Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File:                     9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier:          54uCLKjU4Yt+zduTVfXpS+CVDREP9aszNO/aN38tM6Y=
Subject key identifier:   DD:FA:84:67:DF:E7:24:73:03:D6:71:ED:00:D1:50:BC:F3:7B:9C:24
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer:       /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial:       019FA93E3045F2EC8146C144881EAB5CE644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number:          0C26
Signing time:             Tue 28 Jul 2026 15:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:52 +0000
Files and hashes:         1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
                          2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: eaUgfK++PtFH/3t1kPdCTac6+JidM/3EVLlWHpWw+3E=)
                          3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:30:45:f2:ec:81:46:c1:44:88:1e:ab:5c:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
        Validity
            Not Before: Jul 28 15:00:52 2026 GMT
            Not After : Jul 29 15:00:52 2026 GMT
        Subject: CN=ddfa8467dfe7247303d671ed00d150bcf37b9c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:68:b1:6a:ff:df:1b:bc:1f:7e:3e:5c:b7:
                    72:e4:cc:f7:41:ec:c4:3b:6b:9f:0b:02:40:34:ce:
                    f8:ac:de:a4:c7:c6:87:89:a1:ec:94:bd:97:c2:fd:
                    50:72:da:59:e2:59:b2:6e:4d:07:95:de:f1:a0:39:
                    47:b1:9c:1a:7b:be:c9:16:5b:80:53:6f:c2:33:3b:
                    96:cb:2c:93:f7:17:05:80:ce:9f:cb:7a:8b:5e:18:
                    f0:e9:f6:14:53:62:dc:d4:57:ed:19:fb:74:37:75:
                    87:e1:8b:bd:f4:5f:52:a3:f1:aa:96:28:b0:2c:1f:
                    58:6c:16:ef:24:8b:be:30:2a:64:74:70:3e:b2:9a:
                    ee:ee:9d:67:91:cd:ab:d3:31:75:c0:9d:6b:14:d4:
                    ad:1c:87:b2:9d:50:11:e1:a3:f3:a6:af:2c:02:34:
                    70:48:f7:2f:a2:44:e3:89:38:11:65:d6:1e:54:bb:
                    1e:80:99:c3:a2:24:96:22:87:9e:52:11:e4:19:79:
                    9f:c3:1a:25:91:f8:f0:f9:2a:1f:a2:21:d5:ff:f9:
                    fd:74:4b:ba:ed:cd:4d:47:30:f6:b1:d3:11:2d:f9:
                    43:5f:60:b6:d5:b7:d8:f9:77:99:33:90:50:46:99:
                    13:b2:5b:18:e4:85:39:f6:97:83:60:d6:80:8c:77:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:84:67:DF:E7:24:73:03:D6:71:ED:00:D1:50:BC:F3:7B:9C:24
            X509v3 Authority Key Identifier:
                keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:44:e6:e8:32:8b:51:09:36:d7:e7:cf:68:3f:2b:96:a4:
         78:d9:33:0f:17:a0:eb:33:72:41:64:3b:18:e2:8d:11:6d:a2:
         be:f1:75:e6:2c:b2:eb:a2:74:0c:86:c8:fe:3b:89:d2:5d:ae:
         5d:5b:28:01:c7:44:27:17:d4:c6:45:17:2c:88:c8:82:d1:01:
         53:7a:54:f6:b7:cd:c6:10:06:80:fa:25:2c:0f:12:ef:f9:a9:
         a8:36:6c:51:17:b4:d1:49:02:d2:dc:c5:18:18:38:d6:55:88:
         7f:1e:a1:e3:c2:89:b4:b6:a9:0e:f9:90:11:6c:42:1d:15:51:
         64:37:1a:88:e7:e2:ba:5e:1f:00:12:7d:2e:57:bd:33:87:5d:
         39:11:22:26:09:66:24:0a:1b:b5:24:c1:57:ba:82:71:95:2e:
         e2:10:cc:4b:85:9f:fb:59:16:d4:75:c4:27:f7:e6:b4:a8:f2:
         1d:36:df:fd:94:ff:18:41:f1:83:24:4f:8f:e9:1b:fb:c3:1c:
         e1:5f:37:5b:e8:a0:14:82:3d:eb:ba:99:aa:33:d1:f9:c3:96:
         ca:eb:3b:e8:93:42:cb:9a:06:0c:28:8c:e5:09:dd:ba:15:72:
         fc:a0:59:46:5d:50:9f:66:77:64:3c:3a:fe:5b:53:4e:14:8f:
         5d:c0:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:35 2026 by rpki-client