Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File:                     ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier:          aszerI+K/Col0wI/nl4mIlxi5RPdsr8L9DbM8B7h2Hs=
Subject key identifier:   69:B1:1B:35:BF:49:D0:15:93:24:99:35:57:15:2F:6C:C8:E6:EC:B2
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer:       /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial:       019FA93E01413CCFC0EAC05275466A1DFE7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number:          0C74
Signing time:             Tue 28 Jul 2026 15:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:40 +0000
Files and hashes:         1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
                          2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: gTB2+gcBPOeu87Wx1BDrTKkyhiX2wAcKqtMVUBfgl2w=)
                          3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:01:41:3c:cf:c0:ea:c0:52:75:46:6a:1d:fe:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
        Validity
            Not Before: Jul 28 15:00:40 2026 GMT
            Not After : Jul 29 15:00:40 2026 GMT
        Subject: CN=69b11b35bf49d0159324993557152f6cc8e6ecb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:59:4e:b1:8b:30:a4:5a:d0:a7:d6:ad:24:
                    07:4d:07:f8:84:de:c6:c5:20:e4:4f:31:ba:75:aa:
                    dc:9f:a2:8a:47:6a:dc:7d:61:d7:b3:10:4c:16:86:
                    f7:cb:6f:ac:29:23:f7:61:6a:fd:99:bc:56:01:2c:
                    c6:59:cf:bb:e3:7c:be:1e:25:02:82:63:84:20:72:
                    43:97:77:45:a5:ff:eb:56:6f:8b:96:d3:03:40:0a:
                    5a:27:48:ac:c7:7a:2c:ee:60:eb:51:4d:1f:d8:7e:
                    6e:5a:51:36:12:ac:a6:e2:bc:20:81:1a:2c:e6:83:
                    69:3c:00:c5:f3:57:59:a3:6c:48:15:d2:7b:df:13:
                    ac:a3:53:56:ee:7c:9a:d8:76:83:14:31:80:b9:61:
                    fc:71:3c:a6:32:b1:78:21:d3:44:b0:20:3b:ad:8e:
                    6b:3c:f7:e4:ce:c0:19:ec:eb:79:d7:21:02:64:86:
                    db:b4:a1:13:0b:d5:cd:e9:b6:0a:64:2f:9d:bc:b3:
                    34:4d:73:6c:70:3e:f4:90:56:1e:da:59:ee:e3:73:
                    49:7f:47:f6:c0:dd:51:5e:99:43:c2:e5:5c:06:54:
                    64:81:b4:19:ae:f4:cf:e4:10:82:7f:71:6e:22:64:
                    5d:7a:14:51:30:7b:ea:e2:d8:c1:92:46:e1:44:fc:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B1:1B:35:BF:49:D0:15:93:24:99:35:57:15:2F:6C:C8:E6:EC:B2
            X509v3 Authority Key Identifier:
                keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:56:a2:69:20:f6:c5:b0:ec:5b:08:82:08:85:77:01:e4:
         e8:e3:ac:12:a5:db:b7:07:df:02:59:a8:60:ea:8d:d5:06:e0:
         6e:f2:db:6e:5d:ba:fc:8f:b9:e0:e9:4b:be:6a:25:9a:af:46:
         7d:4f:6a:71:b4:f5:12:0b:5d:03:9f:15:a2:95:59:5b:fc:38:
         a1:e3:30:8a:78:57:20:e0:7f:f1:f7:88:f6:c4:c2:f9:99:8f:
         84:51:68:0a:e6:23:b6:55:a0:60:88:19:d4:20:ef:ee:27:8d:
         8d:02:e4:30:c0:cc:02:bc:1c:20:59:c0:16:69:bb:47:92:c6:
         8c:c9:90:8d:57:0e:d6:91:9e:83:db:47:b5:34:e4:2a:93:50:
         bc:9f:89:3c:81:c6:c3:18:72:20:6f:0f:6d:44:0d:85:7a:b9:
         a6:29:48:af:f8:0f:a5:72:ce:e6:87:fe:a9:a3:95:2f:65:42:
         5c:6a:f4:02:7b:a7:d0:2c:c8:aa:2e:a4:ef:80:a6:31:3d:87:
         fa:a3:48:9b:ef:be:ee:55:bb:7e:8b:66:95:80:45:40:7e:b0:
         9c:92:e7:4e:40:ed:ad:07:25:c8:d6:0d:db:e8:7c:fd:6d:47:
         09:83:64:8f:9b:81:90:91:c2:3a:61:7e:d6:95:ca:53:8a:79:
         4a:50:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:19 2026 by rpki-client