Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
File:                     0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json)
Hash identifier:          6i7GY0NQk1X3rj0mZA8ITUCiovh8f2YgU19xdQesIuM=
Subject key identifier:   60:AE:11:E5:78:09:D3:07:A3:09:72:0C:22:AB:21:4D:E5:1A:FC:3D
Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Certificate issuer:       /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Certificate serial:       019F902342438330A5E9F0FDC1F022FA9798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
Manifest number:          10A8
Signing time:             Thu 23 Jul 2026 18:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:57 +0000
Files and hashes:         1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: JNzI1xC3M2InJvq6lCow4McjDChk3jDYSOSTO4CnDhU=)
                          2: DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa (hash: pdxpKRsCb/8YBP2FJ+k4bPhM6JUzQTx+ikb3uy3CSBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:42:43:83:30:a5:e9:f0:fd:c1:f0:22:fa:97:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
        Validity
            Not Before: Jul 23 18:00:57 2026 GMT
            Not After : Jul 24 18:00:57 2026 GMT
        Subject: CN=60ae11e57809d307a309720c22ab214de51afc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:b2:46:53:97:db:89:23:9a:ed:61:80:d3:
                    3f:d9:9a:81:33:79:42:7d:94:38:94:7f:e2:c2:3e:
                    89:7c:67:3b:d9:6e:25:f7:70:6a:4f:68:1d:f1:b8:
                    ee:30:2a:ec:8f:a5:c7:73:c6:a2:a7:fe:7e:f4:5a:
                    d3:12:87:6b:9f:eb:c7:ba:cb:6e:69:a9:ff:ea:cf:
                    12:1d:0b:e1:75:07:9c:eb:83:37:54:7a:05:48:7b:
                    4a:1a:c3:9d:0e:83:70:af:48:ce:cb:90:5d:2e:d2:
                    16:5b:c5:fd:ca:58:88:8b:52:df:08:79:46:6d:49:
                    80:14:cd:0c:7a:75:c4:41:85:b3:50:30:cd:4a:f5:
                    83:3a:51:10:32:e6:1b:ca:34:41:1c:65:01:02:f3:
                    3a:41:64:83:f2:16:b7:39:6e:d2:9b:45:cc:75:e1:
                    94:df:92:02:4c:65:5d:a7:76:72:59:5d:da:3a:fc:
                    a4:8b:7e:38:e9:5e:7d:e7:ea:bc:4d:9c:b9:9e:5d:
                    59:a5:9b:76:ec:6f:d6:5f:5a:af:04:cb:89:13:4a:
                    b7:37:b3:a1:ab:a4:25:60:ea:3e:16:c8:f5:f9:53:
                    62:9c:3f:86:ce:81:73:1d:c5:74:40:83:49:0f:e2:
                    e1:9f:e9:1a:b1:9d:f8:c5:cc:a5:6f:17:66:ce:b0:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AE:11:E5:78:09:D3:07:A3:09:72:0C:22:AB:21:4D:E5:1A:FC:3D
            X509v3 Authority Key Identifier:
                keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:1f:ce:8f:a0:dd:ce:67:2d:74:59:e8:f2:39:22:ef:db:
         83:57:e7:ec:9d:a1:a4:51:86:96:24:0e:f2:f4:47:7c:5a:eb:
         cf:ce:d8:bc:57:74:9b:59:40:f0:86:60:41:5b:52:6c:17:1b:
         9e:ef:f6:c3:ed:91:f4:f8:78:af:a1:fb:13:b3:7e:c7:c5:dc:
         f6:83:ae:c0:90:60:87:2d:c3:cc:dd:e1:85:c6:82:68:a8:b7:
         2b:85:94:87:88:fd:22:d1:af:ed:02:15:cd:7d:eb:48:55:9f:
         9e:27:09:93:d8:a5:ed:fb:7d:5f:5f:d9:86:dc:70:1e:cd:f3:
         69:2c:a9:a9:5a:fb:79:6f:3b:b2:18:10:2f:2d:3f:4a:88:00:
         51:48:0b:47:05:2d:3a:7a:c3:8b:28:b1:c8:bb:18:5d:75:42:
         6c:dd:28:65:87:59:5b:06:5b:cf:55:44:a6:fe:bb:1a:f1:90:
         e0:8b:86:dc:ef:67:8b:7d:d4:db:81:95:33:96:d1:3f:ad:e2:
         34:f5:86:67:9f:16:dd:29:6f:48:0d:57:a5:77:36:d2:02:1c:
         5c:e7:8c:69:11:ab:03:3e:58:e0:c6:12:2c:ac:74:20:e0:71:
         d8:f9:77:31:fc:69:7a:5d:b9:ce:18:2e:37:37:6d:aa:0c:3e:
         fe:07:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:10 2026 by rpki-client