Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          U3ufSA8Tx2QryffZgN6SKwKul2mcKFJpVjLewC/3Gb8=
Subject key identifier:   E1:B7:C9:88:00:6A:BA:A9:00:EC:29:F0:AB:98:18:D6:DF:4E:85:5D
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019FAB2C77D031F1394A1F14409890ED640B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0E94
Signing time:             Wed 29 Jul 2026 00:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:45 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: z0An6+oaNYqebu43OYeCahbGfW4eGM973AcTCvGheB0=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:77:d0:31:f1:39:4a:1f:14:40:98:90:ed:64:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Jul 29 00:00:45 2026 GMT
            Not After : Jul 30 00:00:45 2026 GMT
        Subject: CN=e1b7c988006abaa900ec29f0ab9818d6df4e855d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:7d:83:29:41:6a:88:09:9a:9c:0a:67:fe:
                    cd:ac:f8:a6:d3:fc:d6:0e:ba:78:a6:f1:e8:4f:a9:
                    3c:38:ee:ac:71:e5:bb:df:e6:a3:2d:f7:34:fe:3b:
                    16:30:ae:86:c2:90:15:6e:79:5e:60:01:28:3a:1c:
                    37:56:60:86:5b:dc:4e:d6:9f:57:ef:30:94:a4:2a:
                    cb:3a:64:5c:dd:a2:54:7f:44:91:7a:00:98:71:a8:
                    90:6a:a7:dd:ec:e2:56:94:25:d0:79:01:ab:fd:58:
                    1c:fd:87:47:21:04:13:85:cd:74:b7:13:97:74:70:
                    02:f2:23:db:c6:22:90:0c:9c:38:de:96:c2:14:3e:
                    c2:0a:44:4e:06:58:b1:3a:8d:c0:8c:20:27:25:ee:
                    d2:b3:cc:27:e0:b3:05:ef:43:c7:69:a3:1b:cb:48:
                    44:f3:f6:61:6b:19:5f:7d:d3:87:a9:02:a0:71:46:
                    89:f4:8e:ad:b4:bb:36:37:ca:b8:a4:4e:0d:fc:33:
                    0d:93:29:f1:38:2c:96:8e:2f:77:c6:88:e2:31:eb:
                    04:2e:9b:17:82:aa:1b:58:31:7c:90:d8:fc:f4:3e:
                    0d:c9:eb:53:6f:a4:66:d7:9d:ce:13:71:b4:17:51:
                    1b:4d:bc:e6:61:8f:b7:d0:3c:61:1c:00:45:68:f3:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:C9:88:00:6A:BA:A9:00:EC:29:F0:AB:98:18:D6:DF:4E:85:5D
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:2e:6c:70:e2:d3:f2:48:9c:bb:19:4d:ff:05:fc:70:3a:
         ee:fc:98:26:20:b0:cb:34:4a:7b:40:c9:f6:69:66:8f:af:9a:
         24:fe:ee:f8:d5:4a:0c:4f:e3:2f:80:cb:c2:50:94:6e:64:41:
         61:e0:6b:49:d1:61:1d:9f:ea:5d:fa:65:01:3d:70:b7:81:68:
         e4:f2:8f:2a:a6:46:64:fc:59:15:c4:a8:11:96:97:06:16:b2:
         81:01:f6:c9:c5:3b:15:70:b9:82:a0:e7:85:06:19:4d:b4:78:
         00:97:77:27:0b:4f:1e:1c:d1:4b:e9:e7:35:c3:f2:6c:e2:98:
         24:e1:a4:f5:38:5c:92:0f:66:05:57:66:77:5e:30:8e:55:84:
         b9:4e:7b:11:40:bd:fe:02:c9:5c:18:bf:42:99:55:67:c6:de:
         bb:0a:d3:0b:87:79:d3:f9:37:ec:d3:62:ce:68:a8:6a:a1:33:
         8b:3c:9c:9e:e3:04:51:f3:6b:0f:c3:37:cf:fd:1a:f6:a5:e6:
         fe:0a:87:50:14:57:8e:04:f8:ac:0d:55:6f:d5:47:56:7f:5f:
         cd:0b:09:42:87:4b:1c:a9:2c:01:ad:1a:01:94:bd:25:13:a6:
         e7:54:5d:ab:29:e1:88:bf:55:1c:0c:3e:48:80:fc:2e:76:41:
         24:9c:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:04 2026 by rpki-client