Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File:                     r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier:          Bsj723oR8HppdqEqN9aHH7kxZZgfl0RTDXRwO1JMpjs=
Subject key identifier:   B0:98:43:3C:F0:A4:3D:56:47:20:28:19:C6:B2:FB:5D:89:FA:FA:A9
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       019F8FEBBDEF2E362E7CC0008B22643E0BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number:          0AD0
Signing time:             Thu 23 Jul 2026 17:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:19 +0000
Files and hashes:         1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
                          2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
                          3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: 6HXd2CIrgKk1DTCzW57V/vukrIB9X1yCWv98vtYoJoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:bd:ef:2e:36:2e:7c:c0:00:8b:22:64:3e:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Jul 23 17:00:19 2026 GMT
            Not After : Jul 24 17:00:19 2026 GMT
        Subject: CN=b098433cf0a43d5647202819c6b2fb5d89fafaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:b9:0f:af:9e:ec:e8:86:0f:76:ad:f3:65:
                    ec:1e:c9:db:67:38:4e:21:fe:89:f3:a6:2d:f1:d9:
                    b9:3e:b6:3d:cb:4b:82:28:23:47:29:06:d1:a5:43:
                    8c:c9:8f:27:1d:eb:fe:cd:1c:a9:48:f5:29:ec:a1:
                    9f:70:5d:ef:91:78:80:86:73:11:55:30:0e:a0:cf:
                    d4:97:e1:0c:94:ad:86:68:52:59:23:e9:6f:6a:fd:
                    7a:65:04:6c:29:5c:a7:40:dd:73:e4:df:58:55:9c:
                    3e:92:a1:9e:b1:1a:d8:9c:82:fb:0a:f0:7a:e3:aa:
                    8d:f9:12:42:4d:ac:d0:ab:00:bf:48:85:77:04:d8:
                    13:30:eb:e1:00:ed:a5:2b:8d:a2:bd:b3:79:14:92:
                    04:0f:75:55:4d:d9:e6:f6:b0:22:88:a3:cc:81:9e:
                    c0:f6:4d:b7:f3:61:2c:8f:09:18:c9:04:51:f2:2e:
                    ae:d6:62:ca:53:c6:e4:af:12:ac:67:3a:f8:89:89:
                    d9:c2:2c:57:fb:ee:ce:1a:28:ee:dc:21:95:09:12:
                    ba:01:65:e1:c3:74:82:f0:79:5f:32:dd:c7:4b:1c:
                    f5:9f:e6:31:96:ef:6a:7f:ce:d1:b4:25:69:10:75:
                    24:eb:ee:15:7f:26:ba:33:0b:48:86:61:ce:48:21:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:43:3C:F0:A4:3D:56:47:20:28:19:C6:B2:FB:5D:89:FA:FA:A9
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:43:59:bb:54:b7:39:bb:08:3c:51:33:04:37:76:4e:bc:46:
         ea:a5:a3:c0:0a:c9:a5:ae:f1:3d:62:18:b6:36:5d:b1:57:c3:
         af:c1:4c:6f:49:ee:df:9c:f4:0f:45:5a:9f:b3:bb:cc:99:4a:
         34:e3:5d:30:44:c4:c7:f9:ba:4c:9b:2a:dd:49:c5:c2:4a:95:
         d7:b0:17:cd:cc:b4:54:c9:88:cd:75:3b:0c:d5:a2:a1:1b:11:
         e9:af:5c:a7:43:41:84:a2:b7:55:24:87:7e:47:e5:93:77:d0:
         dc:0b:04:b0:d1:0b:7c:9a:16:35:c4:26:0b:22:a6:c1:0e:c2:
         33:a1:9c:a0:9b:0a:6a:75:4c:6e:80:64:74:95:b5:f5:7b:77:
         6f:ee:f6:46:eb:a1:83:0d:02:3b:50:cb:45:b0:89:cf:2c:12:
         64:23:52:8f:8f:4d:41:d5:d2:27:25:fa:0b:ae:ce:d5:9f:56:
         83:38:00:3b:a1:bf:b1:81:cb:64:ac:ec:9a:a0:5a:d5:16:aa:
         77:de:64:d2:08:d8:d8:9c:ba:04:45:47:70:9c:74:d8:80:79:
         9a:e8:77:65:e8:62:d9:4d:59:d2:19:fe:e6:9c:36:4c:91:72:
         dc:d0:0a:96:10:5d:99:e9:e7:00:68:97:2b:b0:f3:39:0e:6e:
         c9:55:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:37 2026 by rpki-client