Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File:                     96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier:          +Aoe27uy4o0yr81+HFMPt7ZnB4HXtqQ9nEn8EWfwg4g=
Subject key identifier:   44:4E:2B:9A:75:61:6C:76:55:21:03:3F:D9:04:60:E2:51:83:32:39
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       019F8F1119FF50AB87817F5F66CB07B5C050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number:          0443
Signing time:             Thu 23 Jul 2026 13:01:30 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:30 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:30 +0000
Files and hashes:         1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: +wWV7MgCjz1OArTr5MmfW9lk0OmyG0MqdsJw2ir8nTo=)
                          2: ej84eEjBZh5_TuoVktQ40a1gkgU.asa (hash: MHSI1jdl5w4t+h/f8ee1s5/oMRUiSdGHj/rdZ+jynew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:11:19:ff:50:ab:87:81:7f:5f:66:cb:07:b5:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Jul 23 13:01:30 2026 GMT
            Not After : Jul 24 13:01:30 2026 GMT
        Subject: CN=444e2b9a75616c765521033fd90460e251833239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:68:01:af:47:94:91:8a:56:de:dd:f2:d4:
                    c5:42:87:62:96:e0:76:54:f0:c8:80:1c:e3:3f:ff:
                    e0:27:b2:ea:8d:2e:cb:94:cf:4c:68:1d:cc:06:f9:
                    30:3b:df:e3:2b:27:35:7e:82:61:73:29:c7:10:5b:
                    57:a3:47:42:73:08:1f:7c:84:4a:7d:9d:00:ba:59:
                    9a:2c:85:e3:51:77:54:68:eb:e4:07:64:7b:3d:28:
                    60:b3:90:87:b8:30:0c:d2:89:62:be:a9:90:36:42:
                    e9:f7:4e:7d:3b:4d:6a:88:39:ec:db:6f:ec:fd:53:
                    53:d2:c7:4b:f3:8a:b4:e6:5f:ea:55:62:c0:2b:c1:
                    29:ac:0d:ec:30:d0:5d:65:25:7b:e3:16:7b:3a:ba:
                    e1:bf:e5:c8:c9:17:f9:e2:2b:1e:ff:cf:67:62:cb:
                    d8:0c:bc:a8:0e:80:68:2a:a3:16:dc:5d:48:a7:37:
                    5c:80:0e:d4:aa:14:f7:d9:d5:38:f6:68:4d:87:64:
                    ed:cc:3b:20:ba:85:39:88:42:2d:a7:78:28:fc:8a:
                    e8:ba:fc:86:c2:38:48:8d:0b:ae:fa:27:97:a9:ef:
                    22:70:d9:23:a3:a2:a2:a2:c0:35:55:1d:6e:19:5f:
                    62:08:cf:40:91:ff:30:e8:85:03:0e:60:4b:43:92:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:2B:9A:75:61:6C:76:55:21:03:3F:D9:04:60:E2:51:83:32:39
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:10:aa:12:49:32:31:de:e1:b7:0b:92:89:2f:d8:37:c4:
         75:5a:c9:46:69:8f:a2:dc:e3:68:cf:58:ba:9e:c9:94:4e:8f:
         99:09:96:31:21:dd:dd:65:1a:c2:bb:24:8c:1e:67:0e:2d:e5:
         03:4f:79:36:0a:b1:cf:f3:70:28:98:16:67:c5:03:e4:3d:c2:
         10:94:52:61:65:5a:21:61:fa:06:22:f7:29:27:34:78:81:db:
         3c:8d:b5:62:25:e3:ce:5e:af:24:c6:87:9e:84:6e:41:70:41:
         b3:87:b5:a9:20:14:4a:74:92:84:76:cd:cb:cb:79:11:e9:6d:
         15:cc:64:f9:39:4e:f5:43:1d:29:7a:09:34:67:ae:b9:57:5b:
         5e:1e:19:3f:ec:cc:d0:32:f8:9a:1f:e3:71:b7:12:e3:0f:82:
         96:db:73:e4:a9:93:75:0c:70:94:18:8f:8f:4d:86:0c:fb:e3:
         66:fa:a9:fb:33:a2:f3:c0:86:c0:b6:2e:2d:64:6b:2f:b4:0c:
         c3:64:9f:d1:f9:03:56:54:e9:7b:0b:65:52:47:2c:7b:36:44:
         5a:1d:03:4a:c2:e6:bf:fe:4f:ca:35:db:e3:b2:1a:c4:09:20:
         b8:95:56:9a:2f:2c:03:c0:27:0c:c9:5b:b7:64:e8:97:64:85:
         16:e8:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:23 2026 by rpki-client