Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File:                     mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier:          yKDDZnUwEyV3LzuuDzSQoEL065aMeahQrz3e1t281Lo=
Subject key identifier:   EF:C4:FA:4D:1E:D2:D4:00:F3:F9:BC:48:06:88:39:DF:7C:D0:F4:B5
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer:       /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial:       019F946E225C432B380FB150957C57264A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number:          17F0
Signing time:             Fri 24 Jul 2026 14:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 14:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 14:01:13 +0000
Files and hashes:         1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: h/3a7mWZhm1XBliiqe90GnYccYlLb+DxgrDfnp9fOiE=)
                          2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6e:22:5c:43:2b:38:0f:b1:50:95:7c:57:26:4a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
        Validity
            Not Before: Jul 24 14:01:13 2026 GMT
            Not After : Jul 25 14:01:13 2026 GMT
        Subject: CN=efc4fa4d1ed2d400f3f9bc48068839df7cd0f4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:04:1c:6c:b6:1d:8e:7d:61:14:41:d9:a7:
                    39:17:ac:b0:22:60:46:b2:c2:2e:64:27:49:a8:4f:
                    41:aa:03:3a:14:3d:74:72:f9:09:85:ad:5f:8b:9f:
                    b7:25:6c:a3:2e:27:b6:ff:e3:7c:70:d5:ea:e2:07:
                    17:c6:c2:0d:46:bb:bb:68:d3:81:4c:91:72:2a:94:
                    cd:ab:27:21:2f:71:3f:a6:a3:ab:e3:f1:ef:56:4b:
                    d4:df:5d:3e:f6:e1:38:df:3a:45:c9:49:80:6a:7d:
                    d6:53:26:42:29:d3:9a:05:03:20:cc:b9:1f:1b:8a:
                    49:11:f5:0e:c0:4e:20:30:8d:5f:14:f2:2f:aa:08:
                    45:26:9e:f6:6a:e5:99:8d:69:9d:40:b6:58:7e:2b:
                    e6:16:6a:cd:33:9a:9e:b1:d6:af:da:3b:d3:6b:6c:
                    35:95:16:8d:30:99:71:10:86:3b:4f:66:38:ea:3b:
                    a1:46:c1:76:4c:3c:96:9a:cc:c5:6c:bd:69:cc:12:
                    ba:f0:f6:81:45:66:52:cb:82:d1:29:71:5b:f2:13:
                    78:0e:11:29:84:a5:ee:c8:d9:bc:fe:dd:32:f7:19:
                    ba:eb:98:54:aa:c0:8b:32:03:ee:d2:f7:3d:c5:61:
                    95:24:af:fc:ba:17:29:3d:16:e7:9f:bc:d7:fd:dd:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:FA:4D:1E:D2:D4:00:F3:F9:BC:48:06:88:39:DF:7C:D0:F4:B5
            X509v3 Authority Key Identifier:
                keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:50:31:dd:7b:04:cf:5d:05:d9:df:80:a8:b2:2b:52:b4:bb:
         4b:b0:ac:7a:fa:80:ef:45:bb:90:3e:62:a5:d3:4c:2b:43:3d:
         b3:cc:34:1f:d4:94:63:4d:f1:e2:43:41:6a:c0:c5:da:e0:fd:
         61:a0:fd:04:b0:6d:cd:13:4c:9c:b0:92:11:2f:44:7e:13:30:
         88:e3:bc:e9:01:c9:87:08:36:06:a9:c9:bc:fd:0e:b8:70:4b:
         35:2c:09:49:85:4b:13:67:93:e1:2b:4c:38:ee:ad:ab:df:49:
         91:8d:d1:71:63:c0:48:d7:ed:69:92:19:9c:05:0d:c1:d8:0c:
         68:55:6d:e9:b5:72:6b:b6:67:a4:4d:a1:0f:16:f7:81:5f:15:
         3b:eb:dc:f1:d1:46:5f:75:8d:52:86:e1:2d:b4:34:7c:68:63:
         c6:c8:b3:89:59:8e:c1:3e:7e:a6:81:e5:1b:6c:f3:ef:cf:c5:
         60:c5:f3:15:10:3a:57:4c:f2:40:64:82:f6:f5:2b:a4:75:3b:
         6b:9c:af:e8:88:04:40:a9:88:c1:15:98:9a:95:86:a7:43:a1:
         a4:00:2d:63:70:2f:5f:1d:de:cc:e3:d9:3f:06:de:4e:0b:48:
         69:fe:40:a0:e6:26:f4:16:f2:33:ea:eb:db:ab:e8:2a:8d:5f:
         21:cc:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:15 2026 by rpki-client