Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          M9AcfMgwVWoxhYDQrWYe/+hxWbqFU5kcQQDrisWi3bg=
Subject key identifier:   39:59:6B:87:EE:A4:BA:92:08:BE:B2:6B:18:54:09:0D:B3:BD:EF:A0
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       019F848C4DC5054F8C9EB03C54FBEC90A25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          1533
Signing time:             Tue 21 Jul 2026 12:00:15 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:15 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:15 +0000
Files and hashes:         1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
                          2: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (hash: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: NaYBeEK/bzoJhP8/oyy8N9Bl0iS/6UxHtGBQeCAgRio=)
                          4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:4d:c5:05:4f:8c:9e:b0:3c:54:fb:ec:90:a2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Jul 21 12:00:15 2026 GMT
            Not After : Jul 22 12:00:15 2026 GMT
        Subject: CN=39596b87eea4ba9208beb26b1854090db3bdefa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:94:fb:19:40:0e:ea:b5:67:21:fd:ae:12:
                    b5:99:1e:8c:46:c2:2d:e9:1f:ee:03:60:a1:b5:52:
                    3b:dd:8f:6c:e6:cc:e7:37:fa:82:c3:40:33:13:74:
                    bb:18:59:64:16:0c:ec:f7:c5:51:7d:ac:11:c1:34:
                    a4:f0:8e:60:9e:15:5c:ff:64:6c:4c:a9:d0:ed:db:
                    f6:81:b4:f4:f8:94:2a:37:b8:6f:27:90:c0:59:6f:
                    eb:d8:c0:7f:e3:c9:7d:f3:30:01:6b:fd:3a:03:fc:
                    53:73:3c:98:c7:41:d1:c7:84:ef:b2:62:41:b9:86:
                    3e:f4:b6:9b:90:63:be:89:fb:55:cb:35:c3:63:3d:
                    45:ee:e4:19:03:ee:9c:90:83:b3:f7:f4:17:7e:9c:
                    bc:88:3c:61:15:33:f8:03:ec:d9:81:b6:da:fd:b0:
                    e2:c4:8f:14:62:fb:89:90:ec:e4:68:24:35:87:00:
                    23:87:53:c6:e3:9b:f7:f5:3b:ae:72:fa:ee:42:2c:
                    53:e2:a5:3c:f6:72:f0:ab:97:50:18:49:47:2a:c5:
                    26:5d:c6:2c:b4:f6:db:6e:55:1c:bc:7e:9a:ac:04:
                    ff:ea:2f:4c:ba:76:4b:ab:27:d8:63:da:e8:32:2a:
                    e4:7d:86:49:22:f8:2e:a7:cc:61:3e:48:46:66:19:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:59:6B:87:EE:A4:BA:92:08:BE:B2:6B:18:54:09:0D:B3:BD:EF:A0
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:ca:19:1f:86:b6:07:95:dd:66:40:15:78:77:52:4f:97:
         74:bf:00:76:e6:e4:bd:80:b7:ed:0e:2d:0e:54:e8:3f:71:d1:
         51:78:42:a0:68:75:40:a0:dc:d9:e2:9d:e3:89:b3:38:54:57:
         f8:b5:54:07:f6:94:e2:c1:20:f2:af:95:71:5a:84:ec:e3:13:
         e5:93:2f:3b:f1:48:19:41:7a:18:1f:66:bb:f7:cb:74:5f:aa:
         7c:99:03:c9:ea:2d:46:bb:ef:7b:a2:a4:0d:d8:2d:60:c1:82:
         77:98:0c:fa:a0:e1:34:16:8f:51:79:c8:d8:0d:e7:0c:ce:08:
         91:7a:75:0e:87:d8:a6:90:7b:68:26:91:da:43:16:b1:79:ed:
         bd:2e:11:a2:bf:f6:ac:a9:0e:c0:20:58:ab:56:6d:8a:26:8b:
         d7:d6:85:e9:a0:dd:a5:96:74:29:53:5a:b8:36:8e:13:89:33:
         79:51:6d:30:07:f0:09:7c:23:c6:83:6e:a2:9e:e2:f1:5a:a6:
         4a:95:35:01:39:82:db:d8:fc:f0:c0:27:ea:b0:a8:8f:33:b1:
         2d:cb:61:39:a7:1a:9f:a1:be:ef:f6:1b:ff:02:08:12:88:6c:
         af:2b:e4:51:53:ce:b0:12:d4:ee:d2:be:f8:c6:e1:d9:9f:c3:
         26:b7:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:38 2026 by rpki-client