Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
File:                     DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft (raw, json)
Hash identifier:          HaWY7tR/Juqhwhs9GXvAQcKJKvpQnYeTwFUX/oXRcsI=
Subject key identifier:   99:EC:93:73:BF:97:83:93:4A:12:71:EE:0F:01:C9:7E:83:5F:A3:6D
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Certificate issuer:       /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial:       019FA906D6A758A05C81A15B1CF0D8F2A26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
Manifest number:          F3
Signing time:             Tue 28 Jul 2026 14:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:25 +0000
Files and hashes:         1: 6OjM-NFIW04K7l_eQoGJACK0VDI.roa (hash: TkZ3uhaW+2MZizAuYJdx0Vwq0vHR9nefDhvzxZzuG3I=)
                          2: DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl (hash: OZtaiAmWMCpY0LJsUAUffiaCQozODhiKVDsIpVZDDOw=)
                          3: KSUNvWYBdy4YdVAnXzSA_dxlq3c.roa (hash: r+AYd5x4wloqbdcvcL3nVXv/9WOqz9qSDvAaU5o0QB0=)
                          4: xCTkLKibXwn7kJuskGFKNRORLDI.roa (hash: HzbQo8dOuYm/UXqOkIfkXlPnBODZYHsqopp3VQ9t2D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:d6:a7:58:a0:5c:81:a1:5b:1c:f0:d8:f2:a2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
        Validity
            Not Before: Jul 28 14:00:25 2026 GMT
            Not After : Jul 29 14:00:25 2026 GMT
        Subject: CN=99ec9373bf9783934a1271ee0f01c97e835fa36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:27:d3:74:c0:8c:39:08:7a:9d:62:da:8e:
                    48:e9:bd:2c:ea:75:5d:7e:a9:db:f8:d4:ef:c5:35:
                    80:79:8d:4b:a0:ef:3d:91:ce:e2:60:44:65:b0:46:
                    6c:4b:6c:e3:6d:d8:98:40:27:13:2a:d1:40:09:44:
                    e4:e9:10:2d:3a:1d:fb:96:5b:c4:cd:c1:94:25:00:
                    07:18:0a:7b:c6:0e:69:96:a3:c2:1d:3a:d0:7d:da:
                    c1:d1:65:98:4a:b2:a7:11:44:dc:a7:66:0a:33:8c:
                    e4:c6:e6:8f:4a:86:28:52:c2:15:e4:e2:02:35:f4:
                    75:e8:2b:03:b1:0d:38:e2:51:21:43:2f:36:53:0e:
                    76:93:b2:6a:74:ff:8a:a7:ae:28:9c:0e:97:72:5b:
                    4c:ce:f4:df:19:be:23:51:48:5f:ce:e9:c0:ce:09:
                    f5:12:50:be:19:ad:5b:74:c1:d6:74:97:26:48:bf:
                    6a:8a:7f:c9:1d:04:01:c0:98:c2:a6:8b:ab:96:70:
                    e6:ff:28:6a:a1:4b:53:e3:b1:90:a5:c6:08:6a:c4:
                    e3:34:12:ba:f7:11:66:6d:03:85:ff:d2:ce:a0:73:
                    4a:6a:db:fa:70:8a:e4:2b:14:8b:f2:c9:ce:52:f9:
                    71:af:0d:b6:9a:dc:bf:96:af:f3:c5:0e:52:40:d6:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:93:73:BF:97:83:93:4A:12:71:EE:0F:01:C9:7E:83:5F:A3:6D
            X509v3 Authority Key Identifier:
                keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:b4:a1:ac:69:c7:d4:56:14:dd:95:df:17:de:20:7c:cc:
         d5:98:36:e3:19:15:53:dd:65:3a:18:bb:17:d0:d6:81:45:bf:
         dc:3b:03:43:a0:5c:1d:66:98:5e:9d:28:73:19:76:39:34:fe:
         2e:b5:74:29:03:34:c2:18:56:2b:43:6a:24:4e:c3:06:ce:89:
         2b:88:97:82:d0:9c:e1:ff:57:26:73:1a:06:67:a3:02:8a:6e:
         c6:f7:ea:e8:da:b9:26:fd:33:be:b3:6e:fd:8a:a2:66:8b:3a:
         a5:a4:9d:4d:8c:8c:10:f0:1e:71:da:63:a4:e9:bd:f3:ef:15:
         42:21:0c:27:ef:ce:46:b5:5d:a2:e4:0b:c7:44:db:d6:44:a4:
         d1:e9:18:0d:18:dd:08:6d:37:2c:ab:bd:ad:d1:dd:a9:e5:73:
         ae:09:a7:0a:20:34:a7:dd:f5:68:eb:c1:15:92:be:41:75:a1:
         f7:cd:15:20:f1:1b:17:fc:8d:58:e7:fb:9e:30:7e:86:57:91:
         ae:1a:f2:3d:3d:f5:04:44:12:a0:ae:da:92:f3:84:89:78:27:
         15:1f:03:5a:ac:56:89:0a:05:c1:6f:eb:43:6e:88:45:96:4b:
         4c:a5:d9:43:76:c0:1c:e3:17:d7:e8:ad:f7:eb:c0:45:7c:1e:
         37:ef:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:19 2026 by rpki-client