Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File:                     D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier:          Bf9BMgF1NwUgP2vnJ1mFjWtjq+L35yxOtRfONB27Afo=
Subject key identifier:   73:D9:5B:83:3A:F3:64:0C:CE:0A:B2:1C:38:9F:80:D6:74:E3:6E:CB
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer:       /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial:       019FAB9ABF038AE1BCE713C453238746412E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number:          09BE
Signing time:             Wed 29 Jul 2026 02:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:12 +0000
Files and hashes:         1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=)
                          2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: M2yGCb3NrT2cUtyZN4IoLMZ8IdiAo1Hpvocm5rJulyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:bf:03:8a:e1:bc:e7:13:c4:53:23:87:46:41:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
        Validity
            Not Before: Jul 29 02:01:12 2026 GMT
            Not After : Jul 30 02:01:12 2026 GMT
        Subject: CN=73d95b833af3640cce0ab21c389f80d674e36ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:95:9b:3a:65:e8:2a:3e:1a:cc:06:4f:fc:
                    d3:ca:64:a2:44:18:c3:5e:24:7f:a2:7d:14:2d:cd:
                    7f:ff:dc:6d:3a:f5:48:16:a9:8c:ef:eb:26:5f:f4:
                    61:6d:28:11:e4:56:91:74:cb:f1:b4:1f:f7:1a:c3:
                    77:f9:37:15:03:d9:9e:60:ba:db:bf:e6:77:7d:13:
                    7d:20:48:c4:1c:1b:a2:47:f6:8f:86:ac:1f:e4:13:
                    c5:91:a1:2e:69:60:f9:10:b5:9e:46:d3:0e:16:52:
                    07:f2:b1:ce:6f:d1:ef:7e:76:68:36:0d:5f:ab:cc:
                    e9:ff:59:97:39:f3:23:55:13:7d:55:71:49:fe:99:
                    a2:30:81:15:3f:13:56:ff:a5:38:d1:42:44:dd:9a:
                    0b:08:e5:e2:10:fc:6c:2e:9e:17:14:09:9f:d0:72:
                    81:a7:5e:3b:6d:df:d0:a2:7e:ad:d4:6f:83:7a:ec:
                    46:31:31:06:5b:2d:c7:66:9e:88:cb:26:70:28:3d:
                    f7:fa:98:08:43:8e:34:c8:ad:4f:a1:48:7a:85:99:
                    e3:f2:ca:e3:74:d3:cc:29:d5:fc:51:83:57:b8:75:
                    dd:8f:c7:88:b9:b5:fb:b5:f7:c7:09:d7:f8:fe:94:
                    76:78:1f:10:17:d7:83:22:00:4c:00:96:7b:f2:7a:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D9:5B:83:3A:F3:64:0C:CE:0A:B2:1C:38:9F:80:D6:74:E3:6E:CB
            X509v3 Authority Key Identifier:
                keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:e3:34:21:08:4f:f4:fa:13:62:86:f2:02:02:95:f2:a3:
         d6:28:73:ad:a0:de:2e:8f:76:a1:ab:11:f8:78:9b:94:6d:a3:
         74:34:46:20:42:2e:81:8e:ca:15:60:16:10:de:30:6c:ad:d7:
         e3:0a:62:e0:1e:94:a6:d1:13:8f:be:9d:19:2c:05:0e:8d:14:
         fc:64:fb:52:b0:59:8e:18:cf:f6:c8:d8:d1:92:86:94:7e:94:
         c4:14:99:d1:9a:3c:a7:51:5c:f9:a9:a5:e9:a9:e5:9f:0d:72:
         de:5d:96:0b:80:ef:a8:96:43:7d:0d:d0:34:18:91:0a:2b:05:
         27:cf:56:33:33:5c:f3:20:10:26:97:95:72:2a:d1:87:04:4c:
         79:5c:30:0b:b5:56:23:b4:15:3a:31:dc:a7:80:32:17:95:af:
         d8:25:be:57:93:f3:ed:0a:2d:ee:1c:03:ae:f6:09:7e:63:7f:
         69:40:24:18:68:af:8b:b4:5c:14:bb:28:64:f6:c8:e4:5a:e4:
         77:ab:24:1b:54:be:45:96:5b:9a:c5:ad:43:79:ce:14:09:0e:
         ce:65:76:8c:13:1b:ca:63:5e:87:18:a3:b3:a7:68:e9:4b:b3:
         9c:94:c1:6f:e2:ec:a4:03:85:20:0f:74:e7:77:7f:ab:b0:0a:
         88:b0:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:28 2026 by rpki-client