Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          aLSN+fC91HN/8lT5QJk5HbucqvdRik1xoxlXb7O3b+M=
Subject key identifier:   6D:4C:9B:66:B7:FE:35:3B:6B:74:83:DB:10:C6:4C:B0:A9:C6:C6:61
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       019F867B6552A0F96B4D06AD5089CB3453F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0FA5
Signing time:             Tue 21 Jul 2026 21:01:01 +0000
Manifest this update:     Tue 21 Jul 2026 21:01:01 +0000
Manifest next update:     Wed 22 Jul 2026 21:01:01 +0000
Files and hashes:         1: 4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa (hash: k8WIMVFcRpJlyoFhqw0jvwfZZEEvQUGCcnVD6bn529U=)
                          2: JlsqZ6riHbHZDT1nfft-TTbSWJw.roa (hash: kmDoBIgAR0ST5nz2Xe1yvElvTFNkMoNTPUVA43pptOA=)
                          3: PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa (hash: OyU3lX3y+vevyB1v8G/5Shvc1n4shWouA9CyTHgNWTA=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: JDO9HSRVrKhY//F+tfiuR0Cj6mh7BypzSOIzXVurePI=)
                          5: oca5XIEdccD_mFy30LwMDBppQlc.roa (hash: oOccAqwZohR6NOKyRdyvweUbqEHR+Ucd2tYEtvhmMDk=)
                          6: v6fpbc3f88fzRgqHWXPj9c1L4JU.roa (hash: r6mtMFirgqkFt30+Dwt74KwfgRsel57h9zfbWTjXGm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:65:52:a0:f9:6b:4d:06:ad:50:89:cb:34:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Jul 21 21:01:01 2026 GMT
            Not After : Jul 22 21:01:01 2026 GMT
        Subject: CN=6d4c9b66b7fe353b6b7483db10c64cb0a9c6c661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:63:bd:80:30:14:68:46:61:ae:a0:9f:be:
                    95:2c:6d:6f:82:38:68:88:39:72:a0:6f:ea:aa:fd:
                    2c:8c:86:11:f9:44:be:39:69:ce:c6:29:8c:2b:5e:
                    b6:15:d7:2e:e8:8f:1d:3f:6e:f2:60:be:53:32:fb:
                    1e:d5:70:37:9a:e5:d7:7d:70:20:2e:ec:ba:61:b2:
                    dc:75:7a:4f:10:db:3d:d7:e3:e1:81:4e:b7:cf:f0:
                    a4:37:9c:36:27:40:d6:05:12:ab:26:47:dc:c7:ac:
                    98:48:b4:c5:02:9c:94:bc:0d:05:1f:e3:b1:b1:d0:
                    12:ae:60:cc:06:05:45:a8:59:98:14:80:fa:53:37:
                    7e:d4:8a:bb:8e:91:ad:08:09:a2:ef:e0:ac:a1:e3:
                    8e:d0:0b:01:84:e0:02:73:44:53:eb:96:24:af:af:
                    56:ee:c3:a6:da:31:26:8d:63:5d:fd:41:6c:1e:1b:
                    43:53:33:b2:9e:2a:82:ad:bb:71:13:ee:b1:0f:7d:
                    a7:e1:eb:83:1b:66:1f:d1:98:9e:89:f3:b6:eb:20:
                    c4:63:bc:19:46:9d:59:99:79:63:95:a8:ba:4f:12:
                    a7:fa:8a:93:ee:96:9e:33:9e:c6:f8:05:13:4e:32:
                    e4:79:aa:5f:86:bf:5d:e8:2e:4c:df:a7:f5:5c:81:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:9B:66:B7:FE:35:3B:6B:74:83:DB:10:C6:4C:B0:A9:C6:C6:61
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:54:c7:e4:c3:a6:e5:9d:79:6e:56:4f:bb:03:b6:53:fa:
         e6:fd:04:68:66:60:8c:88:fa:f2:3f:6f:eb:ef:d4:ea:0f:e8:
         e3:93:03:a4:83:1b:c3:40:40:21:e8:0a:70:1a:1d:77:7d:fb:
         e2:26:1d:ef:06:a3:f7:2c:a8:30:fd:ae:c4:d5:5e:96:08:68:
         6c:25:e3:10:67:22:e8:c2:8b:c9:9d:2d:8e:1c:f4:6a:b6:ec:
         eb:33:36:88:f2:be:25:f1:10:9f:a5:8b:4c:e0:4e:95:fa:17:
         8f:1b:a7:2f:a7:0d:19:ba:8a:42:76:29:3c:12:3d:36:5c:8a:
         8f:38:31:50:72:33:a8:f4:d3:b5:60:ff:ec:0c:a3:d9:3d:48:
         9b:da:06:fe:4b:cc:5c:53:41:15:0f:23:54:e9:b2:92:4a:1a:
         0d:55:f5:ee:09:83:9b:05:69:ff:37:52:90:5e:ab:aa:1c:d0:
         ce:52:69:89:36:cb:db:5b:1c:55:8d:e3:80:f7:33:ea:2d:09:
         32:7b:9b:5e:38:2e:d3:63:99:3e:8d:b9:84:ab:48:b6:d8:ff:
         bb:6b:d6:d6:30:58:6b:f7:cd:1a:e1:60:24:89:54:31:4a:a0:
         27:d4:b1:eb:52:7f:cc:d6:94:39:06:f4:95:66:26:9a:cf:e4:
         ea:ff:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:52 2026 by rpki-client