Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File:                     fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier:          d64jit35tbeTuYoUP3Xb9gDm4Nv+Rdb0lthFaHJh5EY=
Subject key identifier:   D4:2E:96:00:E0:A2:C8:BD:20:D6:C3:3E:1F:F2:B1:8A:6F:DC:B9:98
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer:       /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial:       019F9F9618E2C3A2FE114B98C2F93B9DB5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number:          0123
Signing time:             Sun 26 Jul 2026 18:00:41 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:41 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:41 +0000
Files and hashes:         1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
                          2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: 5vVU7okYq9sFax8SFyMTJdOoskTw7UA0Zw1Ov+uvbX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:18:e2:c3:a2:fe:11:4b:98:c2:f9:3b:9d:b5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
        Validity
            Not Before: Jul 26 18:00:41 2026 GMT
            Not After : Jul 27 18:00:41 2026 GMT
        Subject: CN=d42e9600e0a2c8bd20d6c33e1ff2b18a6fdcb998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:15:55:12:0a:20:c8:26:37:09:bf:99:8d:
                    2a:91:ea:ae:29:a1:89:59:e7:20:1f:21:23:37:6b:
                    08:6f:d2:2e:76:b3:d4:94:0c:f6:b3:88:7a:ed:37:
                    80:0e:4a:e3:d9:0c:a0:41:80:cd:bd:e7:9f:8e:43:
                    f4:63:ae:ea:ea:00:54:69:aa:e0:74:5c:1a:71:70:
                    5f:1d:17:2a:d5:65:03:28:05:de:e5:d2:63:04:a5:
                    26:db:6d:b8:ca:19:90:43:2a:71:92:40:f3:5d:71:
                    00:a8:55:23:43:1b:ae:a6:bb:41:d3:d9:59:27:81:
                    de:f0:bb:0e:55:a6:6c:9f:c3:23:80:77:d1:0b:0a:
                    90:97:e7:e7:53:40:62:5e:eb:a1:71:85:e4:0e:8a:
                    06:30:f1:1f:b9:86:7e:dd:c6:4e:a2:47:54:81:e1:
                    cd:2b:72:ca:d9:bd:85:e9:b2:4a:85:d9:02:e6:98:
                    e4:2d:d6:26:ae:16:37:d3:b0:1f:90:7d:dc:c8:2c:
                    d4:ef:51:81:e2:25:ce:04:b2:2c:3b:a7:8b:06:4d:
                    6d:b9:70:b3:79:15:e2:e3:9c:81:fc:dd:46:b8:93:
                    2c:80:1f:be:fd:6d:76:37:dc:74:db:8b:fe:68:b6:
                    c1:83:19:96:88:03:a4:69:eb:fc:9f:d9:7d:78:0e:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:96:00:E0:A2:C8:BD:20:D6:C3:3E:1F:F2:B1:8A:6F:DC:B9:98
            X509v3 Authority Key Identifier:
                keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1f:88:45:8b:c0:c2:a6:b3:93:c8:d8:b7:b1:f4:50:f8:78:
         6e:e7:a8:51:4d:43:a9:51:75:2b:04:8d:f8:d5:21:62:27:e7:
         9d:7c:8e:bb:1c:eb:8b:f0:bb:52:54:43:29:9d:1c:bd:9a:e5:
         ff:b7:08:2d:7e:4f:8f:48:c1:86:f6:bb:92:5b:1a:1d:20:3e:
         fd:e5:8c:9c:1b:38:6f:ca:fb:92:16:76:5d:29:03:37:5b:23:
         eb:c0:fc:21:7c:54:ff:a8:8d:47:4e:2d:0d:31:f1:74:62:08:
         fa:05:1b:66:4a:42:c7:c3:fb:4d:81:d3:1f:dc:8d:ae:1c:d2:
         58:31:f8:cc:18:1c:49:25:6b:a1:8e:f5:de:ea:47:b1:9f:c1:
         dd:8d:c6:6b:3c:bd:09:9c:7c:e6:f7:46:32:a3:de:96:2c:63:
         a6:51:52:4a:37:ee:e2:18:d8:b5:ff:5a:30:5c:ed:87:aa:51:
         53:48:06:cd:69:0a:5e:8f:f8:4d:b7:e6:55:58:a5:b5:8e:21:
         1b:22:00:9d:74:2f:20:66:f8:94:68:34:52:16:f0:e3:b4:8c:
         ef:79:67:e2:27:5f:ef:2b:a0:3d:83:43:f3:9a:11:40:dc:fd:
         42:e5:e7:af:7b:5d:4d:bf:32:7e:09:33:c0:11:62:50:74:0d:
         56:80:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:22 2026 by rpki-client