Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          f9BpBTxJJTEfPyzFOctBqv15Sl0d6UR5RTCkTvPfNcs=
Subject key identifier:   56:06:24:4C:E3:C0:7F:21:87:52:3F:2F:A3:0A:8B:67:E8:B2:E4:7F
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       019FA304ACD5BB1FD4EF25771E08379F0FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          16BE
Signing time:             Mon 27 Jul 2026 10:00:20 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:20 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:20 +0000
Files and hashes:         1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
                          2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
                          3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
                          4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
                          5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: 3kRCD8jiop8sJdO03RaKqsYX1kOBJQLs/PW6mpXznB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:04:ac:d5:bb:1f:d4:ef:25:77:1e:08:37:9f:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Jul 27 10:00:20 2026 GMT
            Not After : Jul 28 10:00:20 2026 GMT
        Subject: CN=5606244ce3c07f2187523f2fa30a8b67e8b2e47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:be:b9:b1:54:93:6d:ec:32:41:de:a3:b1:
                    65:fd:05:8f:46:15:f0:4d:c0:6e:57:d2:0d:da:4a:
                    c0:95:8c:5c:76:94:ec:2f:32:e9:71:66:4e:ab:ba:
                    9c:68:de:a9:ea:32:d1:1c:7c:d0:2d:5b:e3:1e:f9:
                    38:8b:a1:c5:2a:8a:bd:a4:df:35:ff:94:88:37:10:
                    e5:10:5b:f9:ae:f3:71:77:37:fd:dd:93:dc:45:1b:
                    8d:40:1c:68:e7:4f:30:19:a5:3b:39:b2:1c:a0:3b:
                    dc:83:d7:ff:a3:24:b3:63:07:ba:2a:bc:4a:2f:64:
                    b9:24:c7:b7:5c:c1:b1:1d:ad:37:c0:f9:db:b5:7f:
                    f2:7d:10:a3:08:8a:48:f2:00:86:5b:00:bc:4b:b5:
                    9f:c3:00:1f:5c:7c:2c:74:e5:04:1f:f7:e4:3d:03:
                    5f:3d:59:45:9a:24:c2:aa:70:3d:7e:10:cc:57:66:
                    d0:ed:f3:92:46:d0:95:f2:d1:f2:88:3c:26:22:28:
                    d1:33:bf:de:2f:1d:53:3e:e0:47:2d:bf:59:bf:f3:
                    db:c1:68:40:ba:2a:e0:9f:8e:d9:71:78:f5:d6:d8:
                    1a:2c:63:0d:19:ae:42:cf:37:97:ce:f5:e9:c7:92:
                    6d:e0:a3:51:3e:6c:1d:1a:06:a2:ca:2d:55:f7:f0:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:24:4C:E3:C0:7F:21:87:52:3F:2F:A3:0A:8B:67:E8:B2:E4:7F
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d4:88:08:7f:2a:0b:95:5d:ae:b9:aa:d1:01:aa:89:be:d2:
         33:e5:de:38:dd:0e:b0:b4:48:84:70:e3:c2:da:74:1a:d6:ca:
         bb:41:98:53:7d:4f:ea:e3:cb:1f:50:24:a1:40:6b:86:f8:61:
         ca:b9:fd:42:54:1c:b4:de:b1:2c:47:0e:4b:6d:68:aa:2f:10:
         ad:45:df:0f:a4:f5:26:b9:0b:d3:27:42:b1:e1:2b:98:8a:d6:
         86:e9:0b:18:58:9f:ad:a5:a4:78:28:d6:37:a7:a4:94:71:dd:
         e2:ea:41:9a:cd:d7:28:8a:77:48:7b:7d:f4:66:3b:11:9b:da:
         43:d5:d5:2b:d7:b2:0e:92:e8:b8:37:71:ec:17:b1:62:3e:df:
         35:08:6e:95:bf:29:fc:ac:56:ea:65:8c:97:b4:c7:9e:e4:29:
         fd:fa:2e:e1:9b:a2:20:d9:1f:c0:35:89:29:1d:b6:6e:8a:39:
         0c:ce:21:c8:b9:05:ca:8e:a6:26:d8:29:d3:11:b4:81:63:cc:
         87:5d:aa:2c:82:45:d6:ac:b1:3a:e4:2f:c8:f0:93:2d:a8:2c:
         0d:58:32:d3:9e:3b:97:bd:0d:fe:44:bf:53:ca:dd:5a:e0:fb:
         97:6d:9d:51:bc:a8:aa:b7:be:19:d6:9a:45:5a:0a:97:63:dd:
         bd:b8:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:23:19 2026 by rpki-client