Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          Xj0H+44Q/61Yasrk8h4bMaW4jfkox4QAf+nYPOJUkQs=
Subject key identifier:   61:AC:9A:59:28:45:FF:C2:2A:61:42:6F:AE:15:06:55:46:46:8F:CE
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       019FA14DA9983875DF9EDBBAD74AEC80F391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          1063
Signing time:             Mon 27 Jul 2026 02:00:49 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:49 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:49 +0000
Files and hashes:         1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
                          2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: PnZzctEBgkr3VTZ/a+BId6YTQLeJhbWkiR/HE72FCn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:a9:98:38:75:df:9e:db:ba:d7:4a:ec:80:f3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Jul 27 02:00:49 2026 GMT
            Not After : Jul 28 02:00:49 2026 GMT
        Subject: CN=61ac9a592845ffc22a61426fae15065546468fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:04:83:ae:56:37:b8:62:7e:10:e7:c0:16:
                    58:17:60:8d:53:e6:5a:39:de:56:4e:06:4a:cc:5d:
                    91:ec:7d:69:80:02:e3:a7:bd:7a:d3:17:d2:5a:ac:
                    2d:4b:5d:ec:8b:c9:27:9f:a2:a3:ef:b0:13:8d:81:
                    c2:77:2b:89:6c:af:28:78:f4:35:92:4b:9f:73:9f:
                    3e:58:0d:f1:86:73:aa:8a:48:57:d0:8f:dd:c5:74:
                    f1:4d:7d:0f:e6:83:ed:d7:5d:b4:db:3b:e0:ac:ae:
                    1f:7e:43:1e:29:f0:59:a2:30:53:2c:5e:9c:78:73:
                    e0:a9:97:53:f9:be:07:72:c7:97:ba:9c:6e:df:61:
                    14:a3:bb:29:1c:c4:e6:03:5d:14:3f:18:ed:f5:82:
                    a0:08:fc:7d:f9:04:f0:da:5a:3f:8e:e8:5a:a8:62:
                    b0:f0:e8:e5:e6:8c:b4:85:41:5f:46:ae:a8:fd:6c:
                    2e:c1:bb:74:a7:fa:73:7a:ad:69:80:39:a9:0d:6b:
                    b3:f6:87:0f:3d:ab:f8:c5:1d:c9:05:7f:70:d2:87:
                    35:72:ed:15:95:a4:04:02:b3:38:a5:ab:48:dc:bc:
                    ca:83:bd:64:47:e6:2f:a6:5a:c2:53:6f:9e:49:53:
                    cf:5e:c2:cf:f8:b8:9d:b5:58:17:b2:19:9e:45:5f:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:9A:59:28:45:FF:C2:2A:61:42:6F:AE:15:06:55:46:46:8F:CE
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:ce:f8:ab:41:a5:18:02:d1:ca:f7:9e:9c:6b:7c:34:10:
         d8:a5:57:6e:35:c1:81:66:c2:3b:33:36:ec:3e:f0:13:15:dc:
         dc:90:af:b7:c5:c5:ba:f7:86:c5:36:49:c4:7f:b4:62:be:85:
         40:95:5d:93:67:61:86:1e:e7:b2:5b:41:32:25:a4:a3:f8:a6:
         d2:be:a0:b1:97:30:34:a5:bb:f1:ce:c3:c3:23:92:97:f3:cd:
         a2:bc:67:87:40:41:2a:39:fa:48:a0:5e:21:d7:86:0c:fc:0b:
         8f:86:a2:f3:55:1f:85:a8:a5:03:db:6f:52:1e:11:b5:6f:2b:
         7e:76:94:59:f0:54:84:54:a4:de:f5:ab:bd:d5:fc:50:c0:50:
         ee:bc:63:0c:8d:a5:a4:72:20:86:49:6a:4d:8a:91:e5:6f:7f:
         68:3a:b3:ab:5d:53:25:8b:4e:50:45:ab:60:cf:e2:50:9f:1b:
         35:84:5f:23:bc:04:39:1e:e7:f3:ea:21:f1:a1:de:a4:a2:bf:
         b4:3c:d2:1a:54:89:f8:d1:44:52:7f:a8:8a:6d:b6:d8:6b:03:
         a0:a3:81:82:12:bf:0a:f7:54:a2:b5:76:dd:75:b7:84:c7:33:
         34:31:6b:fc:cc:80:e6:f8:50:e4:cb:59:df:4b:e0:c1:84:01:
         09:b0:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:09 2026 by rpki-client