Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          lGJTzL5xMJv3J+wBvfauTagIyPBNnXv23aeId6zaOFo=
Subject key identifier:   78:28:A5:B1:73:CE:35:A3:DF:EA:E2:89:B0:87:46:8C:E6:DB:64:B1
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019FADBF9825DE61CA06713D95FDDBB18BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 12:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 12:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 12:00:42 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: fkR1ifoDRCsT7pEbqEb10ozk9PlrwSJ+TlAu0nexrsc=)
                          2: 13qi8AI2-EVNpOSQSS-2sC_j3KU.roa (hash: Ao/N1CH5IyqTs+C/2xXMQjWZkUvQDWoCz0AZMzqUUQQ=)
                          3: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (hash: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA=)
                          4: jv_YABzSModWtlchMh_9InM60gw.roa (hash: 4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:bf:98:25:de:61:ca:06:71:3d:95:fd:db:b1:8b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Jul 29 12:00:42 2026 GMT
            Not After : Jul 30 12:00:42 2026 GMT
        Subject: CN=7828a5b173ce35a3dfeae289b087468ce6db64b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:51:43:be:51:0d:1d:15:ec:d9:9f:8a:8e:
                    d6:f9:4f:f2:35:e0:cc:e0:16:77:3e:9f:52:3c:af:
                    3e:82:ac:46:8f:cb:c7:a0:01:a3:40:5c:f6:b7:d4:
                    99:40:79:3c:57:e2:19:87:00:2c:d7:89:87:78:3a:
                    01:15:d2:fa:bc:f5:92:1a:ac:ed:63:dd:f4:86:4e:
                    fe:25:a1:78:0f:a6:9e:b2:f4:03:7b:49:16:75:ce:
                    da:85:de:17:39:60:79:94:f2:fa:65:46:37:83:49:
                    c8:a0:b2:47:ac:f6:f1:1a:91:d8:27:87:1c:49:46:
                    a3:ef:a1:fc:37:9d:8e:ab:1e:d1:f1:8f:11:43:87:
                    d1:5e:5e:f5:b4:4f:65:91:fc:8a:22:f6:2f:56:cc:
                    1e:c1:c4:36:b3:15:ca:b9:62:30:bc:d7:0d:7c:69:
                    9e:99:7e:a8:d9:6c:7f:f4:5a:36:c1:a6:a2:a8:b4:
                    c9:7e:1d:0e:b8:05:c1:7d:de:1a:d8:6f:b5:97:e3:
                    a4:d5:04:35:cb:f6:09:88:98:a0:f1:ee:bf:0f:84:
                    53:32:ef:78:2f:3d:d1:1c:e7:b8:e1:1c:51:c6:67:
                    af:a7:25:8e:06:5d:5e:ab:46:24:87:db:a3:20:54:
                    6d:ac:6b:34:0b:39:df:45:7d:d6:ca:db:fe:c3:a3:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:A5:B1:73:CE:35:A3:DF:EA:E2:89:B0:87:46:8C:E6:DB:64:B1
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:f2:fb:6e:42:e5:7c:ea:2f:73:7e:d6:bc:6b:b3:84:24:
         9e:37:7f:d0:c0:42:18:f5:8c:8c:9e:76:94:ee:37:23:f6:93:
         b5:67:87:b6:9b:2f:a6:b8:c0:59:4d:5f:6e:ec:bc:3d:67:66:
         19:24:14:ef:4a:df:fd:50:a6:01:c1:9e:01:09:90:d1:44:45:
         e2:13:cc:4f:06:f4:41:76:de:27:4e:c8:69:24:bc:34:cd:77:
         cf:d0:cc:bd:57:e3:15:3d:39:f0:f3:67:ae:8d:9b:c6:d6:c0:
         bb:c6:bd:71:9e:1d:c8:37:f3:c2:b8:19:73:29:96:56:ad:8b:
         35:d7:bd:30:23:80:e9:2e:4c:0e:76:c8:5c:0e:6b:69:98:c5:
         58:3f:23:2b:f7:0e:d7:7a:3d:f3:25:27:c4:f5:20:d1:8d:d9:
         fa:b9:56:b6:56:2d:39:bc:ea:1d:b3:d5:d2:d7:81:2c:02:f1:
         e6:be:4f:76:97:83:1b:0e:4f:71:09:9b:ca:aa:1d:c7:15:b4:
         c2:52:72:d7:83:c0:15:4c:50:ba:b8:f5:38:77:fc:d6:ce:1a:
         bf:50:ed:74:87:4d:86:d9:b4:b3:45:a4:68:30:be:b7:1c:cc:
         a1:ec:51:57:60:81:88:2e:7f:fa:76:67:4f:84:76:19:53:bf:
         a3:5e:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:54 2026 by rpki-client