Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          KJnxBhN/VMQJVuQSV8kquctXdro3xc2PgZvHEONId54=
Subject key identifier:   79:F0:95:42:8B:6E:89:05:03:91:EF:C5:89:7F:38:23:4F:6F:EB:6E
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       019FA90743603BD23D4B647E2706DCE87D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 14:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:53 +0000
Files and hashes:         1: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: RV5yx2YBiTcgRS/4DiqB8iwdnm1V5g7j51MTkxymjNU=)
                          2: Ooaqx-AaUuIu05bcvjpYwUT3gg0.roa (hash: WYWgX4Kkm4uSctkElEdv5T7C0cdbRdRsvjVMLWI0Es0=)
                          3: ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa (hash: GNXHKw8JOl4x62WkohXxkLR6V3oFi4zgRDQxr+0jQ1k=)
                          4: eM23ZnD8jpZVPByDqpueUzr7VuM.roa (hash: XpFVafOc5evuKnLSP6z1Ow2v+VF3PM8B+n8NEsUA1rw=)
                          5: tcsP5brAEAunOOZmw7uzUCdknZY.roa (hash: 2QWWwqVUcIdmiuZeMh2Xyt6tD8Eiy3oPwgkIaE2T/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:43:60:3b:d2:3d:4b:64:7e:27:06:dc:e8:7d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Jul 28 14:00:53 2026 GMT
            Not After : Jul 29 14:00:53 2026 GMT
        Subject: CN=79f095428b6e89050391efc5897f38234f6feb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:08:30:cc:91:34:b3:82:00:30:a1:fb:fd:
                    48:42:4b:5c:84:fd:3e:0c:af:56:d4:4f:1d:93:b4:
                    b1:4a:52:97:b4:2a:ae:a9:29:d9:7f:e1:d5:12:34:
                    58:d0:25:2f:31:ba:92:41:7b:c3:0d:83:e9:25:48:
                    87:8d:7a:ad:e1:f4:f3:4e:17:e6:99:0f:9a:55:65:
                    06:e1:62:12:12:ba:95:7d:cb:44:55:af:7d:46:d4:
                    3e:c2:fa:9d:01:da:ae:b9:6d:1f:5c:4f:f0:84:2e:
                    96:15:57:23:84:77:68:2a:82:10:ff:7c:78:b5:7f:
                    70:2c:13:c5:1b:47:1a:4e:8d:9d:34:c1:f3:58:7c:
                    3d:3b:e5:36:0f:c9:c8:59:45:14:23:e9:20:2f:a7:
                    16:c2:6b:32:68:44:72:b3:56:97:43:67:d0:46:5c:
                    6d:19:65:4b:fa:50:0f:4e:fa:67:95:7d:e0:2b:07:
                    99:35:78:a2:bb:4c:97:df:8f:58:96:a2:5f:ed:92:
                    ec:75:88:fd:e3:50:14:09:80:10:52:d4:8c:c2:c7:
                    43:05:85:42:f8:da:03:80:e3:57:f4:ec:65:be:26:
                    04:eb:f0:c9:33:d8:5d:23:27:74:44:cc:04:8e:95:
                    64:9f:15:93:a5:e9:f2:e1:a7:50:e8:15:ad:aa:af:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:95:42:8B:6E:89:05:03:91:EF:C5:89:7F:38:23:4F:6F:EB:6E
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:07:65:c8:6d:ce:ab:67:0e:f6:bb:8f:fe:ef:40:78:28:
         7a:6a:91:5f:3c:10:9b:7d:6f:e1:47:86:bb:c0:82:09:96:fe:
         4f:63:c0:b8:81:90:c7:5e:ff:74:75:4f:c1:a5:c8:e4:c5:fd:
         2d:5f:4c:ad:be:7b:59:39:ea:b1:1a:0a:c0:83:77:87:64:15:
         3c:4b:7d:f0:0c:b2:c2:1e:75:79:81:e1:0b:9d:7d:72:f6:a2:
         48:96:d0:c0:08:8e:e0:46:7b:56:20:29:a8:cb:13:c9:03:d7:
         b1:57:2b:94:ee:7e:f7:ec:7e:87:f3:9b:3e:9c:81:3e:6f:38:
         20:ab:bc:66:bc:66:50:59:d0:ee:4d:1e:8a:5f:29:ff:32:c4:
         32:1f:e9:6d:80:20:01:1d:cf:ed:39:6a:10:b7:87:aa:fd:37:
         68:d0:43:bc:37:05:51:f3:8c:03:1f:bb:78:9e:23:bf:ef:f8:
         b7:26:61:7a:f9:d0:e1:c4:f7:78:69:e6:74:cc:94:7d:8e:2f:
         96:03:cb:78:51:f0:3d:77:01:a7:16:db:a7:04:f1:d3:91:b9:
         33:18:49:ea:08:f3:57:21:72:b1:29:cc:47:3f:f0:83:77:9f:
         0a:d8:59:1c:92:64:98:aa:69:09:db:9e:77:c7:27:2a:b0:ca:
         3c:e0:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:45:23 2026 by rpki-client