Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          uNy7yjJFfd6KfRUYYPVMxlpkdaWbW609zkp74F2TKFM=
Subject key identifier:   A6:AA:C6:4A:5F:AB:33:12:C0:38:AC:67:15:05:1B:48:C7:04:BD:67
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       019F90C78016989E2C73C405FCB25666031C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          0975
Signing time:             Thu 23 Jul 2026 21:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:21 +0000
Files and hashes:         1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
                          2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: 8Q+4tiDuZWntEwVKTmWON5iayzkrsJCdU7VLaJ7Ripc=)
                          3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
                          4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:80:16:98:9e:2c:73:c4:05:fc:b2:56:66:03:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Jul 23 21:00:21 2026 GMT
            Not After : Jul 24 21:00:21 2026 GMT
        Subject: CN=a6aac64a5fab3312c038ac6715051b48c704bd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9c:85:a9:f0:60:05:69:d9:1f:c3:fa:1d:c7:
                    db:a9:72:a7:ff:ed:6f:f1:07:7d:aa:b4:de:ae:d8:
                    b5:61:00:3d:5c:f7:e2:08:87:97:0f:5a:bf:27:db:
                    5e:a4:2b:5f:89:a2:5a:38:c6:55:01:b7:db:e7:69:
                    97:f9:0b:38:d2:53:c5:a1:62:ac:a3:1d:96:af:ad:
                    e5:d3:5a:f8:02:3f:1b:25:16:4c:48:15:ec:f9:b5:
                    ec:fc:42:71:c0:44:78:67:c5:63:13:f8:35:5d:fc:
                    38:74:66:33:03:e8:cc:52:aa:1a:d2:7c:04:95:35:
                    9d:53:71:f1:e1:c1:64:5c:27:25:a2:de:22:cf:9f:
                    7f:4a:77:03:6a:f5:9f:8f:69:b4:f2:89:c4:1b:f7:
                    11:d3:7c:73:91:18:9b:8b:9c:9f:28:45:be:d3:ec:
                    fd:b7:d9:6f:fa:f4:f0:82:1e:8b:ab:e4:40:4c:08:
                    f7:b4:5a:d2:5c:6f:61:ec:be:f0:e3:19:44:60:a4:
                    a9:42:0b:96:7c:7f:77:7a:86:60:6f:a9:57:d6:57:
                    36:f1:8c:52:0c:72:5f:d5:31:2d:72:62:b4:82:4d:
                    57:68:78:24:d2:1d:cf:9f:cd:ad:74:cd:43:ad:e2:
                    77:d1:7d:d2:5f:68:25:51:8d:6c:5a:e8:1b:45:bb:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:C6:4A:5F:AB:33:12:C0:38:AC:67:15:05:1B:48:C7:04:BD:67
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:f7:6e:c7:76:06:13:34:bf:cc:ff:16:09:b2:0b:c1:2b:
         f3:0c:ab:cd:da:10:5c:3e:55:77:6a:a8:32:99:65:0b:7c:e6:
         e8:c7:fb:50:51:f9:c8:f9:b7:d1:9c:1f:9a:11:7f:b5:ab:8a:
         90:4b:00:bf:bf:e3:21:a7:b1:25:51:16:6b:89:e3:94:12:03:
         f3:58:40:9c:00:bd:b5:6f:46:83:c3:bd:86:d8:ae:e5:77:d5:
         f9:2a:5a:3e:05:de:e5:cb:7e:ac:ad:5e:80:39:22:12:6a:24:
         fe:c7:c3:1f:84:a2:99:6e:46:db:fb:b0:33:54:d2:12:fe:7c:
         6b:47:97:f2:1f:bb:74:d6:78:80:53:40:64:90:6a:de:05:a1:
         87:a1:85:f6:58:f6:73:bc:fd:31:9d:2d:af:34:ab:1b:31:46:
         4e:34:6f:0f:c1:72:39:ca:4c:ca:2c:79:c4:b7:1b:af:6e:48:
         5b:31:2d:e7:0b:49:75:78:1d:65:d6:09:df:01:07:51:a8:4a:
         a1:94:db:e6:4c:53:fd:2b:18:d2:8f:b5:e2:8a:f5:34:a3:3a:
         a6:f3:07:3a:5d:14:9f:67:9a:2d:1c:cb:a2:71:0b:fe:a7:bd:
         f5:7e:fa:4b:ef:f1:f6:db:8e:13:36:78:db:b8:86:a3:7c:13:
         5a:d5:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:03 2026 by rpki-client