Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          6+WKj+UDJWpDNsmVCIoYNDcFvUw2j/Q0N3vUxa29Gk8=
Subject key identifier:   97:64:A9:7A:88:DD:D7:13:06:6E:1A:AE:0C:E0:1A:17:D0:82:E7:C6
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019FA975404135BBB5C69009888ECC3298CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          091D
Signing time:             Tue 28 Jul 2026 16:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:01 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: rDN5v/JU0/qJg+budBPIFY9WgrCkYLgzGNzfhI+uA1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:40:41:35:bb:b5:c6:90:09:88:8e:cc:32:98:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Jul 28 16:01:01 2026 GMT
            Not After : Jul 29 16:01:01 2026 GMT
        Subject: CN=9764a97a88ddd713066e1aae0ce01a17d082e7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:a1:e9:ee:5b:fb:fa:31:2e:e6:18:1b:4d:
                    9a:8f:62:87:36:0a:f4:59:a4:f5:30:11:29:93:00:
                    4a:ae:f4:cc:4a:b8:f2:41:a7:16:1e:69:d8:a9:25:
                    99:0e:62:06:38:23:be:f9:18:8c:68:f2:e9:1b:c1:
                    29:2f:36:25:04:2a:34:2c:f4:31:21:3c:d5:04:aa:
                    53:70:71:93:2c:9c:8d:b7:d4:64:5b:d4:ec:81:04:
                    4f:bf:07:2d:26:65:38:ea:23:89:d2:b0:e3:14:b5:
                    8c:9e:ad:fd:3e:2a:d1:40:b6:da:4c:d1:86:92:14:
                    b4:44:40:b5:54:70:5b:53:84:ec:e1:a7:92:58:2f:
                    c0:44:27:f8:0b:6c:f6:d8:d5:f4:00:30:23:de:5f:
                    81:79:a2:6a:9a:78:09:4b:45:96:5c:c7:f9:6d:bc:
                    3a:8a:56:7a:a3:ea:7c:b9:24:99:86:2b:36:94:13:
                    06:cd:20:61:ce:2f:5a:bc:ef:cc:90:a2:93:44:41:
                    c7:e7:86:56:35:e2:24:ef:7c:54:61:d7:04:50:64:
                    6d:a5:8d:f6:3d:ab:b7:a3:01:98:30:ab:f4:13:36:
                    c1:65:55:eb:69:28:a8:ba:39:fd:bd:87:4e:d9:ef:
                    da:19:9b:9c:a7:ae:02:dd:f7:88:bb:69:7b:f4:95:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:A9:7A:88:DD:D7:13:06:6E:1A:AE:0C:E0:1A:17:D0:82:E7:C6
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:41:d7:64:99:f5:5e:1f:9a:0b:db:e2:29:55:5f:17:19:
         49:50:5c:b7:78:81:be:8e:2f:5e:94:75:49:b2:20:b5:fb:de:
         ab:1d:a5:b2:f2:0e:16:88:40:d0:97:e5:35:52:07:42:f7:f2:
         34:70:dc:a7:cb:86:1b:02:29:19:3c:f8:23:1b:08:8d:89:06:
         f3:a8:02:dd:80:68:0c:c8:48:52:91:3d:5b:3c:71:52:f4:72:
         23:98:6f:57:65:99:38:8b:b6:aa:1d:77:fa:8f:79:26:c9:43:
         13:64:ad:ed:ca:cd:f3:cd:3a:b5:30:e0:81:a8:21:34:cf:f9:
         09:87:0f:51:3e:ac:86:db:4f:98:2f:00:be:31:e1:65:d9:59:
         8e:b3:09:f2:d3:76:bf:8e:88:49:7f:c9:86:7f:a0:21:8a:06:
         30:af:61:f8:c8:a0:91:51:72:24:04:df:db:aa:2a:fa:3e:37:
         e5:9b:12:f1:30:cb:04:7a:eb:96:e7:4e:aa:a6:d8:8f:41:47:
         bb:5f:3c:88:e8:0a:86:38:06:56:33:ac:89:36:c6:af:ab:56:
         b0:76:4b:48:8d:80:f8:34:44:3f:1c:73:08:a4:7c:6f:e9:76:
         fc:10:a0:94:18:c1:0a:7c:44:cb:0b:6f:c6:b4:51:a3:bf:11:
         0f:b3:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:11 2026 by rpki-client