Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          VqqBQSeKx6BsfSBnn73Bq9ft8BcTZjn+zCUV2tO2m5M=
Subject key identifier:   9F:A6:F3:C9:B9:F0:B0:A0:73:9D:38:2C:7C:AF:27:C9:84:52:1F:6B
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       019FAB2CA5354E4935AA5DEAB26A646D8FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0E68
Signing time:             Wed 29 Jul 2026 00:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:57 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: d1cqUTUn25DGvp3+gFiB6fMQgUjd1n+IlQWP4J9pk98=)
                          2: vGbYlgAHGuxAtkX_gF1BeSRqyBw.roa (hash: AoXRDljrLO0qQScHnB2yMCrZvRd/l+376wR7c+Uavms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:a5:35:4e:49:35:aa:5d:ea:b2:6a:64:6d:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Jul 29 00:00:57 2026 GMT
            Not After : Jul 30 00:00:57 2026 GMT
        Subject: CN=9fa6f3c9b9f0b0a0739d382c7caf27c984521f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:1f:67:b5:ea:c8:55:10:4f:ea:51:bc:14:
                    db:14:b0:ad:53:3d:7a:85:f0:47:0c:f4:a1:9f:7b:
                    c0:34:bf:eb:d1:6d:a5:81:16:55:b3:a3:1f:1d:c7:
                    1d:a8:f5:a6:7c:15:01:53:19:41:f0:7c:89:45:78:
                    cc:3c:50:fd:df:a0:69:33:ae:17:62:a5:cd:94:9f:
                    21:2f:b8:e1:82:64:c5:5b:20:e8:0a:ae:37:b8:99:
                    0d:79:78:5d:95:1f:de:6b:c5:8e:08:c6:23:63:8b:
                    04:61:db:a8:4d:60:85:25:dd:b8:54:e3:bc:3b:ec:
                    43:ca:2f:76:7c:7b:26:07:8a:8f:61:ee:c4:98:23:
                    69:63:2f:1d:48:6d:0a:ef:cd:e2:27:11:d2:8a:64:
                    2f:48:38:9c:61:1b:10:3a:d3:5f:4b:76:01:5c:8b:
                    ac:75:f4:6d:3e:2e:a5:25:62:75:6a:c8:48:db:cb:
                    fe:d3:30:26:b5:99:f8:b0:3c:6b:c6:d7:41:02:12:
                    57:39:3c:9f:82:fd:5c:a0:b8:81:79:8c:13:be:69:
                    b7:b2:a2:3f:03:cc:fe:48:f7:66:fc:0b:d9:69:55:
                    2f:9e:3a:d7:87:92:20:9b:a7:84:92:23:9c:23:1e:
                    c9:d1:b1:a0:06:61:f8:8d:47:7c:ed:20:57:93:06:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:F3:C9:B9:F0:B0:A0:73:9D:38:2C:7C:AF:27:C9:84:52:1F:6B
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7e:86:4a:5c:5b:8f:49:ac:9c:3f:87:7e:b0:a3:d5:02:90:
         d7:12:a3:d8:e1:f1:28:42:2a:27:90:b1:cb:b2:23:72:df:1f:
         28:b9:a8:36:ea:62:15:06:21:6b:06:21:a2:99:61:9a:a0:df:
         b6:b8:42:9a:1b:ca:29:23:01:58:85:98:9e:ef:ee:3e:01:3a:
         d5:28:7a:ed:24:c8:0a:56:f3:74:3c:91:6b:1d:82:00:6f:3d:
         cb:4c:6f:c4:68:8e:c7:c2:e7:08:ae:be:3c:c9:1f:c3:89:ac:
         eb:4b:7c:60:29:dd:34:01:ac:fb:e9:bc:b7:5d:1e:d7:d4:93:
         03:4b:2c:95:e8:31:b7:c4:a8:50:6e:54:35:57:f6:35:1b:a7:
         ce:76:b8:0d:0c:f7:b0:f4:11:ad:2e:7c:3c:20:ee:ad:18:29:
         f5:7a:e6:e0:15:e0:7f:04:90:fe:57:1f:19:2f:54:be:95:64:
         2c:69:c2:99:b0:a6:4d:37:f6:8a:7c:65:a9:b9:d3:a9:f6:62:
         96:ad:92:1f:75:aa:c9:ff:72:2e:b2:8b:38:1a:89:e6:47:1e:
         ff:2c:95:18:38:f3:85:ab:46:6c:90:36:b2:74:f8:d4:a6:ba:
         98:4d:34:b0:6a:0d:fe:d7:c3:52:70:7a:aa:a4:a7:f6:a6:86:
         76:fa:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:26 2026 by rpki-client