Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File:                     7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier:          HeBFxmVZ2DIaAx2q7l3+lqU8JmiH6obhpwULTNdhHzs=
Subject key identifier:   6F:9A:86:B1:70:F8:C9:F6:39:B1:1D:11:10:FA:26:D8:BC:7D:2A:AF
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer:       /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial:       019FA14D5169E2DC17936BDC717F7B859817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number:          1885
Signing time:             Mon 27 Jul 2026 02:00:26 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:26 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:26 +0000
Files and hashes:         1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: CS5FBDrPLlLMKNJ0CGO2d+iDSTOdij+JEoKJtvV51ws=)
                          2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
                          3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:51:69:e2:dc:17:93:6b:dc:71:7f:7b:85:98:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
        Validity
            Not Before: Jul 27 02:00:26 2026 GMT
            Not After : Jul 28 02:00:26 2026 GMT
        Subject: CN=6f9a86b170f8c9f639b11d1110fa26d8bc7d2aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:f7:ba:d6:78:92:c3:f4:9c:2d:0c:1e:0a:
                    12:28:64:67:39:83:6f:d5:65:c3:50:7a:a7:e3:3f:
                    73:36:6f:c6:80:22:5e:18:ae:2b:f2:b2:24:c0:ff:
                    70:6d:4f:e7:82:43:d6:4c:80:66:8a:cc:59:7e:0a:
                    3c:4f:42:29:5e:8c:a4:1a:9b:77:0f:fe:83:5f:b6:
                    7b:7d:a6:08:5e:3a:eb:3b:73:c6:65:30:0b:6c:4f:
                    cd:d2:6a:9e:1b:a3:a6:6a:93:04:56:97:e9:e2:4d:
                    a0:54:a5:9d:b5:34:a6:f7:74:c8:00:67:aa:92:f8:
                    66:dc:36:b9:1f:4b:59:39:bf:00:f5:aa:22:2f:3b:
                    95:26:1a:03:2b:2a:2b:d6:7f:f1:3c:36:55:d6:f0:
                    c7:65:de:e2:bf:91:21:ab:60:90:80:a5:ea:1d:5a:
                    39:75:15:78:6d:60:bb:28:e4:2e:af:e1:e1:a7:82:
                    cc:d0:1b:66:d8:20:d9:77:27:11:d5:cb:fb:c2:a2:
                    81:84:b8:8e:6e:30:8c:4f:74:62:53:c7:50:3a:35:
                    f9:22:84:8a:f0:f2:fa:d1:35:f4:64:82:c1:7c:8e:
                    64:f8:89:03:ac:9e:b9:65:39:eb:91:47:63:3a:11:
                    7f:ad:53:74:98:89:a7:16:e2:c3:ce:a9:9f:73:fc:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9A:86:B1:70:F8:C9:F6:39:B1:1D:11:10:FA:26:D8:BC:7D:2A:AF
            X509v3 Authority Key Identifier:
                keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:23:ad:96:6f:49:b6:66:9d:fa:30:dc:43:8c:19:73:10:
         52:48:70:b1:35:af:80:fd:e2:c6:9b:82:25:98:bd:dc:a0:c2:
         9f:19:b7:a5:2f:8a:0c:f2:97:45:cb:9c:1d:24:cb:7d:f0:c5:
         a5:5a:51:2c:d0:f2:33:cf:08:5e:e1:2a:57:c3:56:e2:0d:fd:
         ca:4b:ce:13:77:0c:de:27:bc:14:55:ea:17:21:f5:9c:2a:64:
         a0:3b:8e:28:cf:ec:89:96:52:22:d9:00:f1:7a:a2:44:bb:89:
         8a:55:0b:ae:3b:f9:b4:20:cf:53:d0:75:ad:9a:16:e6:8d:7d:
         f8:a7:5f:44:02:94:76:6d:62:64:98:2a:53:0f:11:1c:4b:43:
         0d:cf:23:52:2a:e1:42:7e:c8:dc:34:97:d0:62:f4:ee:d3:d4:
         60:b3:2e:3a:7d:f8:45:10:49:2d:9d:0f:40:12:b8:ae:8c:fd:
         6e:da:3c:89:3d:57:31:81:9a:06:51:b8:67:ee:30:96:ac:64:
         7f:f3:d4:b2:86:15:37:c3:e2:28:d0:65:cc:43:07:74:28:b7:
         c6:56:12:44:1d:3c:34:80:61:76:13:6f:f5:eb:8a:36:7b:70:
         b0:14:76:6b:69:d3:0a:ee:bf:33:17:c5:1d:d9:52:1c:ca:20:
         a5:10:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:22:21 2026 by rpki-client