Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          HsyahIp+FJh/ZrjfAtpUOb1E9h//ACyiwfpaiyq43BA=
Subject key identifier:   F3:74:6B:E0:E4:E0:BA:01:F7:78:E9:61:E4:38:FD:4A:F1:5D:8C:E2
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019FA97595FE44186CEC0015E4220CFDAD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          1966
Signing time:             Tue 28 Jul 2026 16:01:23 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:23 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:23 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: m+mz/ugSMftLcf9QO4G7rOLHLFX6FbAqzuzABru72Qk=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:95:fe:44:18:6c:ec:00:15:e4:22:0c:fd:ad:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Jul 28 16:01:23 2026 GMT
            Not After : Jul 29 16:01:23 2026 GMT
        Subject: CN=f3746be0e4e0ba01f778e961e438fd4af15d8ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:1b:f3:51:74:4a:82:d3:fd:8d:bc:c7:bb:
                    65:21:72:e3:b2:89:9f:dc:0c:3e:76:66:26:92:12:
                    de:ab:90:49:45:d3:7b:2c:48:fe:a3:e9:ac:25:56:
                    f2:7d:48:5b:a9:fb:22:5c:a1:92:1e:da:0f:ea:78:
                    db:e7:6e:84:8c:4f:90:80:63:0d:60:0a:b3:49:03:
                    84:7c:89:ed:95:be:89:e7:84:82:5e:39:0e:31:c1:
                    1d:93:13:00:a8:05:e8:0a:87:df:65:dd:e1:ae:54:
                    d0:21:e0:8e:3b:3f:31:78:82:09:85:21:67:f5:c4:
                    f6:33:18:31:0d:9a:02:9e:e0:a0:4c:d9:af:ab:84:
                    d1:1e:66:7b:51:6d:1e:12:a7:fc:58:27:c3:47:37:
                    b5:70:c3:15:34:77:d1:8e:01:18:9b:1d:f9:0e:42:
                    87:62:e2:4b:0a:54:b3:17:2e:82:fa:56:a7:7b:11:
                    f4:c8:1c:f1:37:bf:7e:f8:e0:ce:75:7f:a9:c6:7a:
                    52:6d:03:31:0d:61:7b:73:e0:73:9c:e3:d7:08:89:
                    b4:f6:99:da:3a:ca:f1:0a:a6:a6:bb:28:48:ad:15:
                    c4:31:6c:cb:76:d9:bc:23:73:96:ce:e2:b7:8f:19:
                    1f:05:61:b4:c8:c8:bb:22:f4:25:9d:3b:a8:4f:6d:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:74:6B:E0:E4:E0:BA:01:F7:78:E9:61:E4:38:FD:4A:F1:5D:8C:E2
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:85:91:ae:ba:a1:db:0c:d4:2d:00:f6:ce:af:4a:cd:fc:
         e1:bf:6e:19:73:05:0b:f5:01:67:e6:77:e5:ff:2e:85:22:56:
         ff:de:a4:8c:87:12:23:28:6d:05:6c:8a:01:c1:4a:50:01:54:
         2b:79:3e:99:64:f0:2e:3a:7b:3f:62:42:bb:71:cd:da:c4:a9:
         92:17:04:ec:07:b3:bb:80:a4:a8:11:87:1c:db:39:db:16:80:
         96:b8:9b:05:94:ca:aa:d9:10:d6:ec:04:b3:0e:c2:22:37:c5:
         34:bf:e1:10:3e:91:0c:10:0b:6f:d2:bc:de:12:ea:3f:95:c9:
         45:a3:77:5c:9f:79:fb:69:8e:3c:52:fe:01:97:0e:cf:ee:35:
         e4:4a:77:68:cc:00:7f:7a:31:d1:48:ff:4e:cc:47:ba:c1:d0:
         de:a5:b6:98:7b:b9:b3:7a:2d:ef:af:da:66:96:b3:b1:87:03:
         b7:31:63:75:69:36:62:5a:ef:8a:6e:a1:30:b1:b1:7f:9a:33:
         45:8e:ca:4e:51:1a:d3:03:20:3d:6a:76:f5:68:66:fb:30:6c:
         23:72:c5:70:e4:e4:c9:3c:ee:6a:42:2c:72:65:76:a8:8a:a6:
         3f:5e:d3:74:af:07:e5:df:49:d8:5c:69:f7:a2:bd:ba:fb:87:
         f2:90:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:25 2026 by rpki-client