Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File:                     cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier:          z1SsBnxGUFDvTJ4xOqzirm/fFZWKsY9mjkSNAjioRUE=
Subject key identifier:   58:E8:91:63:F9:B7:C8:4E:03:F0:92:19:E5:D9:A8:B4:BD:33:F0:1A
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer:       /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial:       019F9324382F659812CDFA10FAC91B984023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number:          0E06
Signing time:             Fri 24 Jul 2026 08:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:52 +0000
Files and hashes:         1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
                          2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: E0s9uPrrjGnsHCnQnZ+pYbl1ceFxd0/Ov6gxw4PKS/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:38:2f:65:98:12:cd:fa:10:fa:c9:1b:98:40:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
        Validity
            Not Before: Jul 24 08:00:52 2026 GMT
            Not After : Jul 25 08:00:52 2026 GMT
        Subject: CN=58e89163f9b7c84e03f09219e5d9a8b4bd33f01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:dd:ec:fb:80:8d:0b:c2:db:c2:85:ae:36:
                    b7:73:19:99:f3:68:29:66:42:d6:42:d8:10:c2:7a:
                    66:5d:e1:3f:d8:6c:f8:bc:6c:0f:50:a1:2c:f8:74:
                    16:9a:76:b8:31:08:3a:8f:e8:b9:76:fa:40:b8:f3:
                    8c:69:67:97:9f:46:8c:45:f7:3e:d3:24:da:02:25:
                    8a:48:77:b0:49:82:31:20:66:6e:44:41:3d:5e:14:
                    d1:c0:e2:a1:fa:31:71:8f:97:68:9e:95:56:d9:e2:
                    9d:42:22:a2:53:e7:a9:76:96:33:53:73:cc:52:1e:
                    52:98:8f:0b:db:32:05:c1:77:20:54:5d:7f:2f:0c:
                    02:54:70:d1:ae:89:27:cc:2f:dc:67:bf:b6:08:6c:
                    6a:64:4f:b9:0c:97:b2:35:9f:be:5a:8f:9b:13:3b:
                    ab:f6:a1:7b:61:18:37:62:96:b2:61:40:00:71:d1:
                    53:32:42:f5:02:0b:2b:49:2f:97:4f:87:23:b0:56:
                    d8:c7:3e:67:f7:e4:13:19:8a:60:9d:b0:1f:2f:2e:
                    f9:1e:e8:76:ce:c6:a2:a8:dd:19:12:15:1a:d2:65:
                    61:10:07:78:a5:9f:1a:e9:03:1a:45:54:bc:39:8c:
                    9b:86:d1:e2:4b:f0:38:80:1e:58:4f:aa:97:94:3c:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:91:63:F9:B7:C8:4E:03:F0:92:19:E5:D9:A8:B4:BD:33:F0:1A
            X509v3 Authority Key Identifier:
                keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:93:ac:2a:08:c6:53:22:05:1e:d9:46:1b:02:1f:f4:a6:
         9f:98:01:d6:94:96:c8:04:ed:ba:e9:1e:b0:d5:6f:bc:ce:73:
         a0:f3:38:db:2b:8c:7b:dc:a6:85:19:38:65:4b:4d:2f:27:ad:
         85:f5:40:94:df:d6:c6:7f:32:e3:c2:46:63:07:61:d7:52:a6:
         e9:91:c9:b4:1b:dd:7e:99:49:a4:68:bb:3d:53:5f:eb:51:9a:
         86:9b:ab:ea:52:b5:42:bd:3b:15:b3:4d:f4:3c:7e:8f:cc:d3:
         b4:47:7f:b1:4f:a7:af:fb:96:49:88:3f:30:c8:54:49:8f:9c:
         05:81:fd:b6:9d:05:1b:8d:38:71:90:81:e0:a4:32:11:46:e1:
         5b:34:ce:58:18:71:5a:f7:e4:e9:ec:80:e0:93:45:f9:c5:fc:
         a0:4c:51:97:3c:f9:e1:b1:44:06:ef:55:ed:d6:b2:e5:ce:6e:
         94:07:e1:d4:c8:1d:fc:4f:54:55:6f:5a:03:d6:94:10:f6:0b:
         d0:8e:33:17:1e:ba:b1:c3:a6:14:da:c1:b5:7a:95:c4:70:e7:
         d6:f2:e3:d0:5c:81:01:eb:cf:7b:66:50:2f:7e:0a:41:4c:d4:
         ce:a7:10:d8:fc:64:b4:09:c9:bf:d3:42:be:03:8a:58:70:be:
         b2:76:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:00 2026 by rpki-client