Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File:                     dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier:          dldF9XPRQQRqoJzF3qvAAUPrqdVyx6Afp0+y8Sofp1U=
Subject key identifier:   D9:70:89:0C:EB:02:0F:6C:0A:0F:14:EA:C0:AF:F2:AB:45:1D:7C:3B
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer:       /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial:       019FAABEE4809C2A62AB5131340A81ED1D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number:          027F
Signing time:             Tue 28 Jul 2026 22:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:04 +0000
Files and hashes:         1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
                          2: SiTbwMGtFl7yz90TOcACIfl_jbM.roa (hash: bZN6RaXx0CwbNISBjFsu0G8tFXjESLVVXcSOexStvD8=)
                          3: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: LBQ+ZrFAbtKIGDajjwTBMhkQkguVVcuo8wp9jW8F+c4=)
                          4: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:e4:80:9c:2a:62:ab:51:31:34:0a:81:ed:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
        Validity
            Not Before: Jul 28 22:01:04 2026 GMT
            Not After : Jul 29 22:01:04 2026 GMT
        Subject: CN=d970890ceb020f6c0a0f14eac0aff2ab451d7c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:7b:65:29:8f:a3:bd:87:7d:49:5a:45:fd:
                    76:c1:30:bb:11:4b:16:ef:f4:05:21:b9:2d:9b:aa:
                    3e:22:1e:1c:f5:99:d2:b1:bb:2a:12:04:08:c6:1b:
                    e1:4d:f4:5a:a1:29:0c:60:d9:38:1f:e2:d3:21:02:
                    87:2c:34:30:f3:58:51:27:dc:ad:5a:db:a8:9b:d8:
                    7d:24:8b:08:61:89:00:31:09:a5:49:68:dc:63:6c:
                    d4:02:8d:1d:97:20:54:47:b8:54:05:b0:ce:00:99:
                    35:bd:b6:ea:94:e0:a5:bd:b2:b1:d2:11:22:bb:8f:
                    11:20:be:e8:47:2d:df:d0:25:c6:ab:51:e1:aa:fe:
                    2d:cf:70:d0:3f:2b:fe:05:16:52:b2:49:6a:18:1e:
                    67:f6:08:92:f7:77:1d:9a:31:f0:1d:9c:58:19:80:
                    13:a3:cf:f9:e9:95:d4:ab:01:46:a0:30:6f:31:a5:
                    63:d2:80:5a:9d:f4:c2:c1:72:9e:ce:41:d0:6b:3e:
                    f2:78:17:89:12:a2:8f:84:31:f7:8c:ed:6c:90:35:
                    71:e0:9b:49:bf:95:41:32:5c:7a:94:17:cc:1d:2b:
                    8f:92:a1:c7:b5:26:f3:a3:e3:d1:2f:1e:f0:03:40:
                    f0:a3:dd:50:3c:02:ce:e6:e0:b3:9e:f2:c6:21:b8:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:89:0C:EB:02:0F:6C:0A:0F:14:EA:C0:AF:F2:AB:45:1D:7C:3B
            X509v3 Authority Key Identifier:
                keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ef:8f:cb:c9:38:c3:9e:83:58:86:fe:ee:21:ad:c4:34:78:
         99:71:0e:e6:aa:06:60:41:58:ed:55:86:c4:e1:2f:9a:30:5a:
         99:e9:f8:3c:d2:c9:36:3a:8f:07:81:f5:28:d6:c5:5d:04:8b:
         5f:8e:4c:50:b7:9d:32:5b:9b:80:40:f8:7e:b3:a4:28:5d:85:
         72:a0:33:b9:9d:20:50:e7:9e:4c:30:32:42:0a:a5:45:92:ea:
         e9:c0:d3:d2:a2:4c:40:65:c7:d3:c9:9c:44:70:52:2a:05:57:
         79:e4:e3:37:c9:aa:54:84:a2:c6:30:5a:b0:ff:e9:8d:21:0e:
         37:5e:1d:9b:50:a5:e7:35:c2:70:65:17:b8:ac:91:81:7a:7b:
         8d:f4:ae:00:a7:00:32:af:87:f5:40:6e:fb:cf:71:99:f5:58:
         35:09:f8:99:81:95:1d:36:68:ff:f1:99:e0:f0:20:14:af:88:
         fd:9f:6b:64:58:e3:08:7b:09:ab:3b:05:91:ce:7b:32:ad:d4:
         47:50:19:1a:0b:d7:2c:c7:94:f2:cc:42:a8:29:a8:5f:b5:15:
         89:b1:f9:84:d5:35:b1:46:81:13:b8:be:14:84:f6:b5:ef:dd:
         d1:6b:80:1f:32:66:b3:de:72:bb:76:f6:fa:a8:55:82:25:a3:
         12:b0:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:15 2026 by rpki-client