Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File:                     spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier:          RRhAFqlEPeAKVsGJezKPS1G21qOMv88fY4h5GTeMxRQ=
Subject key identifier:   C7:F6:BC:5B:15:DE:C0:55:D1:23:F6:5E:65:D7:CD:58:15:76:D6:D2
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer:       /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial:       019FA6AA8125767005050DCF57B6DFE1DA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number:          18D7
Signing time:             Tue 28 Jul 2026 03:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 03:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 03:00:19 +0000
Files and hashes:         1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
                          2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: AmiUxN0iQU33TfJrp+CdkARvbrXG/5a/A2UC+f/nwHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 21:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a6:aa:81:25:76:70:05:05:0d:cf:57:b6:df:e1:da:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
        Validity
            Not Before: Jul 28 03:00:19 2026 GMT
            Not After : Jul 29 03:00:19 2026 GMT
        Subject: CN=c7f6bc5b15dec055d123f65e65d7cd581576d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:1d:db:20:f4:8a:70:ef:ef:f3:85:b5:cd:
                    93:ab:ca:16:1a:47:f6:45:db:24:86:c3:1f:ed:58:
                    53:8b:11:8a:3f:55:fc:5f:79:c2:17:88:8e:3f:d8:
                    01:00:36:c1:a8:7f:69:2f:d6:a9:c4:8b:28:fb:d1:
                    8f:2d:2a:1e:31:15:1e:09:52:ce:a9:a4:52:61:88:
                    2f:6b:a9:e3:f7:cd:5d:cc:40:c0:68:cf:99:9d:75:
                    3f:a5:86:72:a3:c6:53:cf:f6:f6:c4:95:72:0d:f6:
                    82:17:85:af:68:39:ce:82:31:dd:cb:d7:54:71:8c:
                    27:0e:6b:d0:26:fe:41:7b:29:18:e2:9b:31:d5:2e:
                    0f:b1:8b:ed:02:92:06:89:cc:96:23:b6:01:57:1c:
                    81:45:df:60:2e:2f:9a:91:b5:84:3f:ce:bc:8b:94:
                    9d:59:ea:7b:1d:ff:45:5f:7b:45:db:d1:8a:4d:fc:
                    ee:b7:15:da:42:6c:e7:c8:25:a9:bf:0a:0a:4e:ea:
                    28:82:ab:f9:a4:39:fd:33:87:72:5b:1a:35:e2:88:
                    cb:59:a3:e3:9c:be:0c:d2:f7:b7:42:b4:fe:8c:80:
                    1f:72:94:f6:dc:f3:b8:a0:67:23:a7:ce:41:72:63:
                    51:04:5d:c8:4a:5a:1e:03:8b:18:a4:eb:76:ec:a0:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F6:BC:5B:15:DE:C0:55:D1:23:F6:5E:65:D7:CD:58:15:76:D6:D2
            X509v3 Authority Key Identifier:
                keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:86:99:4d:c7:b7:79:1b:69:26:bf:3c:28:b5:ce:01:e2:
         60:3a:d9:eb:f7:91:6e:9d:7b:2f:39:fe:d3:db:21:04:1c:33:
         7f:f7:d3:d5:06:30:e5:ae:5b:62:83:73:5f:ee:3a:39:66:5b:
         49:b1:97:80:91:fe:8f:21:02:79:72:bf:9b:21:fb:43:61:8e:
         82:51:13:1b:69:43:55:bb:dc:0d:e2:fc:55:42:88:20:06:12:
         a6:3b:8a:5a:a2:88:ef:8f:3c:d1:4a:fe:e6:29:ce:11:4b:b8:
         69:95:2f:dd:c5:45:10:13:ed:8c:e3:81:a7:63:bc:7a:23:8d:
         40:f3:a6:57:5e:f6:de:83:90:c8:70:de:2a:fb:38:57:ca:60:
         53:40:83:bf:e2:27:7f:c7:f1:ca:79:83:14:ce:ac:f5:84:a0:
         2b:fe:fe:06:b0:bb:13:11:f6:c8:15:e8:22:9c:c3:e9:1f:43:
         46:44:8f:30:cf:d8:5f:62:7e:9f:79:50:f1:67:75:78:c5:e7:
         24:d3:3f:fe:89:09:89:cb:3a:2c:7f:79:18:1a:5c:ab:6f:6f:
         bc:f7:81:ac:d0:d1:dc:43:0f:d6:80:94:f3:ec:c5:9d:59:c7:
         97:89:53:0c:fa:90:be:04:72:6d:83:16:bd:b4:93:cc:bc:07:
         1a:4f:99:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 04:41:31 2026 by rpki-client