Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          JzZQKsm9NkPqw1s0cJyfWO+qx+FZ7Qxaq0xcznuoJL0=
Subject key identifier:   58:44:22:B3:7B:75:01:4B:C0:BC:F9:40:1E:03:59:D1:75:C4:48:B1
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       019FA907A74AC2A0C08A5F46F6A715800A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          1967
Signing time:             Tue 28 Jul 2026 14:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:18 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: 6Qdc6QvIRBIjj+55Syej/lm9gaLdBavlatc2SpiUXHM=)
                          2: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (hash: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:a7:4a:c2:a0:c0:8a:5f:46:f6:a7:15:80:0a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Jul 28 14:01:18 2026 GMT
            Not After : Jul 29 14:01:18 2026 GMT
        Subject: CN=584422b37b75014bc0bcf9401e0359d175c448b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:67:9f:c3:6a:ed:d6:ad:56:06:b5:6f:e7:
                    9f:04:ab:2b:09:56:e9:f3:c5:3e:a5:16:01:d5:d5:
                    df:9b:31:51:06:0c:c5:44:1b:5a:36:bb:c6:a4:b4:
                    00:d1:b0:17:88:fd:9a:61:5c:45:10:34:3e:ed:6e:
                    b8:82:27:df:28:c5:56:a5:1f:ae:db:61:f1:0b:53:
                    a4:6d:ca:d7:02:0b:67:4d:6e:05:80:05:fc:10:54:
                    86:0f:68:3f:8e:0d:8c:11:b3:c1:14:42:09:00:7e:
                    f0:dd:ea:a8:bb:44:75:06:9e:fb:17:f6:80:b5:14:
                    36:e7:9e:4a:06:8f:12:b2:e9:20:ca:cb:e2:cc:23:
                    48:c3:53:85:f7:83:95:e8:c4:9d:ec:01:14:28:47:
                    3b:3b:4c:83:da:b3:a1:6a:9b:9f:3a:e1:3f:dc:ae:
                    dc:48:13:8e:fc:5a:a0:38:15:e7:6b:67:cc:bf:7f:
                    3d:f1:50:c4:da:41:68:c6:1c:11:c9:41:36:3e:51:
                    ca:01:1a:7d:9b:eb:d6:53:e4:1b:45:2e:c6:89:a7:
                    0b:fb:44:bc:37:bd:a9:78:aa:50:17:a3:67:04:ba:
                    7d:ed:e7:5f:e7:7c:73:1a:f7:e9:02:d6:ab:04:07:
                    a1:87:45:22:fa:0a:40:23:a4:a1:12:f2:0f:84:be:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:22:B3:7B:75:01:4B:C0:BC:F9:40:1E:03:59:D1:75:C4:48:B1
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f4:ac:ff:f7:c0:c4:a1:3e:ae:25:6b:29:61:c2:3e:24:ae:
         ab:b3:a9:ec:e6:eb:f5:f1:c2:47:76:e0:a2:0d:b2:2a:e0:19:
         5e:4e:6f:3a:97:b9:2a:3c:4f:c7:60:9e:92:45:dc:77:62:8b:
         37:90:fa:3d:4e:bc:2b:ad:cd:6d:55:97:72:8f:3a:72:05:9d:
         d9:dd:d5:bf:15:cd:4e:13:1f:5c:67:c7:b5:15:11:f6:1a:16:
         a2:da:7a:e1:a4:db:55:c0:1a:0b:7d:27:74:c8:bf:4a:5d:28:
         e2:09:23:f8:d7:28:6d:eb:e4:c5:1d:82:fe:1c:76:f0:e9:09:
         af:0a:bf:9b:35:52:cd:9f:b7:de:62:2f:6d:4e:0e:1b:d1:7a:
         3c:b1:c0:f2:ee:6e:2c:b9:81:f1:f0:c8:e6:da:8b:2e:28:23:
         09:d8:87:cf:9b:c9:b0:e4:3b:42:fd:4a:19:e1:9c:e4:d8:f8:
         ac:6a:05:9a:38:ec:66:44:5c:2c:ec:ce:21:d4:82:40:3a:52:
         7e:a4:88:44:17:0a:1b:de:19:0f:fd:05:4c:1c:14:d4:71:36:
         9b:02:99:62:fa:1e:c5:c6:6a:be:3c:09:ed:56:d7:69:70:2c:
         a8:bd:fc:e6:3a:27:a7:f2:1c:f2:f5:e5:23:61:58:da:91:be:
         92:33:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:50 2026 by rpki-client