Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File:                     0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier:          V3tQuMO5wBGKr4fvV30FLVJI6FjzAm1Zzjuw2KivVn0=
Subject key identifier:   CB:AF:6E:22:18:6D:39:0E:BE:B7:72:34:5F:1A:09:FB:72:46:8F:10
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer:       /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial:       019FA9079EE31C8D18F5660BA32506C0A3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number:          0BE4
Signing time:             Tue 28 Jul 2026 14:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:16 +0000
Files and hashes:         1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: L6ZV/MicPyc2gwCOs3Y7r6SKF342ORgIDr0vM1RyCbQ=)
                          2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:9e:e3:1c:8d:18:f5:66:0b:a3:25:06:c0:a3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
        Validity
            Not Before: Jul 28 14:01:16 2026 GMT
            Not After : Jul 29 14:01:16 2026 GMT
        Subject: CN=cbaf6e22186d390ebeb772345f1a09fb72468f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:c2:d2:5c:bb:e6:46:9b:b1:8f:38:9e:aa:
                    bc:39:dd:2c:b2:94:43:e0:52:70:1c:65:cd:4a:77:
                    c7:d0:c1:a0:6e:27:2b:e5:48:c3:2e:d8:6b:e3:6e:
                    55:a2:dc:98:4c:fc:47:c0:32:1e:5b:0c:dc:0a:0e:
                    b2:f2:27:7d:8d:fa:a6:83:20:6d:4c:97:cf:9e:49:
                    1a:64:b3:f7:ee:42:ba:76:9e:77:0c:65:2b:ca:70:
                    9f:51:12:ed:b8:09:4a:3a:ee:3d:e4:e8:1b:a9:65:
                    4d:77:ee:2c:59:04:35:fa:5a:65:e5:6b:77:e7:6f:
                    89:f8:b1:65:f0:82:b8:95:b3:77:0b:e3:65:b4:5b:
                    a5:a9:ec:de:03:96:94:ee:e1:5e:c1:76:9c:5b:cc:
                    28:39:95:ba:0a:e8:9c:0d:0a:b7:db:f6:d7:73:c9:
                    f0:fd:0a:a5:49:16:1f:0e:13:9d:9f:de:df:93:c0:
                    a8:c0:8c:8e:c3:54:c7:62:d6:6e:a1:ec:49:e0:c9:
                    e4:4e:39:80:4c:27:15:da:c2:f8:b1:40:d4:42:5a:
                    6c:46:47:cd:8e:55:13:af:12:95:01:83:66:94:4a:
                    13:22:63:e5:11:92:17:d0:04:e9:62:c7:65:a4:fe:
                    87:5c:0c:18:d9:12:7d:b1:1a:1d:2b:fd:8b:75:e5:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AF:6E:22:18:6D:39:0E:BE:B7:72:34:5F:1A:09:FB:72:46:8F:10
            X509v3 Authority Key Identifier:
                keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:68:13:15:20:15:cd:4c:b4:95:61:9b:5e:e7:29:56:ec:
         a8:ca:08:12:c4:93:6b:f7:3d:6f:b4:0b:3a:08:1e:1e:49:6d:
         c0:a6:ca:1a:b1:21:bc:0e:0a:d9:44:74:4c:f2:b4:55:d2:21:
         0f:be:83:9d:7a:83:0f:15:63:50:00:f3:1f:e0:ae:f6:cb:58:
         84:59:3a:b5:86:98:7c:d3:0e:6f:34:f9:e9:b3:3a:41:8d:af:
         64:d1:03:83:86:82:c8:ca:bd:d1:7f:40:d2:50:d6:6e:0c:53:
         c6:d2:c8:8c:90:f8:6d:c2:cf:b4:18:88:a3:93:99:27:1c:ff:
         d4:cb:dd:08:64:f8:df:92:8d:6e:96:e8:ee:67:cd:a0:3a:89:
         36:69:34:70:4c:ec:bc:ed:bc:df:bf:d7:f9:f6:17:9f:03:19:
         38:8f:00:6f:02:70:4e:09:71:a8:34:e5:e3:96:13:62:c7:8a:
         76:cb:52:b6:30:26:c7:63:2a:aa:c1:6c:cd:1c:f6:7d:b3:8d:
         0c:10:26:fe:b6:5a:ce:d7:d3:00:c2:48:6a:56:48:6b:93:82:
         26:6f:9a:4e:6c:57:b4:27:90:42:23:e5:c1:fd:f7:9a:c7:57:
         45:4c:fb:09:35:74:d5:aa:0f:be:54:c9:28:55:52:4e:ce:08:
         37:10:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:55 2026 by rpki-client