Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          jq5NEU2ZoRHC0YTnw1LJ/+/W9s8JiF+S4t/zBl/tTlM=
Subject key identifier:   CF:CC:52:1C:F2:04:7C:11:2A:A1:1C:19:7D:6A:50:D3:B7:24:2C:3D
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       019FA906EECC3B57E999E35F77421C7FB6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 14:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:31 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: suSFtYBOxZmKW2VsNdgrtHbFGiHSHhzmY+a+cKUw14U=)
                          2: A4ui5uqLkX9PBLLxf1O5MibqJ2Q.roa (hash: heMNmY/PuI8OxFj8v8yD7W3dtUKrag//RQPXs4fd034=)
                          3: B3sV0jnamNo239vQrhEaWaSxAqM.roa (hash: 9SPwVzjU/44IydDd5luHKS0eXy9i/DzhGcx7z6/dCF0=)
                          4: ELWCm2DUfBNvitrNlID8nDgglxY.roa (hash: LnMdLptOOFbRYXfj64vft/9vyKxJPRvoWdQ0OsmJPdc=)
                          5: MWww8mg4IAuQ7tfubwcnBwcN-wc.roa (hash: h5+JwC9CF+2XnTKrJ979fW9yKh/yquKOOiCoaTps0Lw=)
                          6: RRB7Zwnksy52qvgZ6I9Xp0jWWlg.roa (hash: hlsuCsxcfM9yac6K8Me+suOwuRSN/YsWGfKp1JGJz9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:ee:cc:3b:57:e9:99:e3:5f:77:42:1c:7f:b6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Jul 28 14:00:31 2026 GMT
            Not After : Jul 29 14:00:31 2026 GMT
        Subject: CN=cfcc521cf2047c112aa11c197d6a50d3b7242c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:e5:d7:7c:24:8f:67:a4:b7:c0:b7:81:d1:
                    0b:b0:af:a0:15:11:9a:0d:be:46:ed:1d:f5:dd:d3:
                    26:12:b5:cb:1d:43:9c:8c:2b:e1:6f:13:e6:dc:3d:
                    30:84:af:b1:e8:21:b3:d6:4f:10:b1:62:27:44:46:
                    df:4a:be:37:bd:64:fa:67:f2:08:be:5b:51:72:6c:
                    f5:02:38:e0:d9:ad:e8:1d:d0:06:63:0d:74:44:f0:
                    92:0f:e2:9c:ae:9d:a9:6b:2c:d5:f5:d2:d1:4e:85:
                    d1:ec:47:3d:25:6c:58:13:fc:46:2c:14:ad:1a:fe:
                    f8:d3:a5:b2:80:49:94:33:ec:5d:fd:65:6a:6b:b6:
                    7a:68:39:5d:92:97:2f:26:0b:9c:1c:9a:07:07:14:
                    31:7b:d5:04:80:d1:3a:af:13:ed:c1:e0:2a:11:91:
                    ee:8e:e1:f1:4a:9c:d4:a3:b2:79:e3:cf:c1:a6:82:
                    fb:6c:4e:24:1c:80:c4:21:aa:06:54:7c:52:13:49:
                    21:85:10:16:c2:9c:34:48:a5:19:c8:a4:86:78:fa:
                    77:7b:d8:49:bf:6b:58:ca:56:33:8e:ca:84:1e:f2:
                    de:36:fc:ec:47:a1:0f:f4:3f:55:b9:55:71:ae:1c:
                    fd:78:45:92:10:23:13:e4:fb:bd:62:d0:36:5f:39:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:52:1C:F2:04:7C:11:2A:A1:1C:19:7D:6A:50:D3:B7:24:2C:3D
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:5d:7d:80:ca:b3:65:80:03:3e:65:a4:aa:c8:44:9c:0c:
         ce:40:a3:93:cd:bd:70:d1:a1:53:b7:b6:d9:7f:88:97:85:11:
         8c:c5:59:1e:0a:21:4d:83:45:4c:2c:e8:28:8c:e1:d6:9d:e9:
         88:b1:2d:61:a5:bf:a1:ef:f6:e8:88:5e:b8:a6:d2:bf:cf:72:
         49:c7:21:4c:46:92:c8:a5:a7:c6:1c:db:7b:d0:e1:cf:97:46:
         5b:92:9f:03:0a:b2:ea:fc:e8:5c:16:5c:ca:40:2b:4b:a7:b9:
         95:89:47:12:26:c9:fb:08:3d:e4:72:33:6c:80:67:22:2c:f9:
         d2:97:99:89:5d:a4:c4:4b:1b:36:c6:6d:1a:e7:f0:1f:57:51:
         f0:48:aa:80:9e:f9:be:81:95:78:dc:d1:81:83:da:07:b6:b9:
         eb:04:4c:11:58:b7:f7:c0:44:eb:41:71:fd:80:3d:c8:4a:c0:
         1e:a5:3d:ff:d2:36:b1:1f:3e:26:7f:ce:bb:66:da:21:64:9b:
         ab:b0:12:40:42:14:24:82:85:5a:58:9b:e0:7d:43:83:a2:09:
         d5:19:41:67:da:a8:f2:e5:74:eb:ba:43:17:66:ba:ec:7a:a9:
         55:09:f3:79:63:e0:42:8f:26:69:da:af:cc:7c:76:1a:c7:ee:
         87:bd:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:00 2026 by rpki-client