Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File:                     cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier:          UbZHGzJwG9DUcUmZVSUH2djV+o4ZiqjnQuHl1WfSOjU=
Subject key identifier:   7E:C2:7C:DC:EA:BB:54:58:8F:DC:BE:71:2A:A8:9D:8C:80:FE:36:18
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer:       /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial:       019F860D289F1DC6A8BE0CFE430D762D3B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number:          0B34
Signing time:             Tue 21 Jul 2026 19:00:36 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:36 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:36 +0000
Files and hashes:         1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
                          2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: 2CcoQsezb2vDe/VMWLAcyC9cUfGY10z6T1Rz0q/DDqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:28:9f:1d:c6:a8:be:0c:fe:43:0d:76:2d:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
        Validity
            Not Before: Jul 21 19:00:36 2026 GMT
            Not After : Jul 22 19:00:36 2026 GMT
        Subject: CN=7ec27cdceabb54588fdcbe712aa89d8c80fe3618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:4d:e6:d4:3e:d4:1f:ce:83:5b:4e:d2:ba:
                    fe:b2:ff:e9:e8:12:ca:c7:2c:90:1a:5a:21:dd:92:
                    02:10:15:dc:8a:ed:13:18:c9:b0:5b:06:bf:ea:ec:
                    f7:73:f2:e7:1d:ab:66:29:0f:c9:0b:36:76:e5:54:
                    6a:8b:75:19:21:7f:62:a9:26:05:e7:31:fd:e9:cc:
                    e8:8f:98:11:d0:b8:82:9c:e3:e9:00:37:67:c1:b9:
                    dd:da:73:39:5c:b8:1d:0f:5f:5b:65:7c:0d:1e:da:
                    6d:a6:ba:2c:d6:a4:7e:49:b0:88:22:55:97:bd:bb:
                    e0:b6:d7:d8:6c:1c:3d:a2:10:df:61:5e:23:82:07:
                    fb:3e:eb:f1:02:c2:38:b0:05:9c:71:49:5d:4d:a3:
                    6b:1e:61:c0:bd:3c:2d:81:99:aa:56:1d:22:dd:28:
                    23:af:d3:ae:9b:49:95:4e:65:94:21:de:fb:74:fe:
                    b3:7c:a8:77:3b:f8:25:74:ac:13:b0:df:eb:f6:5c:
                    0b:4f:b0:97:e1:44:b1:97:1b:e3:76:60:5e:87:0f:
                    97:12:5f:a9:90:77:53:02:c8:50:28:dd:97:5c:94:
                    90:10:e4:0b:27:4b:66:31:48:e9:8e:07:c2:2f:18:
                    4f:6d:e6:85:fa:a9:95:7c:db:9c:e3:f8:2c:10:33:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C2:7C:DC:EA:BB:54:58:8F:DC:BE:71:2A:A8:9D:8C:80:FE:36:18
            X509v3 Authority Key Identifier:
                keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:65:ae:79:19:1a:57:0c:9b:7b:df:7b:a5:38:80:49:53:b9:
         11:2c:b9:13:52:38:91:4e:04:df:13:89:20:01:a7:34:8b:24:
         2e:c2:0f:23:b4:05:56:93:48:39:c7:7a:c4:9b:33:ad:2b:e5:
         56:50:c3:70:b8:1b:03:59:0f:4a:4a:c6:5a:8a:d2:03:59:8f:
         2d:b1:f8:98:6d:c1:96:f2:42:83:f2:ae:1d:fe:8f:7e:53:b3:
         83:18:45:5e:de:e3:86:12:dd:77:ec:9f:cb:b9:21:ea:94:75:
         d1:2c:a4:fc:7d:23:6a:d7:2c:88:af:2f:fb:70:2b:74:68:f6:
         e4:21:d7:34:10:cf:2b:61:79:a1:ad:72:fb:0c:07:7c:73:fd:
         f7:e7:fb:ab:ab:f6:94:a8:03:c9:2b:70:58:ad:97:52:d1:00:
         c8:6c:83:9c:2c:14:4c:0a:81:78:64:30:d6:62:e7:78:b3:9b:
         2e:bd:ec:1a:9e:1d:56:68:f0:db:63:19:2c:00:e3:2a:a6:53:
         e6:9e:9f:3e:99:3a:53:fb:91:e9:55:98:84:0b:b4:fd:39:1f:
         c4:81:c0:c7:c8:6c:2d:5d:2f:11:6a:e8:23:d1:5f:80:fd:3a:
         94:29:ad:9f:9b:9c:f4:42:cf:76:a6:87:fa:83:42:90:bd:1e:
         ab:06:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:55 2026 by rpki-client