:8c:40:41:5c:9a:b0:0a:c7:f8:45:0d:
                    27:1a:a7:9c:a7:9f:2c:d1:36:f2:2f:1f:63:29:5b:
                    e6:69:f7:df:b2:41:2a:8e:35:c6:ea:36:c8:37:5d:
                    d8:5d:07:f9:43:1c:99:d6:6f:15:8d:62:69:de:10:
                    2b:ac:34:33:49:81:fe:13:13:8f:64:d7:eb:79:9d:
                    7c:c1:76:0a:83:2d:53:1f:c3:5d:1b:fe:76:52:c3:
                    f8:c9:6d:1a:5b:7f:6e:9b:cf:d8:74:41:31:29:79:
                    32:6d:6a:d3:cf:84:34:0f:5e:98:a5:7f:7b:d7:fe:
                    ed:4a:bb:bb:6f:bb:6d:50:a1:14:3d:e6:09:53:52:
                    bd:f2:30:4b:11:28:5d:44:d1:e7:91:69:24:3f:17:
                    2a:74:32:b7:ef:d1:cb:85:09:ab:4a:58:c4:14:bc:
                    41:44:3e:17:09:1e:0a:57:f4:ac:08:7b:51:9e:52:
                    01:92:02:c8:ac:de:1b:4d:2a:de:c4:da:25:f7:4a:
                    12:99:ac:03:04:31:a1:51:ef:5c:1e:00:dd:4b:b7:
                    c8:87:56:94:3b:b6:9b:93:1f:00:32:e1:ec:05:d1:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1E:E5:27:CE:76:10:C9:70:61:91:53:06:A2:F5:EE:F5:8A:89:10
            X509v3 Authority Key Identifier:
                keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:48:3e:f3:ec:92:49:4e:e5:b4:62:35:b3:36:7d:06:66:
         c1:32:ed:cc:53:33:60:4e:16:e9:0a:c2:a4:98:ea:ce:27:4c:
         5e:af:c6:c8:b9:92:af:ae:64:26:9d:a1:a8:f2:5f:be:b3:ed:
         d4:ac:cb:81:23:73:1a:42:7e:d9:c9:8f:57:79:f9:20:e1:4b:
         b7:84:8f:c9:2a:6f:ff:92:b4:ce:cd:84:9d:fa:73:df:fb:4b:
         13:9b:cc:e6:43:55:b3:c1:4b:7c:17:68:80:b7:90:95:00:74:
         73:d3:c2:c6:b2:eb:34:46:b3:8b:02:33:6a:92:6b:87:fa:ed:
         ee:80:d3:4f:fc:a0:3c:b4:fc:42:04:f4:0f:ac:98:fb:6e:44:
         90:8c:d8:0e:43:67:b0:7c:56:48:9e:12:3c:eb:4e:09:64:61:
         d4:26:67:6f:c7:0b:f0:08:a7:9e:39:ea:b2:e2:d7:ad:b5:0a:
         74:60:e4:ed:28:64:cb:5b:94:70:3e:97:d6:3d:6d:f6:03:9a:
         03:86:64:8d:06:db:a2:47:49:5a:d4:4d:2b:39:89:66:4b:6c:
         da:66:0e:b7:50:63:ec:03:13:f0:ff:a4:a4:89:62:e0:76:0c:
         89:a3:cd:72:89:4d:b6:41:b5:c6:d7:1d:bb:0c:80:56:06:80:
         e5:26:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:10:24 2026 by rpki-client