Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File:                     1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier:          N1Z59CMzwAmk8EhpoYpjNDvw8YCNEDfr9I2RC9R5fck=
Subject key identifier:   08:8E:70:07:53:57:F3:9E:1C:95:AA:C2:49:02:FF:D0:C5:A0:04:64
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer:       /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial:       019FA9ABDB99534A73F45F6DFB91DDD44049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number:          0E79
Signing time:             Tue 28 Jul 2026 17:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:40 +0000
Files and hashes:         1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: TZ7P1D9VPcnUPRBtpOVJftlY29WdjYHJKqPASZnwZpU=)
                          2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:db:99:53:4a:73:f4:5f:6d:fb:91:dd:d4:40:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
        Validity
            Not Before: Jul 28 17:00:40 2026 GMT
            Not After : Jul 29 17:00:40 2026 GMT
        Subject: CN=088e70075357f39e1c95aac24902ffd0c5a00464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:c4:34:de:bb:30:c7:32:dd:8f:7a:67:b0:
                    66:49:80:81:b0:39:e6:e8:0d:1d:e2:18:96:2b:60:
                    ee:4a:ed:b3:26:56:f3:b0:50:80:e6:a3:d0:fe:66:
                    bc:f0:e5:7c:a3:c4:8b:a9:6e:cd:6d:6e:12:12:69:
                    ae:2b:b5:eb:1a:f9:03:d7:f0:4d:84:55:1c:83:63:
                    ba:0c:5a:50:63:68:b5:d9:b4:37:45:41:2b:b1:06:
                    31:88:2b:8f:08:46:c4:3c:29:59:9a:66:22:eb:3f:
                    91:5f:ba:16:a7:0f:6d:96:44:e5:97:23:82:04:e9:
                    81:0f:37:d7:23:54:67:a1:ff:58:43:37:5f:2b:a3:
                    6f:2b:44:fe:90:3e:b4:f9:ff:46:e6:b6:6b:47:44:
                    3e:00:11:72:33:b2:91:b0:1f:6b:9e:60:0f:d8:66:
                    fa:cf:2a:c2:37:71:33:af:c5:ea:80:17:5f:20:75:
                    2d:c4:c1:9c:84:44:62:b4:ed:d8:bf:40:af:4f:47:
                    fc:e3:0f:84:32:bf:78:37:03:82:c0:e4:1e:54:99:
                    cd:67:fa:2d:08:96:bb:0f:5f:af:92:21:04:77:22:
                    9b:a6:b0:d7:2b:3f:5b:d1:11:40:9a:74:33:14:5d:
                    56:6f:ea:5d:8f:ed:c9:21:aa:c4:5c:c4:74:3e:f0:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8E:70:07:53:57:F3:9E:1C:95:AA:C2:49:02:FF:D0:C5:A0:04:64
            X509v3 Authority Key Identifier:
                keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:f7:e3:0d:44:e8:db:0e:28:d4:8c:78:c1:35:a7:a7:9d:
         3d:83:7c:3a:9e:2d:4e:12:32:f8:6a:1f:db:18:f4:08:49:8c:
         be:0f:06:9e:81:27:7b:e4:87:b5:46:a2:92:0b:14:95:c4:a8:
         7e:f8:fe:06:61:62:92:cb:00:90:8f:d5:ef:e1:09:55:ef:d9:
         32:ef:5c:9f:10:e0:1a:bc:2c:11:9b:0f:9e:c6:20:d2:2a:e5:
         36:eb:b3:18:c1:57:04:9d:fe:30:00:b6:c2:f7:f4:cb:44:67:
         12:6b:58:f8:e2:1e:a0:cd:fb:e4:02:38:9d:43:dc:33:c2:5d:
         84:a2:c6:37:00:ae:8f:ac:da:5c:7c:28:ff:d5:39:9a:84:01:
         39:08:cf:2c:c0:d8:95:53:b6:29:59:55:5c:85:dd:eb:26:c2:
         18:e2:31:6a:4d:00:7e:e8:cf:4a:2a:dd:c1:af:9a:ea:53:d2:
         65:65:bd:1e:44:f0:66:43:14:29:bf:cf:55:d1:53:3f:eb:07:
         ae:d4:54:53:5c:46:b1:38:2c:a6:2a:85:c4:79:c3:54:5a:ad:
         9b:db:da:2a:2c:ac:c2:20:65:17:81:e5:a0:a1:a9:4f:90:61:
         95:3b:0f:db:87:63:ef:cc:c7:e4:df:8f:0d:a6:c6:04:b0:63:
         a3:6a:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:53 2026 by rpki-client