Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File:                     a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier:          6BB1J7xnJLc/wuXMK1bhr5zot6CwjBtFQ4/Hka6O3Ko=
Subject key identifier:   E2:A8:F8:CE:21:3A:A0:5B:58:22:7B:1A:C4:F8:D5:11:CC:04:E0:65
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer:       /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial:       019F95EE79A76536796374ADCC1281966711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number:          0907
Signing time:             Fri 24 Jul 2026 21:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 21:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 21:01:01 +0000
Files and hashes:         1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=)
                          2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: YX5keqtyyiRFDGIT11TyqMFmxRwDkd7ICbvRV9ZJBP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:ee:79:a7:65:36:79:63:74:ad:cc:12:81:96:67:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
        Validity
            Not Before: Jul 24 21:01:01 2026 GMT
            Not After : Jul 25 21:01:01 2026 GMT
        Subject: CN=e2a8f8ce213aa05b58227b1ac4f8d511cc04e065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:2d:4d:11:8d:f4:08:92:b8:aa:f6:bd:25:
                    d0:5f:4d:d7:fc:d7:e5:5c:c8:ea:a8:36:02:cf:89:
                    06:fc:a9:fb:9c:85:cf:00:33:a8:88:4e:51:75:42:
                    eb:d7:b0:4a:69:fb:36:90:77:4a:d5:59:92:fb:b2:
                    0d:bb:f5:bb:f7:43:1c:b7:12:a7:12:e3:1f:88:84:
                    3a:7d:bc:f1:d5:e8:be:22:7c:2f:b0:ee:38:6f:ec:
                    73:aa:95:ca:e2:9a:d1:23:15:7c:b7:ed:3a:6f:24:
                    0b:1f:36:5f:01:c1:11:68:d7:44:33:1e:8c:92:54:
                    ca:02:03:20:ce:c4:2d:3f:6c:bd:dd:c9:b0:83:09:
                    35:52:b7:0d:72:a1:43:21:7f:1e:3e:3e:dc:c4:cd:
                    2e:0b:f4:bd:88:27:47:27:f0:ad:f8:1b:d8:e8:56:
                    57:b3:de:4d:aa:05:58:29:4f:0e:6a:cc:21:67:b4:
                    7f:e2:6d:19:b0:63:2d:2e:bc:ae:d2:0f:04:4b:6d:
                    3a:b9:ab:13:36:db:2b:bd:64:00:18:e4:f9:a7:77:
                    ee:ae:c0:00:ed:81:96:c7:da:43:a0:d6:8f:78:60:
                    2d:c1:6f:7d:2d:c7:7a:4d:b4:98:58:97:3a:8c:7d:
                    5e:1d:35:a4:f6:24:59:79:9c:f5:ed:80:e6:f4:57:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A8:F8:CE:21:3A:A0:5B:58:22:7B:1A:C4:F8:D5:11:CC:04:E0:65
            X509v3 Authority Key Identifier:
                keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:d0:b3:2b:97:14:49:e9:8f:29:96:4f:12:bd:b6:0d:57:
         74:39:9f:36:39:d1:19:4a:3c:3b:a8:cf:47:4e:c0:7d:33:6e:
         8c:da:63:87:dc:3a:10:12:03:4a:78:76:c3:64:f9:c4:70:20:
         6c:f3:f4:37:87:d2:08:29:14:09:7d:e1:0d:33:18:ca:bf:f6:
         03:d7:fa:98:c9:c6:9b:7d:5d:07:58:9a:f3:82:51:57:13:f8:
         62:81:7a:0c:8e:b7:15:95:c9:c6:c3:d3:9b:23:e6:98:b8:fb:
         40:f5:67:fc:8c:3a:7e:3c:8a:c2:1b:78:f1:1f:29:ab:56:4b:
         b2:42:2e:60:55:56:14:0c:23:b4:61:29:56:09:3d:2e:58:2f:
         ee:ac:02:c0:f6:75:0e:fa:11:11:eb:1a:d0:4d:cc:88:a4:26:
         06:27:05:b1:c2:ab:bc:a5:89:b5:74:7a:72:72:ff:32:30:83:
         09:81:b4:91:60:cd:b4:90:e8:65:bc:d6:06:a7:35:91:65:53:
         63:d4:e6:9d:3d:b9:bf:07:72:af:e1:94:69:9a:75:26:f2:ff:
         9e:b7:69:19:52:c0:0f:c3:d2:2f:2a:fd:6e:a2:a0:56:65:5a:
         94:e4:99:4d:eb:ad:71:b9:29:91:d9:95:0b:90:5e:51:00:57:
         15:96:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:46 2026 by rpki-client