Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          lHMKtgsBaM9VMXJwoJJ336SRZeazbudxowXJ1MGxLwg=
Subject key identifier:   43:D0:F6:34:C8:2E:A6:8E:12:81:D9:05:D2:52:57:00:C7:46:AE:E8
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       019FA7BD6F2AC11C1BD88822CC18EBBE8BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          0B61
Signing time:             Tue 28 Jul 2026 08:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:37 +0000
Files and hashes:         1: PVIvAggMAtuREjhV8GPK-EuHdx8.asa (hash: /yi4srMyiV+9qj1Uy16aZQoRy4KHU28OFJInXDw+3jg=)
                          2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: rWBarDeRqBR1jpBqtpW7oAX9hZ0HcOnxP1gQieI/8pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:6f:2a:c1:1c:1b:d8:88:22:cc:18:eb:be:8b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Jul 28 08:00:37 2026 GMT
            Not After : Jul 29 08:00:37 2026 GMT
        Subject: CN=43d0f634c82ea68e1281d905d2525700c746aee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:20:17:7e:fd:8b:95:b5:9a:2b:f3:bc:e3:
                    0c:16:39:f9:94:60:c9:80:68:a9:f8:c3:1e:c7:b0:
                    41:14:0c:d4:78:ea:9f:1b:d1:36:ce:ca:a3:9a:42:
                    4e:4c:70:a4:fb:c9:9f:80:0e:b0:ef:b4:26:01:3f:
                    dc:bb:14:94:2b:14:c3:97:5d:94:e5:44:9a:c1:13:
                    37:ef:20:bb:04:f8:cb:92:60:dc:0f:1f:93:73:4d:
                    1c:a3:53:ba:3d:c3:6d:a4:01:2b:74:32:5d:94:02:
                    0a:76:11:bd:f8:7b:8e:ea:37:b0:5d:2e:a4:b2:35:
                    ae:ae:c3:66:09:98:d5:02:23:1c:1c:b9:36:2d:04:
                    77:98:25:4b:5c:db:cc:6a:90:19:a5:c1:58:0b:4f:
                    77:e5:73:f9:f3:7b:89:cf:44:95:2a:bf:7c:61:d8:
                    ff:7d:e4:e1:22:17:e3:1b:17:e8:07:22:70:7d:cb:
                    6e:47:c2:fb:22:a6:c7:b8:b0:93:f0:a1:02:b1:69:
                    7d:59:48:cf:93:a1:e1:52:8a:cb:d7:0d:f5:c0:34:
                    a5:a7:96:a8:78:a7:d0:c8:18:92:e5:b1:9c:4d:a4:
                    17:51:06:e0:36:95:10:ad:d6:17:99:4d:71:9e:6e:
                    7f:27:51:28:86:cd:6a:d1:9b:5d:6d:83:09:61:12:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:F6:34:C8:2E:A6:8E:12:81:D9:05:D2:52:57:00:C7:46:AE:E8
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:01:74:c0:4a:01:01:23:32:41:03:7d:69:86:ca:7a:ea:af:
         cf:de:90:13:1c:91:5b:b4:c9:6d:36:3f:fc:68:bf:42:de:55:
         a8:c0:b1:54:f7:cd:be:85:4f:d9:1f:7b:f7:0a:5b:a2:95:6a:
         5d:4b:53:5c:36:02:15:ef:b3:03:1e:cb:d7:0c:0b:97:d1:3f:
         56:57:6d:4f:07:4b:11:32:8a:c8:a9:d0:55:84:9b:d9:62:8c:
         a0:66:9e:1e:7b:94:dc:2b:a8:49:cb:ee:5e:aa:d2:42:38:02:
         54:a6:a3:ce:bc:29:67:7b:df:43:08:f0:e2:f8:f2:0f:79:6a:
         0e:50:81:9d:bc:9a:3e:35:b3:e0:d7:08:1c:a2:01:0c:93:36:
         5a:92:c6:05:32:62:77:6a:1a:40:9b:ed:a1:82:91:66:16:2c:
         c6:4e:ca:d3:20:77:29:64:77:f1:07:2b:7a:fe:df:f8:3a:e3:
         ca:a6:d0:5a:de:1d:e5:09:96:76:ae:0d:0c:6d:ca:4f:f5:d9:
         63:3c:61:1f:83:ad:27:cf:7f:c0:ef:72:0a:07:6d:a3:37:41:
         76:ee:56:62:29:54:2e:a4:64:78:d1:1c:22:83:11:28:98:90:
         9a:9b:27:76:e4:27:20:bb:e5:0d:9f:c7:db:31:7e:69:b7:69:
         05:21:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:34 2026 by rpki-client