Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File:                     65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier:          mshYBKkjH38Y/lSC7XtRc9mgrkAVbSTb1Qf2HzoWTAA=
Subject key identifier:   BB:9F:C2:FA:8E:CD:DE:DE:27:3E:35:65:40:64:9A:8E:7D:63:26:1D
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       019FAA50EF1A2786F2BB60ABE304E53A860B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number:          0F07
Signing time:             Tue 28 Jul 2026 20:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:58 +0000
Files and hashes:         1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
                          2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: pRv+fRm8ZSLG9UcQVbErBE8JdustgOAmex2LfA9Wk4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:ef:1a:27:86:f2:bb:60:ab:e3:04:e5:3a:86:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: Jul 28 20:00:58 2026 GMT
            Not After : Jul 29 20:00:58 2026 GMT
        Subject: CN=bb9fc2fa8ecddede273e356540649a8e7d63261d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:9d:d6:8c:c7:81:fa:c1:05:8f:bb:94:d1:
                    e5:cc:af:e7:3d:1e:7b:fa:14:d1:21:b2:55:0f:a6:
                    b5:f7:d8:52:c4:db:87:b7:6b:df:03:7c:49:1f:14:
                    31:f6:fc:b6:36:a8:25:fa:86:eb:27:17:8e:e5:32:
                    05:45:00:8a:2b:d4:b6:9a:61:0d:1e:55:42:cd:a6:
                    8f:8d:82:dc:35:5e:57:31:f3:3f:7d:1f:40:cf:c5:
                    67:46:12:f0:d9:0a:46:f1:31:7d:66:ed:cc:b5:94:
                    be:56:da:46:07:0f:2e:c3:95:68:0d:74:68:9f:c9:
                    40:ff:ce:87:9d:57:63:9c:fc:2f:cb:07:74:4f:e5:
                    d1:ec:b6:df:44:1c:f7:91:f7:da:24:8d:0f:81:e6:
                    32:4e:97:7b:f2:97:9b:58:82:6c:74:65:75:71:29:
                    92:0f:c3:01:2c:ff:b1:5d:ba:77:ba:23:1d:75:f3:
                    55:8e:76:c1:7c:33:8e:b4:31:a0:41:4b:28:8f:75:
                    90:7f:64:a0:89:fe:0d:23:36:54:10:f4:71:6f:66:
                    d2:c7:99:a0:b9:d6:91:5f:6a:f8:2f:a1:a0:42:55:
                    d5:07:3c:58:35:a0:34:9e:e1:96:b7:db:be:bd:0f:
                    a9:e7:33:17:0c:4c:88:f7:d3:8a:8a:e4:54:06:53:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9F:C2:FA:8E:CD:DE:DE:27:3E:35:65:40:64:9A:8E:7D:63:26:1D
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:1e:0f:6b:c4:b0:8e:3c:3a:2c:94:2d:f7:fe:9e:92:53:
         3f:4c:19:34:35:ca:d5:c3:1f:b6:4e:db:8c:44:ad:75:14:00:
         67:ba:d1:9e:39:b5:32:d8:6d:60:9f:38:b6:04:e2:5c:25:3d:
         de:cf:e3:cf:1e:d0:68:4e:6b:cc:f8:69:13:ea:14:06:2a:ea:
         f2:a0:78:04:87:55:48:80:0a:2e:d2:e8:ee:8f:fb:50:e2:03:
         2d:d3:5a:d4:13:5c:4a:23:00:1c:eb:27:25:53:0e:a4:7d:98:
         27:a2:31:10:41:d5:a2:7c:da:d9:13:8e:fc:4d:3d:7c:ad:d6:
         be:28:b1:a7:9b:21:b5:40:74:8c:c2:ee:1f:3e:89:d5:69:4c:
         83:ef:df:0c:2f:10:f8:aa:41:4d:02:81:49:be:35:d4:8e:70:
         d2:53:74:95:cf:a3:9e:e9:c2:93:6b:00:01:98:65:0c:03:bf:
         25:34:76:fe:77:6c:e5:28:24:67:d4:2a:ca:71:28:82:7f:ac:
         ee:da:79:ca:49:72:c2:57:12:a3:7c:0c:69:a6:24:f0:38:f4:
         fc:78:29:bd:21:ed:aa:0f:d1:de:4f:e4:e2:80:ae:2a:98:ed:
         b4:34:73:a3:28:cc:45:90:9c:12:b9:61:6e:ef:6e:fd:b4:3c:
         75:c0:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:14 2026 by rpki-client