Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File:                     suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier:          B8/8pAuJNmj1lJfb7G0/LpFZPqKlO5JW5M+Rnua9ue0=
Subject key identifier:   C1:08:40:9F:52:EC:F9:69:0F:9D:3A:EC:D5:B1:D7:82:3E:BE:CC:38
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer:       /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial:       019FA03B3AFD890621209403C0AE990CBF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number:          13E9
Signing time:             Sun 26 Jul 2026 21:01:04 +0000
Manifest this update:     Sun 26 Jul 2026 21:01:04 +0000
Manifest next update:     Mon 27 Jul 2026 21:01:04 +0000
Files and hashes:         1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
                          2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: pevve9h30WrweEaKw21OV8vibjCfZAS3147QA+E1a/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3b:3a:fd:89:06:21:20:94:03:c0:ae:99:0c:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
        Validity
            Not Before: Jul 26 21:01:04 2026 GMT
            Not After : Jul 27 21:01:04 2026 GMT
        Subject: CN=c108409f52ecf9690f9d3aecd5b1d7823ebecc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:53:8b:7e:1d:1c:82:d8:e7:b0:1e:cf:94:
                    84:1a:4b:06:7f:e7:1c:50:1c:a9:2a:15:fd:51:9b:
                    1e:b3:53:51:2b:c8:6a:89:8e:1d:33:13:cf:0b:2e:
                    8e:ad:1a:f6:a8:12:a6:74:5e:f1:67:a0:db:02:8f:
                    fd:a1:68:95:6b:01:0d:76:07:18:30:84:3a:93:c0:
                    94:20:5a:b9:e1:e1:7a:fd:44:d6:43:af:37:76:3f:
                    e1:f4:14:24:90:48:08:34:67:b5:cd:0e:d5:3c:8a:
                    53:3b:e2:68:23:d8:e9:cf:36:88:40:4f:a6:83:21:
                    cd:7d:15:1c:7d:3b:b8:e2:52:4d:05:8b:45:77:1c:
                    9a:d8:d2:6a:05:1c:8a:eb:d8:a0:83:a5:4e:83:14:
                    68:3a:0b:b0:70:59:14:a4:67:eb:49:33:b1:68:b3:
                    e3:5c:2d:d8:65:39:da:05:95:b1:52:5d:a6:e5:fe:
                    93:99:c3:2b:c9:aa:b3:08:c4:b9:e4:b0:3d:ad:bb:
                    1c:1a:ff:ff:9c:dd:f6:e8:09:3a:12:b9:92:94:1d:
                    fa:10:c8:f2:b3:ac:59:52:f6:68:ea:76:e4:bb:a8:
                    34:e4:76:4c:8a:39:8a:5c:1d:50:32:57:ad:ee:49:
                    52:19:73:32:55:3b:c1:81:c5:e6:21:12:44:8e:51:
                    76:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:08:40:9F:52:EC:F9:69:0F:9D:3A:EC:D5:B1:D7:82:3E:BE:CC:38
            X509v3 Authority Key Identifier:
                keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:71:08:f2:6c:61:3e:02:15:98:73:bb:bb:75:d4:8d:64:
         74:59:fe:71:18:a2:ec:7d:95:b1:eb:f3:fa:93:f2:25:25:a8:
         cb:da:c5:68:dd:d8:ac:67:23:4a:71:36:7b:ec:60:0d:88:15:
         1e:91:04:41:68:19:a6:84:10:77:b9:0f:26:ac:8c:2d:33:76:
         e7:b3:38:1d:c7:71:da:17:37:3b:7e:1a:e9:53:96:9a:b3:66:
         3d:db:10:2e:ce:1f:a6:5c:98:c8:dc:32:6a:13:7e:44:29:e3:
         07:95:8b:55:32:1c:09:0d:87:c3:9a:a6:4d:a3:1f:fb:72:e2:
         c0:39:51:7a:12:75:94:9d:c1:fe:8a:74:71:37:82:31:47:63:
         15:d1:ff:87:29:19:39:3e:c6:8b:16:72:48:f0:ef:a4:5d:25:
         0b:58:9b:82:5c:17:91:a7:d3:5a:7b:8d:db:8a:10:30:1d:d4:
         0c:ff:7b:98:48:16:51:f7:9d:20:32:4b:ea:d7:0d:e7:24:2e:
         42:87:55:75:7a:6c:80:ef:ea:39:ed:b6:a8:a3:2b:12:bc:40:
         b8:c2:11:1c:5c:e1:b9:e9:6e:bb:44:2d:ec:a7:18:bd:8c:2c:
         0d:27:15:ec:fd:b1:ed:43:12:37:af:ed:94:2c:d5:5d:e5:a4:
         13:95:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:12 2026 by rpki-client