Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          WCaR1ch0Wjg0mWeJEqiFbR65c/7DEqlzHqG9MvbEAkY=
Subject key identifier:   45:EA:07:78:F6:0F:72:66:BD:B4:2E:68:C4:E0:17:BA:87:98:E9:82
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       019FAA5093752A981373CDCAE0DF5C1DA136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          094B
Signing time:             Tue 28 Jul 2026 20:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:35 +0000
Files and hashes:         1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: kwbCiP/+mJ2lxSBtXYkTDqi5E2E2xZ6+0QYULadFKeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:93:75:2a:98:13:73:cd:ca:e0:df:5c:1d:a1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Jul 28 20:00:35 2026 GMT
            Not After : Jul 29 20:00:35 2026 GMT
        Subject: CN=45ea0778f60f7266bdb42e68c4e017ba8798e982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:19:aa:ca:41:77:b7:4d:e8:c6:c8:94:00:
                    81:e8:d7:ff:02:0c:f8:19:2c:df:99:62:97:18:ee:
                    54:d9:85:8e:9a:1b:c6:3d:37:d7:df:b7:d3:b9:6e:
                    33:39:7c:8c:cb:ca:b6:10:53:2c:3c:16:c9:a3:3b:
                    08:4f:05:67:14:4d:e0:86:c5:4f:44:7b:83:24:07:
                    02:f1:8d:1f:68:d7:7a:5c:f2:1e:47:c7:8d:bc:0e:
                    f4:d6:fe:e5:ce:75:98:66:21:09:45:5f:0a:30:19:
                    0b:e1:41:57:23:e4:29:a7:2d:59:55:29:37:90:72:
                    95:1d:e2:73:4f:d4:b9:ac:2c:c6:b0:19:f8:ab:79:
                    9b:8b:77:5c:f1:87:06:d4:b6:02:d9:bf:a3:40:5c:
                    06:fb:d5:37:cd:6e:a7:38:88:eb:6f:a9:4c:e8:7d:
                    7e:18:6d:a2:49:f0:1d:95:26:f2:b6:cd:4e:43:db:
                    fe:ce:8c:a9:d2:45:d7:83:ba:52:f7:5a:0e:b6:db:
                    9f:7d:bb:c9:f5:37:2d:dc:cf:40:d6:31:f5:f9:d4:
                    37:2d:92:95:ed:ba:e2:2e:bc:82:25:85:fc:3b:26:
                    1c:31:d0:34:b4:b9:a0:93:5e:82:d2:40:e0:76:31:
                    12:17:99:fa:eb:89:c9:20:60:97:d2:50:04:99:fb:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EA:07:78:F6:0F:72:66:BD:B4:2E:68:C4:E0:17:BA:87:98:E9:82
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:64:80:b1:75:ec:c2:7a:23:51:12:ff:fc:5d:bf:be:21:11:
         87:3c:18:cf:75:93:a0:fb:ef:09:fc:f7:a5:e6:ff:65:71:ad:
         5b:24:60:e9:ab:fc:a7:64:5b:b6:66:dd:58:62:ba:7c:c2:80:
         9d:74:81:d2:0b:40:04:b4:6f:ff:47:23:9c:2e:84:fb:7d:9c:
         30:80:c3:a1:6c:1c:6a:38:c9:03:8d:6b:41:07:c1:1f:1c:fc:
         80:48:12:b8:dd:0b:45:87:93:8d:35:9d:da:35:0f:f1:6a:97:
         43:fb:03:c2:91:cd:2e:b4:8f:9d:11:51:d0:be:cf:a3:45:79:
         71:df:e1:19:f5:6d:d7:00:5c:d2:96:e9:4c:d5:00:14:d3:78:
         7b:23:49:3a:82:cc:24:9c:5d:37:40:53:e5:75:ea:76:64:a3:
         3c:08:af:9c:4c:df:4e:18:44:54:07:ca:74:9e:96:41:3c:17:
         f0:b0:f2:be:0e:b0:86:b3:d0:63:27:86:fe:e2:73:ef:73:b5:
         2d:d4:a0:6a:60:63:da:b2:ce:7c:d5:ec:40:cd:02:1f:1c:99:
         1c:ee:e8:d0:8c:4d:87:59:69:94:27:ce:c0:fb:9c:de:c9:44:
         56:df:33:3b:bc:2a:d5:83:ec:5c:b1:99:1b:0a:96:6c:c7:b0:
         38:e7:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:52 2026 by rpki-client