Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File:                     rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier:          xiUsbmQgQM1vxoqFrVusM4ki97T7U9yX96eOlSw2JKs=
Subject key identifier:   4C:2B:B5:FD:BB:FE:D0:56:74:15:1E:B5:63:D7:FD:8B:9B:A1:62:C8
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer:       /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial:       019FA03AE7E186A5C0F3EDFA69565BE07000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number:          0E0B
Signing time:             Sun 26 Jul 2026 21:00:42 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:42 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:42 +0000
Files and hashes:         1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
                          2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
                          3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: UDQnQ1RXYP6SoCmfRfQ/0CxZjPl/XL5mLLdZ69jaeas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:e7:e1:86:a5:c0:f3:ed:fa:69:56:5b:e0:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
        Validity
            Not Before: Jul 26 21:00:42 2026 GMT
            Not After : Jul 27 21:00:42 2026 GMT
        Subject: CN=4c2bb5fdbbfed05674151eb563d7fd8b9ba162c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:80:37:87:b6:b6:1a:a4:76:37:a8:83:93:
                    74:b6:29:31:25:dd:a0:00:82:87:e6:8b:33:32:94:
                    e8:07:27:e7:18:89:78:a1:3f:bf:45:2a:6c:f1:70:
                    6a:64:0f:e9:08:42:c7:88:59:63:08:3e:e5:34:ea:
                    42:78:59:46:98:67:05:5e:69:96:b0:a9:5f:3f:49:
                    42:75:a4:6a:6d:b2:05:62:0d:22:70:08:06:42:77:
                    9f:6c:1d:df:4b:ec:72:1b:f0:7e:d5:f1:67:eb:d2:
                    86:b2:4d:ab:c0:1a:00:6a:13:4c:7a:af:a6:e4:e4:
                    5b:25:33:b2:76:9b:df:0b:a2:47:ca:a4:cc:96:70:
                    6b:44:bc:3e:70:9d:a6:2b:57:85:f5:f4:58:38:8a:
                    cb:1d:ca:d3:86:a4:00:16:75:e0:25:05:cb:86:85:
                    e6:35:6c:e3:4c:6c:61:e8:5f:ca:21:44:9b:c9:57:
                    40:02:be:0a:0c:6a:97:2f:e4:a7:da:95:23:de:84:
                    9c:bb:34:6d:2a:1a:cb:7e:32:e3:33:13:20:5d:92:
                    67:07:b6:83:da:f7:af:91:61:8b:84:3b:1f:04:73:
                    65:39:3d:d5:30:9b:33:94:43:fe:bd:74:7b:4f:fc:
                    94:e4:bd:3d:16:f8:6e:18:78:77:04:95:bc:be:16:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2B:B5:FD:BB:FE:D0:56:74:15:1E:B5:63:D7:FD:8B:9B:A1:62:C8
            X509v3 Authority Key Identifier:
                keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:49:e5:fb:b9:6b:0f:f4:a2:14:64:99:59:01:a2:cd:30:
         77:51:30:58:22:3d:35:fa:37:85:3a:20:68:44:dc:1e:da:98:
         1f:9f:50:6e:26:94:08:c9:17:e2:63:6a:a2:c8:14:70:59:e5:
         3e:ff:a2:58:34:62:ab:87:d8:f6:68:b1:b3:b4:ef:e6:4d:20:
         fc:08:78:82:bb:fd:67:a7:3e:f1:f2:d7:c7:ac:76:c5:3b:aa:
         05:04:c5:a2:fa:1a:3a:44:56:9d:0f:54:63:31:f0:3c:32:6f:
         82:b1:0b:5b:37:32:41:62:cd:4b:84:ee:77:11:a7:c9:85:23:
         91:08:6c:99:e9:24:97:be:c7:dc:b9:1b:37:d9:25:20:4c:59:
         80:43:bd:fd:d6:df:9d:eb:69:b2:17:68:17:1e:1f:0b:f9:dd:
         34:55:de:0e:fe:1f:bd:2e:a3:54:47:93:4e:3e:75:1f:9d:24:
         60:89:48:50:9b:84:1e:36:12:4f:ba:d3:6a:cb:50:c9:91:8e:
         a4:1c:6a:68:48:77:ba:79:bc:01:fd:e8:03:6a:17:03:3a:71:
         89:70:65:75:bf:f0:59:79:2d:b9:e4:dc:7c:7e:db:2b:8b:c1:
         2f:65:7a:6d:9f:a1:72:2d:8a:08:25:b8:75:a3:96:b3:bc:4c:
         8b:c4:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:40 2026 by rpki-client