Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File:                     0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier:          2koLnWwkEyTNPZOlFzNxEKOnxKHPMBuxuVKXwITiHpU=
Subject key identifier:   DD:4F:EA:A9:87:A4:6C:31:02:03:4A:D2:4F:E2:1B:BD:79:31:43:D3
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019FA82BBD4369E86DDB259CDE19A655529C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number:          022C
Signing time:             Tue 28 Jul 2026 10:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:06 +0000
Files and hashes:         1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: oMXaXar4GIoOnTk0niaE+fR3wCFNCY/2pxU+mUo8Oi4=)
                          2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
                          3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
                          4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
                          5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
                          6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
                          7: xYx_vOW7vkTjvjtpiy67I2LnOhE.roa (hash: N7u6humGzKYT/H6+9vAbd+SuhUaYJnp74HRkR2a2nH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:bd:43:69:e8:6d:db:25:9c:de:19:a6:55:52:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Jul 28 10:01:06 2026 GMT
            Not After : Jul 29 10:01:06 2026 GMT
        Subject: CN=dd4feaa987a46c3102034ad24fe21bbd793143d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:6e:1b:f6:fe:7a:6f:28:e5:4a:74:bd:50:
                    fc:6b:d8:28:65:89:a0:01:8c:94:e4:56:bf:ba:05:
                    68:5e:5c:53:04:4a:5e:27:aa:9f:4a:9c:ec:a9:3a:
                    aa:20:2b:b4:85:1f:45:d9:f3:17:ba:28:bf:eb:83:
                    60:9a:73:0f:cc:8a:1f:bd:6f:73:42:e1:45:39:7c:
                    cd:2d:55:56:63:a2:df:63:64:5d:04:e7:0f:99:ad:
                    48:cb:45:2b:6b:16:6e:84:f7:7d:4b:b1:99:d7:26:
                    f9:7f:14:07:ad:ee:97:68:64:42:63:e2:8a:47:7d:
                    d5:0d:13:62:63:00:0b:f6:b1:2e:93:ac:83:9d:1d:
                    2a:14:51:bb:ed:ed:0b:ad:c7:94:fb:49:53:cb:87:
                    92:87:d1:9e:1e:51:8e:c1:4a:43:73:0d:00:3c:02:
                    ac:be:1c:b2:9e:5d:7e:1a:a8:e9:61:ba:fe:5b:96:
                    42:fb:96:ed:92:bd:15:f8:cc:b2:24:f3:48:ff:a1:
                    c6:1d:48:75:7d:37:9e:9f:14:aa:7b:20:8e:39:81:
                    09:89:c3:73:af:0a:ab:61:40:cb:4d:91:c1:f2:f1:
                    67:77:8a:ba:16:10:b7:3f:fd:00:82:46:10:ef:ea:
                    e4:5e:cd:84:cd:4d:2b:22:2e:e9:c8:c9:21:6d:a6:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:EA:A9:87:A4:6C:31:02:03:4A:D2:4F:E2:1B:BD:79:31:43:D3
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:a9:d5:70:de:57:17:67:92:69:b3:80:cf:d4:48:50:a2:
         40:4d:7a:13:a0:28:a3:5c:b0:9d:3d:bc:b6:4f:4d:b2:60:6d:
         83:94:55:f6:a1:94:ba:e6:4e:58:74:65:bd:5d:bf:c0:7c:b3:
         10:09:d3:25:97:36:7d:43:5b:f9:bb:79:91:e7:59:40:61:a2:
         af:80:5b:b6:cc:68:24:61:03:27:c5:15:2f:d9:17:91:61:fb:
         5a:59:18:39:cb:ca:27:eb:72:8a:30:20:e6:2b:4a:32:25:c2:
         b4:f9:84:38:a5:02:69:1e:b0:94:ea:31:90:c2:26:c7:7d:7f:
         19:37:79:bf:99:de:12:5b:19:a8:ab:2a:a8:49:b7:08:1d:ff:
         69:2a:fc:50:8f:35:2b:41:1d:0e:79:34:62:a2:a9:e5:7e:45:
         89:38:54:ea:e3:9a:4f:e5:dd:50:ba:8a:e4:4a:e5:2d:e4:c7:
         0a:20:74:42:a2:dd:1e:e6:f5:f2:12:59:d3:c2:c6:fd:8c:99:
         bb:17:a6:18:a1:6a:ff:2a:d1:db:40:45:8a:3e:ca:d8:71:74:
         ab:f2:c4:aa:77:d2:67:ec:4b:9f:2d:cb:0d:d9:0a:84:bf:23:
         e9:77:0d:11:67:6f:83:b9:81:5c:4f:b2:51:5a:f2:6e:d4:e7:
         7c:fc:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:55:59 2026 by rpki-client