Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
File:                     0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json)
Hash identifier:          ZoU2UUqksnJtGrNTFr7rcfkVfoaN0HfQC4tc80L75VM=
Subject key identifier:   8F:52:A4:51:50:6E:D4:51:D1:0D:4A:70:1A:55:CD:AC:A9:83:2E:97
Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Certificate issuer:       /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Certificate serial:       019FA93E52B1448028420A60AFE79DCB8F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
Manifest number:          10B5
Signing time:             Tue 28 Jul 2026 15:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:01 +0000
Files and hashes:         1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: c0CUBx3hy/dEeJQ9MBFxO+/4w7hPmA/K55M3hwytCps=)
                          2: DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa (hash: pdxpKRsCb/8YBP2FJ+k4bPhM6JUzQTx+ikb3uy3CSBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:52:b1:44:80:28:42:0a:60:af:e7:9d:cb:8f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
        Validity
            Not Before: Jul 28 15:01:01 2026 GMT
            Not After : Jul 29 15:01:01 2026 GMT
        Subject: CN=8f52a451506ed451d10d4a701a55cdaca9832e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:4b:8e:6a:4f:ba:6a:e0:fb:10:41:96:7c:
                    75:9c:cf:9d:34:1d:9f:42:8d:d9:46:38:ec:9c:0b:
                    84:75:72:34:00:99:17:2a:19:11:db:ef:09:10:fd:
                    6b:26:34:e5:38:e3:d3:6a:3a:33:bf:67:89:4b:d7:
                    02:82:e8:21:27:d7:8b:52:d6:0a:29:2c:77:84:78:
                    3d:fc:09:f9:fe:76:8d:e9:d0:80:f1:3b:13:6e:32:
                    af:2a:5e:2a:04:8f:4d:33:79:9a:e0:7b:43:c3:59:
                    b7:30:07:22:9c:d9:43:0b:e3:6d:b0:76:27:90:e7:
                    99:b2:2d:0e:e1:69:f3:2a:bd:77:54:c8:b4:72:70:
                    ca:43:01:57:37:cb:db:f5:fe:99:d1:3b:95:c9:4a:
                    db:dd:fc:b3:8f:25:6d:b3:e8:ab:76:2a:87:6c:17:
                    c5:76:ea:61:32:18:a4:88:48:96:f6:fa:64:fe:ba:
                    f6:93:6e:7e:cd:41:9f:e8:ed:07:13:cd:19:ab:5c:
                    0b:76:03:0e:6b:3f:60:2f:57:dd:62:f2:68:e1:4a:
                    59:f7:6d:5c:81:1b:07:d0:79:43:5b:4e:be:6e:a7:
                    4e:e0:63:cf:09:13:c2:b0:8e:bf:9e:ab:12:cb:82:
                    e6:e2:2e:84:bb:00:8b:25:84:07:a3:4d:d9:dc:04:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:52:A4:51:50:6E:D4:51:D1:0D:4A:70:1A:55:CD:AC:A9:83:2E:97
            X509v3 Authority Key Identifier:
                keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:f7:06:b1:6f:be:80:cb:82:54:5d:3e:a6:3a:ad:0c:de:
         4e:b2:cd:4a:17:51:37:4a:bb:df:14:ae:50:c9:7b:e3:a2:23:
         3c:14:04:15:91:a0:68:29:93:c4:49:60:4a:c2:ae:4a:b7:30:
         f4:ef:37:87:69:f0:ee:44:90:45:94:dc:16:6c:75:b2:b9:82:
         bb:47:59:62:6e:27:27:8b:69:e3:85:04:9e:fd:1e:b3:be:13:
         c1:6a:bf:11:a5:a2:c4:01:29:44:ca:62:22:74:19:76:fe:86:
         de:16:a6:87:2d:5a:f2:b3:26:2f:0e:3b:75:40:af:7c:4f:24:
         50:3e:98:9f:25:0a:77:b4:c7:b8:a2:a6:32:55:c2:47:2b:23:
         c9:c5:8e:53:20:95:55:17:f1:fe:d5:87:90:d0:7e:de:5c:6c:
         76:ae:2c:e1:51:61:8f:1a:4e:a0:6d:e3:85:e0:f3:4f:0c:7c:
         0b:a5:86:9d:87:5f:bf:82:eb:44:5e:12:b4:92:d5:1c:19:d3:
         de:1f:19:40:78:6b:08:f8:2b:a0:26:42:26:30:92:73:44:97:
         f0:b6:1e:fa:27:87:7d:27:e1:55:76:d2:14:e4:32:21:ea:0f:
         f1:6a:e0:d4:1c:66:21:ef:1a:4a:67:6a:65:b6:86:e2:26:0f:
         aa:d8:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:07 2026 by rpki-client