Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File:                     haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier:          73D/RUZRKkJ0gk56llW5LZOqLBWyIvc/K6DwweZAoCU=
Subject key identifier:   09:88:46:44:36:55:D2:39:02:74:D2:9E:76:5A:37:F8:E9:3C:C9:B7
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer:       /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial:       019F92B66455030AA4FB1DB17D016D392E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number:          094A
Signing time:             Fri 24 Jul 2026 06:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:54 +0000
Files and hashes:         1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=)
                          2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: 2yqedcZUnBrmRH2IYIXjBUzaIibYqlZGTj10zkLcZng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:64:55:03:0a:a4:fb:1d:b1:7d:01:6d:39:2e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
        Validity
            Not Before: Jul 24 06:00:54 2026 GMT
            Not After : Jul 25 06:00:54 2026 GMT
        Subject: CN=098846443655d2390274d29e765a37f8e93cc9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:35:e7:48:23:d9:c0:b9:06:3b:a1:27:f8:
                    dd:8e:e1:04:f0:ec:b4:86:9d:05:61:14:cb:28:dd:
                    83:1a:da:77:79:70:2f:cf:ba:4a:4c:68:22:da:c8:
                    b5:bd:99:65:6b:13:22:d0:ee:5b:90:7e:2e:cd:7c:
                    01:0d:6a:52:b5:49:0b:47:0a:14:75:a0:37:2e:f7:
                    a1:a6:bf:75:ff:dd:d6:01:d5:78:23:26:bf:cb:22:
                    a7:80:e0:c7:a7:80:e3:b7:5f:57:93:b8:7c:20:32:
                    b6:24:49:c5:db:88:d1:32:76:a2:d8:5a:d4:b2:f6:
                    69:d6:e2:e9:d5:99:cd:d3:1c:b6:15:7d:c7:57:ec:
                    fc:8b:4f:d6:f6:e8:3c:8e:85:db:04:31:84:bf:a2:
                    c3:de:35:0b:70:ff:ea:3c:fc:84:02:51:8b:58:55:
                    1e:30:fc:b8:2f:dc:7f:e5:c6:f5:54:6c:ca:bc:1c:
                    98:aa:78:ba:c0:e2:73:1a:d8:d1:a8:fd:42:e7:2f:
                    e0:4f:18:26:9f:23:2d:b4:3c:c5:45:e4:0f:d6:1a:
                    99:ed:3e:1f:fb:e6:34:9f:3b:b9:64:e6:37:30:62:
                    e2:ef:9c:c4:57:de:05:4c:e0:9f:00:26:9f:41:e0:
                    37:1a:af:4c:0b:c6:52:65:be:71:8b:7f:2e:58:15:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:46:44:36:55:D2:39:02:74:D2:9E:76:5A:37:F8:E9:3C:C9:B7
            X509v3 Authority Key Identifier:
                keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:c6:db:4b:af:0e:f3:69:bc:4c:c2:43:90:92:3e:51:6f:
         bd:ce:e3:44:39:be:be:bd:f2:fa:76:a8:a2:d8:99:26:67:52:
         f2:da:3b:75:26:16:df:21:7e:55:ac:55:7e:2a:e4:69:3b:96:
         89:b7:93:0e:a9:0f:97:92:c4:a2:2d:fd:90:bd:2b:ca:22:f9:
         14:e9:72:c7:03:41:a1:43:cb:fe:c2:92:da:4d:26:5b:82:ca:
         99:3f:a9:c2:0c:bc:c9:7b:f4:8e:47:31:21:da:c4:f8:03:f6:
         bc:65:76:af:70:7e:b2:fd:61:db:39:94:68:af:42:f0:20:16:
         4a:fc:81:89:2c:cc:32:a6:71:61:41:4c:a2:79:62:17:45:51:
         f6:dc:92:28:ce:eb:91:e2:2c:3e:36:a9:7e:02:25:1c:1e:5a:
         31:38:53:ed:3a:2a:b9:c6:9e:24:c1:c5:4d:40:1f:1b:e4:ad:
         ac:98:0e:25:95:54:b4:47:ff:84:9e:d6:6e:8e:37:79:6f:53:
         45:7d:ce:f2:1e:33:c0:ed:e4:97:94:a8:92:00:31:a7:d6:91:
         7b:88:62:e5:25:9b:22:fe:b9:ed:a8:72:3f:12:cf:de:66:74:
         67:bf:bb:f4:fb:d2:67:b7:ab:10:17:ae:6b:07:7d:d3:35:2b:
         4f:89:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:45 2026 by rpki-client