Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
File:                     fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft (raw, json)
Hash identifier:          N8xHr1qlQlBoMdF6IKHYH51TI6LDnMTp7bBaKGiyEB4=
Subject key identifier:   9C:F1:0C:9C:0F:BE:69:2F:ED:64:69:8C:55:90:A2:30:FC:72:06:F8
Authority key identifier: 7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
Certificate issuer:       /CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Certificate serial:       019FAB2C8337C35B41FCB567B39E32B98505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
Manifest number:          0111
Signing time:             Wed 29 Jul 2026 00:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:48 +0000
Files and hashes:         1: fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl (hash: ymmofZ1oEiq/VilvAoSFogPB6/NY1Rfo84m3wM9fkqE=)
                          2: qNO-vqMo6CUKbBad3Z7RIqx2J8c.asa (hash: BRtlygNOpn1uRvLhqR+yBcBHhopuo/nmc11EsjchCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:83:37:c3:5b:41:fc:b5:67:b3:9e:32:b9:85:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
        Validity
            Not Before: Jul 29 00:00:48 2026 GMT
            Not After : Jul 30 00:00:48 2026 GMT
        Subject: CN=9cf10c9c0fbe692fed64698c5590a230fc7206f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:72:57:62:b4:53:a1:c5:11:5b:35:26:ad:
                    b9:71:c5:38:14:97:0f:57:f3:07:0d:c6:3d:18:86:
                    7a:18:99:16:b5:2f:a0:ba:61:48:3e:b5:e7:4b:d2:
                    bf:89:7e:f6:17:be:52:af:55:0a:f9:bc:95:68:6e:
                    3e:d2:06:92:90:0d:d1:a7:b1:ca:46:83:0b:14:ba:
                    4e:b9:3a:ee:f7:d8:f7:33:b5:f3:c1:30:8a:47:88:
                    54:cf:47:7b:74:cb:99:8b:f1:4b:45:17:46:01:21:
                    1e:76:34:60:53:04:f4:e8:e2:4b:d3:22:72:74:35:
                    23:48:f6:f0:46:02:00:dc:dd:ff:8d:be:dc:10:48:
                    1e:a8:50:ee:6e:bf:ee:7a:8f:88:e9:fe:f1:83:99:
                    80:49:8e:e7:3d:90:81:e2:bd:9f:17:bd:df:9d:c8:
                    62:f7:58:6d:a6:20:e1:92:97:7c:78:f6:68:fe:3d:
                    2c:5e:62:22:8b:80:b9:69:c3:80:3e:07:47:08:1b:
                    50:4a:81:3e:a1:ee:1a:ef:f6:17:91:9c:af:b2:29:
                    0f:79:00:74:b5:6a:26:56:ca:2e:f8:15:32:6f:37:
                    4f:c5:16:7a:c8:a7:2c:67:9a:b7:7c:12:8d:6f:5f:
                    a2:c6:18:e3:01:1c:39:be:93:7e:49:e3:7a:a1:ed:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F1:0C:9C:0F:BE:69:2F:ED:64:69:8C:55:90:A2:30:FC:72:06:F8
            X509v3 Authority Key Identifier:
                keyid:7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:33:bc:67:7a:7d:22:03:c4:5a:84:e9:c1:18:79:f0:18:
         75:31:01:e9:7c:4a:b1:32:55:e8:5d:15:56:b3:c0:d8:04:d3:
         c5:9c:20:de:6f:7b:df:c0:83:10:b5:54:c1:38:ae:02:99:d8:
         99:fc:dc:3a:a4:e6:c6:14:c3:dc:80:4f:2f:5d:0b:79:53:b8:
         05:07:a0:db:b5:42:8d:4c:b7:f3:aa:53:5e:24:ef:81:b1:1c:
         ae:bf:15:94:e2:67:71:dc:bf:3c:3b:9f:24:1b:bc:26:2a:8d:
         ee:72:1d:dc:6d:24:75:5e:19:30:35:69:2c:4d:97:7b:df:67:
         73:62:ee:fb:3e:74:cd:ae:3f:1e:f0:79:a1:2d:17:d0:6a:c2:
         f2:85:66:7d:cc:22:4d:ab:a9:c0:62:2f:e6:53:a5:fb:8a:38:
         d5:4b:33:b6:0f:2e:f7:06:07:79:24:4c:3d:cf:50:48:c4:53:
         06:31:5e:27:50:ea:a8:b2:e1:f3:ba:08:70:75:1e:10:20:d4:
         54:86:2d:72:53:69:15:00:bd:2e:f0:45:a8:32:3f:09:86:2b:
         52:36:3e:a8:7e:dc:af:8c:0d:f8:64:ae:95:d1:c9:d3:29:67:
         c3:22:c3:c1:8e:d4:a4:d8:64:8e:bb:b5:07:6a:f0:ae:c0:98:
         ce:62:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:09 2026 by rpki-client