Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          7suBeoG1TfuYygYx9WOnaRP4UMGtXUP+MqI8g5eCyXk=
Subject key identifier:   A6:74:99:FD:D5:AA:30:13:25:3A:24:C5:A4:54:9F:FE:35:42:B7:D6
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       019FAA50D06713A6DF6E28A2C76646868C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          0870
Signing time:             Tue 28 Jul 2026 20:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:50 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: V+NiL4E6qkr/EqWoFIJTEt2L20ONPkPvn//muspnApQ=)
                          2: 7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa (hash: 5sz1u1bzF1UGMTJq4Lxgn8XO6YmGX618edjqYJ+pTDo=)
                          3: NLxrIIugp3R4DpT8Bd4iByRao_Y.roa (hash: wBPPunNUH66uF/lnjqaErJgsT6xEJ8SJhXS+mFEdnAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:d0:67:13:a6:df:6e:28:a2:c7:66:46:86:8c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Jul 28 20:00:50 2026 GMT
            Not After : Jul 29 20:00:50 2026 GMT
        Subject: CN=a67499fdd5aa3013253a24c5a4549ffe3542b7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:a9:c0:41:c1:28:86:50:f2:da:57:00:69:
                    c8:f3:b3:0d:1e:6e:a3:3f:11:56:40:08:a9:c2:f1:
                    24:42:42:23:4e:6a:e6:bb:e4:6c:b5:1e:74:12:bb:
                    2c:57:cb:e3:02:29:c7:6b:62:01:54:b8:7b:b8:04:
                    c3:11:b1:91:58:a4:c0:2e:d5:b1:0c:c5:50:43:45:
                    bf:8f:c4:27:76:57:ff:b7:ac:9a:97:27:ef:9d:90:
                    95:96:df:d8:3f:d3:2d:7c:82:d6:53:d3:ae:10:6a:
                    91:64:14:87:14:31:f8:13:da:2a:0b:7f:d7:09:34:
                    f2:fb:4c:30:ce:2c:57:8f:4f:7d:63:f5:71:f3:d1:
                    f7:77:ae:22:b3:56:98:1e:83:6c:e4:c3:12:54:af:
                    96:04:5c:66:7e:49:b4:ed:b0:f7:29:01:86:d0:d3:
                    96:5b:73:46:81:4f:c1:a8:22:ee:38:bf:91:7b:2c:
                    92:c5:18:c4:e5:0e:30:c4:ac:72:a8:be:42:a0:53:
                    33:11:19:47:ed:ec:56:f4:25:31:ca:38:ca:3a:89:
                    ce:be:81:06:07:ce:55:65:26:a1:18:ee:88:ea:26:
                    2a:32:e2:e8:29:40:8f:56:dd:e6:fa:05:10:62:33:
                    f0:34:07:22:34:da:9b:95:63:20:5f:e0:f4:74:84:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:99:FD:D5:AA:30:13:25:3A:24:C5:A4:54:9F:FE:35:42:B7:D6
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:a4:68:9a:2d:12:da:73:14:e5:7a:46:b1:f2:65:39:f4:
         60:a9:61:11:29:d2:4c:9c:e7:c6:5b:97:69:84:25:95:9c:71:
         99:9a:99:90:33:ad:80:61:2a:19:b9:cb:6d:d0:58:f2:1e:f0:
         0b:18:d1:a9:27:51:e7:bb:bc:f2:a5:48:f0:80:8f:e7:e4:5e:
         58:6a:1b:60:00:91:0c:91:03:47:15:ff:fe:3e:ce:f1:43:21:
         d0:73:5c:b2:9f:f2:c5:1a:56:6f:2e:92:fe:1f:e6:f4:e2:05:
         61:d3:49:f6:85:d4:69:91:d3:da:9f:4a:81:b4:fd:71:25:9d:
         1f:ef:7d:23:6e:11:94:a0:75:be:fc:6b:26:5d:3d:da:36:4f:
         c3:65:0c:e2:58:69:2c:1b:ce:18:73:8e:93:d5:6f:3e:50:9f:
         41:45:1e:50:87:c0:29:3c:88:a1:2d:01:80:3d:6c:cb:4f:a6:
         ad:ee:61:45:21:27:41:53:fd:3e:9b:eb:83:9f:b5:f6:6b:b1:
         0c:b7:5a:2b:f8:b5:62:2f:5d:26:c3:ad:61:88:2e:99:49:8e:
         86:59:01:ac:f0:7a:b5:67:90:fa:a0:b1:09:8a:64:54:5a:49:
         c1:de:35:29:56:15:a2:6e:3e:77:a8:f3:e4:b3:2f:33:4e:0a:
         ec:c9:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:10 2026 by rpki-client