Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File:                     Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier:          64Hml/scxJMJXDgl1dGecG/dMehhs5VrCWvORADS5Ak=
Subject key identifier:   F9:7A:09:56:40:A2:5A:FB:25:1E:38:D6:8F:B4:94:D1:B1:DB:BA:6C
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer:       /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial:       019FA974C5F0FA55E530C45BE94AD194B37A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number:          114A
Signing time:             Tue 28 Jul 2026 16:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:30 +0000
Files and hashes:         1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: uFtVdHz45FQ6Lb0aBDIq5vf6BFvwHuXtTNwWld/s7IA=)
                          2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:c5:f0:fa:55:e5:30:c4:5b:e9:4a:d1:94:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
        Validity
            Not Before: Jul 28 16:00:30 2026 GMT
            Not After : Jul 29 16:00:30 2026 GMT
        Subject: CN=f97a095640a25afb251e38d68fb494d1b1dbba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b2:e6:79:82:bc:b0:de:f4:36:af:7a:50:54:
                    a5:9a:05:61:4d:77:f3:35:c4:50:14:c2:79:b1:11:
                    87:6e:18:5c:e6:0d:4c:63:25:59:bb:eb:93:e3:4f:
                    67:a0:cf:95:b2:af:2f:5d:74:19:e6:e1:e2:42:04:
                    2d:0b:58:6c:07:e8:9f:09:ea:cc:03:53:24:84:d8:
                    69:ef:68:df:e8:89:1d:29:56:8b:f2:8e:3f:d0:ac:
                    15:84:d9:2a:25:94:c3:d6:b9:70:ba:90:b0:d3:80:
                    43:b2:43:9d:c4:ab:c5:c3:63:53:ec:43:3a:77:28:
                    ea:de:f9:0f:07:8f:ef:ac:de:53:af:f9:30:d3:ed:
                    d2:78:7c:14:43:a3:f4:0f:4c:f1:b7:56:ef:d3:29:
                    00:7b:05:1a:c6:0e:ca:b1:ab:b8:53:f9:b4:02:e4:
                    71:0a:21:1a:f1:93:ec:0f:79:4f:71:67:19:eb:07:
                    43:d6:b8:6b:71:6c:7c:a9:f4:13:a5:63:9f:a5:1b:
                    db:c4:5f:04:cc:26:65:78:84:b2:81:52:ca:1c:3b:
                    62:04:a2:af:bd:04:ba:b8:a4:9f:e6:cb:ca:a7:8f:
                    a1:c6:f3:f4:57:0a:a9:34:6c:7c:71:72:95:b1:9d:
                    14:0f:1e:94:48:6c:40:4c:54:f4:f5:fc:c3:fc:b7:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:09:56:40:A2:5A:FB:25:1E:38:D6:8F:B4:94:D1:B1:DB:BA:6C
            X509v3 Authority Key Identifier:
                keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:9b:8a:3c:94:62:c3:df:64:57:f4:de:ae:73:65:47:94:
         1f:b8:aa:f9:64:fa:6a:37:ea:0f:68:dc:8f:eb:aa:14:de:af:
         c5:e6:e1:7b:b7:5f:b2:3c:a3:20:4c:68:3f:86:d0:2a:4c:f1:
         04:73:14:32:88:2f:f4:59:03:64:77:46:5d:a1:27:de:66:df:
         5f:b3:6d:80:29:0d:07:4a:bf:1a:26:12:19:94:02:25:e5:20:
         a3:29:11:72:2e:a8:34:21:0a:ae:1a:cc:81:27:51:10:1d:25:
         5a:94:28:a0:ea:9e:36:03:e0:a6:b0:45:7e:0a:90:35:a4:8d:
         85:eb:54:0b:9c:64:76:ad:80:3c:df:de:84:9a:23:e3:29:e6:
         a8:7a:9d:c5:ec:de:49:72:8f:3d:1b:b3:8b:19:a5:f5:e5:a2:
         18:7c:8f:72:fe:f2:8e:ac:19:88:2f:fe:c9:aa:11:a6:56:cb:
         61:92:cc:c2:a6:5a:49:90:84:1f:5f:ea:b6:6d:0a:5b:52:0b:
         bd:10:fa:9f:e9:55:70:a8:01:ec:2a:67:6c:ad:29:35:13:a8:
         fc:28:8b:89:3b:04:f6:54:93:ef:5a:c8:db:ac:9d:98:7f:0a:
         32:9b:9f:03:d4:0e:b4:74:7b:0d:97:63:ea:b8:d3:69:0b:6d:
         6c:82:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:36 2026 by rpki-client