Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File:                     96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier:          XGXDZqSBxW/TQdpTOlfW6eeeaKOA/m43Nna2swUVgCU=
Subject key identifier:   79:DE:C3:C5:59:9C:63:E4:7B:65:C6:7F:BE:08:23:C3:6A:7A:CD:60
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       019FA82B8646F7CC64AB91FAE205B87638AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number:          0450
Signing time:             Tue 28 Jul 2026 10:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:52 +0000
Files and hashes:         1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: XhyCmASUiP9VjROlTPTkHiOngqYd3gpnGQP87CQ8qK0=)
                          2: ej84eEjBZh5_TuoVktQ40a1gkgU.asa (hash: MHSI1jdl5w4t+h/f8ee1s5/oMRUiSdGHj/rdZ+jynew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:86:46:f7:cc:64:ab:91:fa:e2:05:b8:76:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Jul 28 10:00:52 2026 GMT
            Not After : Jul 29 10:00:52 2026 GMT
        Subject: CN=79dec3c5599c63e47b65c67fbe0823c36a7acd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3a:cb:a3:23:e4:5a:1b:de:a8:7b:c0:6f:ce:
                    ce:c5:23:1a:ac:75:92:f0:54:5b:c8:bf:57:dd:a9:
                    35:78:47:61:14:b0:b7:06:58:f2:b1:50:e0:48:9d:
                    ac:23:f8:45:77:05:dd:1f:19:f8:75:87:4d:dd:29:
                    3b:94:8a:21:23:1c:fd:15:50:eb:11:73:72:a3:1f:
                    f4:ea:f6:19:ae:53:73:3d:a7:ef:8e:a1:5e:56:84:
                    6f:2d:4f:a8:5b:db:61:9d:2d:f4:3d:a2:bc:7b:c1:
                    f6:bc:7d:09:d1:a0:59:ef:51:37:bd:2a:db:7b:0e:
                    83:db:94:af:17:24:25:c9:ed:ef:6d:62:19:f4:0d:
                    33:c5:bb:b9:bd:19:86:af:16:24:e4:ba:ee:a9:62:
                    a2:d1:de:99:1e:ce:57:f7:8a:1c:bf:4a:9f:f1:a3:
                    64:85:f1:81:4a:95:1f:9a:b0:d9:e2:6d:8d:89:d2:
                    32:2b:65:46:36:57:7f:58:e9:09:b6:17:7b:fb:30:
                    8e:f0:f6:63:79:5f:65:cf:ea:23:e6:79:a7:84:3c:
                    b5:50:7e:b9:3f:89:07:98:b6:74:cc:fb:18:10:99:
                    2a:d3:4a:04:56:7d:f5:95:a5:0b:8b:df:f7:ea:1f:
                    5a:0f:72:da:79:bb:af:71:15:98:20:d1:76:ad:21:
                    ed:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DE:C3:C5:59:9C:63:E4:7B:65:C6:7F:BE:08:23:C3:6A:7A:CD:60
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:41:67:79:4d:4d:b7:4f:51:4f:53:59:a1:54:cf:bb:1b:19:
         6e:54:67:19:43:03:9c:5e:3e:0e:82:93:ef:5d:5e:0a:db:72:
         fd:75:32:17:ad:b6:1e:d2:86:97:4e:7f:51:e7:dd:13:5c:60:
         f3:06:06:9c:00:ba:1c:b4:08:3c:21:71:f2:ec:d5:1b:90:69:
         b3:7f:c7:52:38:06:c8:fc:aa:ee:7f:a6:6b:25:f9:70:37:a1:
         b2:52:80:95:60:7c:43:d5:b3:9c:67:1e:ee:2f:fa:b8:57:fb:
         dd:1a:c1:6f:fb:08:7b:00:4c:36:86:70:6f:1c:1f:31:23:ea:
         ca:a8:3a:b8:44:55:a5:ce:b0:81:47:cb:28:20:80:60:d8:35:
         b2:20:c9:3f:84:2e:65:61:f7:03:d6:07:42:ee:ec:a4:b7:24:
         31:b0:86:d3:98:79:50:10:dc:94:53:02:32:28:63:26:56:81:
         53:71:ca:75:36:dc:93:83:0e:b6:55:6b:50:c6:d8:19:d9:67:
         13:f1:38:5d:4a:c0:3b:3a:89:93:72:a9:4a:24:38:ab:f5:a5:
         05:6d:a9:8b:ce:45:9f:37:c3:22:73:19:1b:6a:a0:fd:b9:36:
         50:79:de:a7:2e:ed:ee:33:b6:8d:3a:9d:3e:6d:d9:d4:09:43:
         ad:d8:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:54:09 2026 by rpki-client