Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          tRQrRM3rtdcdekA1wyZoAgIjdVz5AoUiQ5fuxQt68wQ=
Subject key identifier:   81:D3:EB:BB:C6:73:6E:2E:72:1C:EB:9E:77:FB:0B:62:71:4E:21:4B
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       019F90C83458AB75AB3DFD83C6266129440D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          189D
Signing time:             Thu 23 Jul 2026 21:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:07 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: btaCD6qeKM/Hq6L5D1nba3Io+tqVPMJYPfuI0aVamNU=)
                          2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
                          3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
                          4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:34:58:ab:75:ab:3d:fd:83:c6:26:61:29:44:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Jul 23 21:01:07 2026 GMT
            Not After : Jul 24 21:01:07 2026 GMT
        Subject: CN=81d3ebbbc6736e2e721ceb9e77fb0b62714e214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:16:53:be:cb:68:ac:92:70:ba:b5:91:55:
                    5d:81:ab:df:c3:e2:b4:ff:7f:42:2c:41:7d:f6:02:
                    cd:c5:d1:b5:ab:96:9a:fd:cf:01:44:94:a5:45:04:
                    be:14:f1:01:12:b3:3f:61:51:e6:17:81:f9:bd:3b:
                    7e:7b:98:78:49:fa:b8:e5:e6:f2:c8:86:90:36:ca:
                    be:38:19:b0:86:7a:d7:72:db:17:ad:c1:fc:a8:be:
                    3e:74:97:8b:7c:74:1e:e7:f0:54:9e:b4:51:88:f1:
                    e7:4a:f9:fa:71:e7:7b:2f:5c:3e:52:49:fd:30:0f:
                    7c:9a:a0:34:fb:fe:d4:95:bb:49:e6:e5:34:1a:7c:
                    20:9b:ca:9d:3f:0a:ec:17:e8:06:c8:30:d0:95:af:
                    71:99:f9:e5:17:29:28:b7:3f:94:63:6e:90:21:a5:
                    c7:bd:59:a9:0e:3b:37:dd:87:5c:42:d3:7b:e6:26:
                    96:ec:5e:d6:6a:c5:02:f1:1c:25:34:3f:72:b0:e5:
                    43:5c:69:89:cd:d6:9e:4f:03:6d:8e:25:5f:e9:c1:
                    13:dd:18:35:b5:68:63:96:a9:53:47:70:cb:cf:99:
                    14:55:85:84:97:2b:fb:94:a9:67:a4:38:68:fd:15:
                    13:b4:6b:df:98:ce:ed:53:b1:f9:41:b5:96:5e:39:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:EB:BB:C6:73:6E:2E:72:1C:EB:9E:77:FB:0B:62:71:4E:21:4B
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:3e:3d:44:00:97:0d:a3:b5:4d:a7:33:b0:26:2f:8c:1f:
         8b:41:0e:26:2d:2f:9f:0d:22:59:2f:27:2d:e2:21:c9:99:98:
         52:b3:05:fe:8c:cd:2f:cf:fa:7f:1c:8f:92:a1:b9:cd:50:77:
         1f:ba:52:ae:63:7a:5d:48:ae:54:4a:75:1a:0d:60:78:b7:bf:
         d2:86:7d:a4:00:c7:91:4c:41:45:ca:21:e0:ef:75:77:84:d7:
         d6:aa:1a:8e:da:bb:1d:0b:eb:79:8e:bb:76:b2:6a:7c:3c:ba:
         f2:91:12:24:6d:c2:72:0f:65:0c:61:de:39:c1:5b:85:3b:67:
         ee:82:ba:e5:ca:58:25:df:0b:60:7b:d7:c9:4f:34:9b:39:45:
         9f:8b:07:64:d3:12:57:58:2c:bc:52:7d:7d:6b:a4:65:12:c8:
         cd:af:1f:2f:4d:71:2f:12:f0:fe:ce:35:ba:db:a8:e4:b9:16:
         18:68:ae:62:a6:3a:87:55:ad:d7:64:e5:71:40:35:aa:23:85:
         5e:14:41:c3:84:74:e6:52:f0:27:c8:1d:a1:75:5a:97:df:03:
         6f:ca:14:5b:62:fb:f1:2c:0b:3c:d5:6b:0a:7e:46:5d:7a:a3:
         68:c0:d4:06:e9:5d:a6:4b:01:5e:99:2c:d2:ff:fd:81:f4:7e:
         02:78:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:54 2026 by rpki-client