Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File:                     bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier:          GO5ZmCqm1OQh7E2D170iMMFjvDc2g109RnB8vwmKVjI=
Subject key identifier:   5D:35:8B:61:05:5B:DB:8F:01:1C:1C:76:A2:FB:76:65:34:8E:7F:F4
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer:       /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial:       019F85D64F40F3DED6D4387A95D651ACD610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number:          3A
Signing time:             Tue 21 Jul 2026 18:00:42 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:42 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:42 +0000
Files and hashes:         1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
                          2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
                          3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
                          4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
                          5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: ao2oR1SUI7JVpF9GTmnDamN6TrHllmaWSHqMPXRkt/Y=)
                          6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:4f:40:f3:de:d6:d4:38:7a:95:d6:51:ac:d6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
        Validity
            Not Before: Jul 21 18:00:42 2026 GMT
            Not After : Jul 22 18:00:42 2026 GMT
        Subject: CN=5d358b61055bdb8f011c1c76a2fb7665348e7ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:a4:2f:78:8c:fa:66:2e:42:6d:53:2b:d6:
                    ca:f3:63:a5:5f:cb:2a:24:84:92:ce:27:9c:47:51:
                    de:36:58:86:7d:5e:72:cc:d8:9d:c0:4a:db:e7:6f:
                    01:aa:bb:e7:11:a8:e2:d7:33:2d:ec:6f:3c:63:a8:
                    63:c0:fe:d6:7a:30:5e:e1:66:fe:1b:88:65:67:a9:
                    60:6c:af:88:cc:bc:9a:cd:c4:db:94:ac:1e:44:9a:
                    e8:a7:56:50:12:0f:35:a8:8b:5a:8c:21:cd:ff:80:
                    bb:67:26:9f:a2:59:aa:02:44:73:dd:cc:98:0d:46:
                    cc:2e:50:e3:22:e5:ee:9a:a9:47:ea:cf:cb:90:70:
                    8e:95:07:d3:35:60:06:3a:41:c6:d7:8e:cf:57:91:
                    86:b1:a9:98:6a:af:bf:ee:34:42:76:99:19:91:16:
                    9a:8d:e3:b5:b6:c8:3a:ce:dc:c7:75:d1:85:aa:2c:
                    1e:a3:02:20:f8:99:47:d6:8c:a4:3a:6d:27:f8:a9:
                    ec:9b:53:01:58:50:2c:3e:62:af:f3:33:6f:2b:d6:
                    c1:74:05:f5:23:96:47:2a:6b:a6:ec:d3:69:3c:7d:
                    17:e0:72:ce:5f:04:2a:a7:e7:ca:da:ea:d3:f1:96:
                    1f:8c:00:7d:b3:cf:24:6e:c2:2a:c6:55:54:e7:bb:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:8B:61:05:5B:DB:8F:01:1C:1C:76:A2:FB:76:65:34:8E:7F:F4
            X509v3 Authority Key Identifier:
                keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:df:f7:a8:cb:18:a9:b7:60:09:0c:61:48:4c:f6:d7:d6:
         c7:1a:34:f6:0f:9b:40:46:e1:7c:3f:7d:a4:7e:12:02:8e:6e:
         e1:bb:61:6a:12:d8:30:cb:17:5b:6c:8b:76:12:ac:59:77:34:
         df:3f:3a:37:7c:ea:81:11:91:29:09:4d:71:28:46:64:4a:de:
         70:fb:39:ce:1a:29:a0:8e:2a:9e:f0:a1:e7:54:25:30:74:5f:
         38:dc:05:0a:af:0c:00:81:43:5c:60:b6:8b:6e:d7:67:fb:e3:
         4b:ae:d5:65:78:64:8a:d9:19:95:66:9c:47:0b:97:d7:d6:e2:
         a4:c0:bb:fd:66:d8:17:63:2b:e7:05:da:3c:6e:c6:91:33:81:
         b9:5f:4d:0c:84:cd:10:9c:3d:67:ba:cd:10:01:04:a9:09:da:
         88:bd:b0:a6:d2:96:0c:32:82:d8:2d:39:36:cb:6c:f9:90:6e:
         af:bb:37:d9:2d:c6:e2:e7:53:92:f1:01:9d:c0:ff:eb:04:a6:
         a9:94:7e:6d:c2:8d:0d:d7:ac:a4:cf:fa:b0:12:a3:75:26:13:
         16:ff:d4:a7:9c:6b:93:9e:83:64:8b:3a:b5:c3:1b:c2:ca:af:
         f6:de:49:3e:b9:a8:81:7f:60:38:a6:2a:15:6d:92:6d:0a:c4:
         9f:90:ca:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:45:49 2026 by rpki-client