Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File:                     oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier:          eAX2G7SQT66gaaGwR4Z/gNvR2juHyO90B1trn/kX2yc=
Subject key identifier:   44:71:24:51:D2:F7:02:F5:0B:D3:48:75:54:07:A9:37:33:83:D5:BA
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer:       /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial:       019FAABEB5B95735C0670070AB5FC4CF130F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number:          170E
Signing time:             Tue 28 Jul 2026 22:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:52 +0000
Files and hashes:         1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
                          2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: vhUyO9ruQXV2yNcsWyD6TbxpWZD56VqGM1N1oFML8F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:b5:b9:57:35:c0:67:00:70:ab:5f:c4:cf:13:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
        Validity
            Not Before: Jul 28 22:00:52 2026 GMT
            Not After : Jul 29 22:00:52 2026 GMT
        Subject: CN=44712451d2f702f50bd348755407a9373383d5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:6e:9a:d0:37:b1:cb:eb:ab:74:49:b3:29:
                    7a:4a:a1:dd:08:d1:2a:d7:38:53:97:2e:c2:60:82:
                    d0:da:b5:21:dc:ee:12:45:d6:fe:8e:2d:92:b3:4f:
                    13:f8:09:1c:24:da:21:70:dd:13:4b:a5:4a:ee:09:
                    ee:c7:56:05:f8:e9:c5:19:d2:3a:da:7e:87:e8:da:
                    53:ec:bf:97:61:e4:d6:48:f3:a0:5d:89:3e:39:c2:
                    7b:a1:93:c6:c5:17:30:8b:c8:9f:89:5a:eb:a5:ea:
                    c7:4f:c9:7a:48:62:1c:e7:a3:53:16:71:85:00:1e:
                    56:61:a6:ea:0b:7f:b0:bc:bd:32:b0:a1:72:3e:40:
                    0a:87:fa:82:b7:fc:e0:c0:09:1e:f5:3f:50:2b:10:
                    a6:7b:72:ca:4f:cc:32:a1:ec:89:25:44:e0:5e:25:
                    55:76:8d:f7:bc:57:11:21:e4:6f:db:5d:8c:3c:ae:
                    de:8d:e2:08:1b:59:0d:d0:7f:56:fd:6b:40:36:cf:
                    92:26:65:45:88:e5:a8:e7:dd:40:4e:f9:57:1d:bc:
                    c5:53:a0:b9:83:6d:8f:bf:e6:91:14:dc:4f:86:61:
                    f8:89:05:40:4c:9c:49:ca:52:b9:24:8b:41:5f:d4:
                    88:59:89:6d:33:d0:b6:87:31:84:d9:8a:36:44:59:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:24:51:D2:F7:02:F5:0B:D3:48:75:54:07:A9:37:33:83:D5:BA
            X509v3 Authority Key Identifier:
                keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:8a:26:4c:9b:86:e6:1a:ee:c3:93:ae:6d:35:d8:01:0e:
         ae:c0:6d:7e:5d:9b:e2:17:40:20:e5:9b:f9:a7:d1:aa:76:c2:
         8e:68:f8:43:eb:69:cc:38:b2:f5:b9:aa:df:0d:42:b8:cb:8d:
         8f:03:02:79:cc:97:46:36:20:b3:b9:d5:74:d5:56:60:7e:09:
         d3:e1:67:00:15:76:60:e1:d9:99:48:0f:f8:d7:40:4f:2a:2a:
         f7:ba:94:fc:38:a9:46:df:89:09:94:dd:54:7f:5b:cb:ab:bb:
         05:b1:7d:5d:8f:54:cf:ce:cd:ba:17:59:65:b4:8a:3f:05:43:
         54:ef:bf:e8:1f:37:d5:ef:b5:bf:53:06:0e:51:66:c1:3a:4f:
         62:55:8e:fe:70:63:7a:f2:ca:1f:cc:c1:03:31:91:b0:33:4c:
         e5:70:f9:e0:31:7c:1d:96:30:43:de:24:f2:c3:da:57:9c:b5:
         dd:ae:f1:14:25:82:b2:ba:34:82:45:ca:33:9a:06:d6:03:c1:
         ce:92:ee:30:7d:b3:ad:21:c0:00:92:9a:79:24:db:49:54:47:
         76:1e:11:ff:30:db:b1:ee:52:72:21:44:a9:52:25:5c:48:4d:
         01:a0:a4:ad:52:c7:c4:8a:56:4e:2a:31:5a:94:43:f4:30:5e:
         44:77:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:52 2026 by rpki-client