Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
File:                     hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft (raw, json)
Hash identifier:          sIrvlb7fkG3HSS0EO150rcdZ2pwxPlJr0ul60UVyfi8=
Subject key identifier:   85:98:2A:49:DF:AB:97:AC:10:A9:17:31:27:4F:5B:FE:BB:B1:BF:35
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Certificate issuer:       /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial:       019FA0E075DCFB5F3F8A18FCDE86DB692F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:32 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:32 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:32 +0000
Files and hashes:         1: 1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa (hash: nSK3MR0nKS3ZWnxeaioA0vYNesL1Z7ExVBEXWs1Aous=)
                          2: 1fFVsYcVAFE1N-aOz9LEMseJXuY.roa (hash: HOFFlz4KmOgHVJgVvTynlqcaj5gxbBYnLRmD8llTlRw=)
                          3: The51JB1jk7iu3SgU3iebbViaAo.roa (hash: IgvjzXkDcI1pUGZYnrs8Dyz1K9/Iv3JYSfz6oucCdSI=)
                          4: aoK4O5p5TThsIV3yaJN8jIRv9XE.roa (hash: nmrjfUmKSW8e+KfYJ4nX5j5UtlDSvUEZyvXS5XHSEm0=)
                          5: hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl (hash: H8I5csidoR8ehCmxmBmY2Z98KXNQL/UtJ2r51Fu7ZkM=)
                          6: tu5qw7pN2svVw6an55fp6xEDFXU.roa (hash: gsnHeRbF1wOKHvFgVL5LAFlPqq/3yDJyXu+yPQETjmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:75:dc:fb:5f:3f:8a:18:fc:de:86:db:69:2f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
        Validity
            Not Before: Jul 27 00:01:32 2026 GMT
            Not After : Jul 28 00:01:32 2026 GMT
        Subject: CN=85982a49dfab97ac10a91731274f5bfebbb1bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:47:cc:cd:45:9d:82:8d:ea:66:2b:b2:a8:
                    1b:da:95:f6:4a:2d:59:e7:c8:02:be:a7:d6:f5:28:
                    cc:c5:44:2f:51:77:fe:68:4a:02:e8:7c:f3:75:5f:
                    4e:cf:09:d6:24:c3:96:e1:9d:67:85:08:a2:6a:19:
                    86:c2:83:61:f0:66:bc:77:6f:3e:0a:6a:58:b9:b0:
                    2e:d7:68:8a:1b:2f:da:4e:f6:8d:91:55:81:ec:05:
                    9a:d0:54:f5:01:6d:1a:c4:a6:fc:9a:9d:43:62:4d:
                    13:d3:d0:07:35:34:a1:40:92:d5:dd:a6:f0:15:23:
                    27:f3:33:93:2b:c2:d5:7a:20:24:58:e2:37:7b:32:
                    b0:b6:ac:26:a1:c0:0f:27:79:95:82:7d:56:f5:4e:
                    ad:95:9e:f0:29:d1:f4:07:33:ac:31:5e:ee:87:ee:
                    d6:b0:45:c3:f7:bc:7f:fd:aa:38:22:30:e2:30:c1:
                    bc:51:19:91:bb:c8:88:41:6d:37:ec:27:6a:a2:45:
                    ff:c0:5b:ce:9a:9c:e8:66:4a:c3:b5:df:c7:f7:82:
                    62:fa:3b:ea:cf:0f:4a:91:98:c9:56:9b:ff:90:b3:
                    04:f7:37:79:07:c2:06:8d:dd:67:31:df:09:f1:99:
                    30:3a:cc:fb:e4:33:88:0a:c4:8f:b2:57:61:a7:36:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:98:2A:49:DF:AB:97:AC:10:A9:17:31:27:4F:5B:FE:BB:B1:BF:35
            X509v3 Authority Key Identifier:
                keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:f4:21:45:c6:7a:af:7e:46:bd:49:68:cc:95:61:f0:83:
         a1:30:dc:a8:5e:f3:82:7e:c6:39:f1:48:b7:21:af:ea:35:a7:
         04:ae:57:ee:01:cb:b9:f1:e1:89:a2:1a:fd:e3:ff:41:c5:25:
         83:5e:11:c3:71:bf:70:41:36:f9:c8:d2:e0:a3:21:74:09:36:
         68:4f:f6:d7:cc:08:50:0d:c8:ae:23:34:98:43:5a:7d:57:ae:
         6b:92:0e:14:4b:70:2e:b9:57:f0:c6:27:b7:56:0c:74:c1:8f:
         1a:7c:50:f2:fa:5f:43:fd:9c:c3:07:2d:9e:56:4c:cf:cf:47:
         d7:72:6b:45:81:d6:13:2a:59:0a:e3:3b:16:d6:cc:65:9a:07:
         5a:77:aa:40:89:1d:4c:18:79:85:7f:1c:0e:50:01:a2:31:59:
         c2:7a:75:ca:bd:ef:87:78:15:30:07:d0:f1:0f:3d:f5:f3:7c:
         c1:d0:39:a3:6c:44:5f:43:c6:dd:b9:db:67:35:28:f1:25:74:
         f4:d2:ec:35:cb:c1:22:9e:15:15:6b:f7:44:bf:ff:39:80:fd:
         e7:a1:ef:5a:ed:1a:2c:69:05:56:48:cb:d0:f0:57:0d:8a:0a:
         8e:97:ab:fa:b9:a9:0f:ca:c7:76:a5:90:30:44:ec:1f:28:ff:
         4e:1b:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:58 2026 by rpki-client