Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          cnUTZzFFR34TdRKHZombNftMhsoi45Yg/4s6SKe0it4=
Subject key identifier:   25:8A:D8:45:84:19:78:E1:38:17:A6:DF:D1:95:1E:A7:FD:69:2E:57
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       019FAD51B7784F001290921BA3CEFDDEA567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 10:00:41 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:41 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:41 +0000
Files and hashes:         1: 0v42-yuEzObgwInMahxldfZmrHg.roa (hash: spJCO+lQpC/r9TzdhrE3WFFw5uBpamaSo1GrCaKj4Fg=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: KGBG+3b+2Fq6qpv7Bs2a/OZ3rw1fOn58MSmuVt4Yhq0=)
                          3: OIwvLVG14Er178GMxwrh7ig3kjQ.roa (hash: rrrKwVzY5LibLzq9ZeJSCRsjD6gQ33lRLKMuzjoUt44=)
                          4: gD3TW1PF3JAEZdLvATbmgeJVunI.roa (hash: t6EoCKHR2D/E7ctxbU4crKBTLrkD21MXceMX9ltMJKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:b7:78:4f:00:12:90:92:1b:a3:ce:fd:de:a5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Jul 29 10:00:41 2026 GMT
            Not After : Jul 30 10:00:41 2026 GMT
        Subject: CN=258ad845841978e13817a6dfd1951ea7fd692e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d6:4a:ce:4b:59:ae:2c:77:bb:7b:1c:20:2e:
                    55:76:67:96:d9:d8:a0:03:15:f2:dc:be:d9:5b:5e:
                    06:2d:45:09:94:b0:98:13:2e:e6:e0:06:fa:72:60:
                    fb:98:4a:c8:15:0a:71:0b:01:92:69:1a:36:86:1d:
                    2e:ca:bc:76:34:a4:5c:a7:8c:2a:45:02:0b:4d:7d:
                    11:c8:31:89:cb:4e:30:5b:47:c6:82:d1:3c:93:e4:
                    e0:27:61:3b:76:f1:93:ac:b1:0c:1a:59:f2:90:b2:
                    09:86:76:e7:d4:55:0d:22:50:23:c6:45:b7:fe:3b:
                    16:fb:a0:07:d6:0f:5e:3f:b6:2f:43:8f:3c:70:78:
                    c7:57:a4:79:8c:93:8c:9b:16:f1:98:8b:68:18:6b:
                    35:4f:fa:b1:a2:32:ba:61:db:7a:2c:4b:1d:b4:9f:
                    34:de:37:cd:33:e4:0e:8a:b6:d2:91:73:37:b2:b3:
                    9b:95:85:f9:e1:6b:68:d8:d1:32:ca:ee:48:85:91:
                    26:7c:17:68:10:dd:4b:91:dc:ca:59:2b:18:4f:d1:
                    f9:fe:12:1e:d8:2e:27:ec:e1:b2:51:fb:c6:f2:e7:
                    0e:0f:47:74:c2:52:0d:83:f5:fd:91:70:64:c0:4f:
                    07:84:a2:8b:b9:d3:01:c9:2f:e4:a6:11:2b:e0:34:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8A:D8:45:84:19:78:E1:38:17:A6:DF:D1:95:1E:A7:FD:69:2E:57
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:91:99:79:28:32:2a:75:cc:29:28:75:ae:b5:74:f0:2d:6e:
         bc:31:73:a6:64:0e:7d:a3:2f:85:71:b8:0e:81:6e:8a:d7:dc:
         bb:54:9f:e1:ba:49:e0:14:26:70:79:1e:bc:7d:4e:5c:75:56:
         6c:7f:b2:99:91:b1:0b:f5:39:31:ff:d6:e0:c3:51:0f:19:c9:
         e3:4e:ef:eb:c7:64:ab:e4:ed:ba:92:c2:10:9a:0f:e7:ff:26:
         da:94:c1:d2:44:77:25:71:ee:08:4e:21:3c:f6:47:52:bd:49:
         bd:50:68:6e:53:0d:b3:2d:b9:e2:51:6b:e4:26:c1:33:e4:be:
         75:57:d1:59:2c:7a:c8:e2:69:91:18:bd:9d:07:a5:50:66:b2:
         f8:b9:5c:33:f1:bd:f5:38:15:d5:7a:e0:b0:e7:a3:43:db:15:
         4e:3c:e5:4a:68:07:84:f7:42:8d:c0:df:31:ba:49:1e:b7:b7:
         01:78:2e:09:c8:3b:16:6e:6e:55:f5:29:58:28:38:d2:de:99:
         b2:e6:9b:80:0e:82:c9:45:db:6a:02:af:6b:fd:8b:ef:3a:26:
         39:f5:22:66:68:3a:d7:b5:c4:9e:60:99:10:d3:17:53:32:70:
         14:f4:04:25:a5:f0:83:eb:f3:03:a0:d8:e7:ac:bd:c4:32:6b:
         d1:a5:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:06 2026 by rpki-client