Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File:                     25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier:          Jxk9ZvdWIigfVwID9ppArWj69v9i6FrQGGCYhGCe3yg=
Subject key identifier:   4A:A6:A5:0B:7E:ED:43:BF:43:5A:A1:02:B0:2F:3C:0E:DA:43:71:64
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer:       /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial:       019FAB9A3B0490CCE86B4E1F85342FED2E84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number:          0506
Signing time:             Wed 29 Jul 2026 02:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:39 +0000
Files and hashes:         1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: u+0Fox4xqauBGidP+iPEqCpxru8p5h5Rt3h/jGXLjfo=)
                          2: SMH2Oc24_m72oqPVd7XOf3_OyRU.roa (hash: WsgzmpsbvE0g6zXQzhps2wgMNgXJq/ibUvwvE7MedyM=)
                          3: hS-zp-zfmueU5iHRFKC0O06b_Y8.roa (hash: bQDlMMAMtH4O8JePaz3JngoNBpURtKGCYa9QelbxBc8=)
                          4: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:3b:04:90:cc:e8:6b:4e:1f:85:34:2f:ed:2e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
        Validity
            Not Before: Jul 29 02:00:39 2026 GMT
            Not After : Jul 30 02:00:39 2026 GMT
        Subject: CN=4aa6a50b7eed43bf435aa102b02f3c0eda437164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:c7:6f:11:14:8b:32:dc:21:30:58:50:ae:
                    19:3b:7e:95:68:c4:73:8e:e7:dd:d1:7f:36:fb:4c:
                    e5:d1:5b:e1:3a:03:60:2e:2b:3d:0c:2b:be:d4:12:
                    99:af:09:eb:33:dc:6a:85:23:d7:7b:9a:72:f0:ad:
                    ec:b9:0b:d9:cb:36:ff:3e:21:f2:c6:09:56:03:39:
                    3f:23:31:34:59:6b:a8:8a:0e:da:ae:5e:a5:56:1d:
                    47:9e:30:2a:02:2e:e2:35:bd:2b:e8:db:30:1f:ab:
                    c1:5f:02:7c:79:f7:70:89:9a:97:07:85:cf:76:e6:
                    2b:56:35:20:c8:a6:82:22:a0:d2:f9:85:a6:93:f7:
                    86:ad:3c:3f:66:19:3c:c9:67:b3:42:37:28:d3:7c:
                    7b:96:8a:ef:74:32:c1:80:9c:9a:06:d1:6d:13:e7:
                    ab:2e:17:fe:f5:40:ec:7c:44:07:f1:03:66:da:58:
                    00:b9:ef:a2:33:6a:85:51:4b:04:dc:64:f1:87:a4:
                    c6:56:a4:af:92:23:43:83:42:eb:75:51:c7:cc:07:
                    fa:35:da:c2:4f:39:b0:0a:6a:b3:b1:a9:be:f0:11:
                    31:ac:14:fb:e2:fa:3e:b3:8d:fb:2e:bf:54:95:69:
                    7b:3e:e2:b5:25:2b:d4:6b:06:47:7c:53:3a:7c:9e:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:A5:0B:7E:ED:43:BF:43:5A:A1:02:B0:2F:3C:0E:DA:43:71:64
            X509v3 Authority Key Identifier:
                keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e5:2a:2d:23:ef:93:f5:b9:fc:3f:61:ba:9e:b3:58:ea:9b:
         80:89:45:19:c0:a5:e1:8c:88:3f:f1:52:6c:e5:4c:08:5a:70:
         17:6d:b0:a9:43:5b:c9:c9:e2:e0:d7:19:51:c8:26:ef:d2:60:
         72:32:24:dc:32:49:7a:20:2a:82:ea:68:a3:f9:71:ee:34:e9:
         a2:93:50:7a:53:a9:43:f3:66:51:6e:f8:91:e6:3c:42:3b:86:
         5b:ff:e4:83:86:a4:c0:f2:bd:b5:24:86:21:62:23:27:e3:f3:
         0c:4d:e4:91:df:8d:3b:57:af:c6:da:67:7a:3c:e7:bb:2d:b6:
         38:92:b3:f7:05:34:e6:f2:37:95:6d:e9:c8:d6:01:93:10:12:
         ba:7e:cc:59:84:71:9d:23:03:2f:9a:6f:49:26:4a:ba:3a:76:
         d6:a6:65:ed:29:39:5d:7f:3c:b3:f8:50:27:eb:a0:99:7c:ef:
         50:0a:89:72:73:d2:20:cd:49:0f:c2:6e:13:85:eb:ef:93:82:
         e9:0f:2e:ed:45:d1:aa:bd:0d:ad:ae:86:db:78:48:dc:c2:c1:
         b8:5c:e6:0f:3a:3d:95:b8:d8:9d:70:f9:a2:a8:58:00:c3:b7:
         c7:d0:7d:c9:9a:eb:e7:5d:2b:e5:6a:17:58:84:26:30:f6:16:
         2c:b6:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:52:21 2026 by rpki-client