Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          5e/J5gTqXeEhMPaliGSw0lkutc0K4F/6MqNtBBirdt4=
Subject key identifier:   CC:BE:AA:5F:68:0D:02:EA:B8:09:C5:51:D6:C7:E2:F2:A6:8A:CF:BD
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       019FA86206A940BB2C7E21F995DA54BC149F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 11:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:24 +0000
Files and hashes:         1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
                          2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: uB4MgQoGhjUr01nsBDnP9XlOQQjdpevLi0q8IQxl5YE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:06:a9:40:bb:2c:7e:21:f9:95:da:54:bc:14:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Jul 28 11:00:24 2026 GMT
            Not After : Jul 29 11:00:24 2026 GMT
        Subject: CN=ccbeaa5f680d02eab809c551d6c7e2f2a68acfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:16:9d:27:48:1a:81:f0:64:2f:f2:9a:c3:
                    f3:e8:fb:44:91:5f:ba:c1:38:8a:3a:90:6a:8d:de:
                    dc:96:f6:2d:af:1d:5f:78:c2:7c:bf:37:5d:a2:3a:
                    f7:6e:00:1e:e3:42:96:1a:1a:f1:e3:a5:dd:fb:82:
                    ee:13:28:d0:e5:67:76:a9:4d:82:bd:71:e8:e7:51:
                    e1:84:e0:75:eb:77:41:06:78:4d:f5:30:ec:b8:5a:
                    75:0b:63:45:0c:2e:31:52:b5:25:d1:1d:e8:c6:67:
                    86:f9:8b:80:70:dc:8a:18:b1:b0:f0:fd:90:b9:27:
                    72:cb:ca:8c:dd:7e:18:40:69:84:b1:70:3b:5a:68:
                    bd:bd:47:70:22:12:c0:1c:53:d0:33:d6:77:68:46:
                    49:ce:fe:2b:46:14:41:d8:85:9f:e0:e9:7a:d7:7e:
                    f1:67:f6:93:75:eb:63:1f:4d:02:9e:5a:d4:0b:23:
                    bb:f9:8a:0d:2b:7d:e6:d8:f8:8a:f1:dc:97:92:d5:
                    c8:b5:07:0f:31:51:59:92:2e:73:7a:d9:1e:61:96:
                    8d:cf:42:c0:84:42:68:b5:5f:b2:05:dd:fb:32:65:
                    40:da:18:76:df:9c:50:6f:c9:58:19:5b:6d:32:ac:
                    66:d1:77:6f:36:50:fd:f5:b3:0b:7a:66:dc:96:0a:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BE:AA:5F:68:0D:02:EA:B8:09:C5:51:D6:C7:E2:F2:A6:8A:CF:BD
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:cd:c8:cc:20:66:99:3f:92:df:fc:a1:84:42:9e:52:84:
         c0:49:d6:0d:d4:d1:10:ad:ee:c1:d3:fd:cb:06:b4:b1:e7:35:
         f5:8a:b7:74:a5:db:ec:74:e2:98:06:04:d8:b7:06:e5:ca:bb:
         93:0c:6e:31:6a:4c:b2:48:56:cb:22:55:5c:2e:be:38:88:65:
         fd:b1:5c:be:46:e2:bd:a1:cc:04:f5:28:90:c0:45:c1:78:9d:
         75:b4:59:65:06:f8:0e:2a:ed:74:5a:7e:1e:15:09:f1:56:e2:
         01:cc:28:88:63:8d:04:bf:b9:58:c8:1c:81:5e:1e:39:b0:f2:
         86:fd:87:33:2f:d8:c8:ec:77:0a:76:f8:5f:0c:58:e8:73:75:
         dc:90:03:9a:73:53:59:7d:5a:5e:56:36:73:d1:88:e8:f0:05:
         d7:9c:08:0d:a2:66:69:14:55:9f:7b:5e:5a:76:fa:47:34:96:
         ce:30:ab:e9:62:7e:0d:e3:1d:e3:c5:b8:15:3f:65:09:41:67:
         5a:fd:a7:e7:f5:d3:79:ce:ce:07:1c:00:34:fb:53:b4:74:61:
         64:7a:d4:3c:45:1b:b7:ad:22:ca:e1:43:98:c2:5c:1e:bc:c7:
         d1:e9:08:03:a6:aa:aa:0b:95:37:f9:2e:84:7d:80:d1:00:77:
         c5:28:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:16 2026 by rpki-client