Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          BpnkBvUdHpH+QPGuymunzmxpClRGu2E2nZHpZXgJf0s=
Subject key identifier:   F8:EB:D7:56:44:7C:A9:3F:FF:E7:06:76:1C:BB:AB:77:5E:7E:3D:79
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019F9EBAA3FFAB21E7CEC6A222FE51ED3E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          19D3
Signing time:             Sun 26 Jul 2026 14:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 14:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 14:00:59 +0000
Files and hashes:         1: Ds_F00ohq3nXWLzRmi9aEPr67nU.roa (hash: 1EvXZP4sj8Rg0yDZm/YIiaxWg+BbA76mSJSuIRiuH9c=)
                          2: P12XKmajnQzt4TT10Louk6Kjyco.roa (hash: KqnQ+RYQfRbLN2Brq+Uz+gVyYb0l27obpG7KQSdsmEk=)
                          3: fePx0kRYwwPcb_zt9-rrwAjmN1w.roa (hash: 4KZtW3GQm6K/quUvrFVgvmKhOxzcCLWTN+/j8SN4EQI=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: tbsWOfcZQCIb0qyaTWwd9+Uh4691QSNehs71xs/uO3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:ba:a3:ff:ab:21:e7:ce:c6:a2:22:fe:51:ed:3e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Jul 26 14:00:59 2026 GMT
            Not After : Jul 27 14:00:59 2026 GMT
        Subject: CN=f8ebd756447ca93fffe706761cbbab775e7e3d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:fb:7a:0d:4c:fa:53:7f:7a:83:eb:10:12:
                    89:39:e8:63:a1:a2:d2:59:6d:00:d8:90:42:79:1d:
                    38:86:f4:fc:f1:52:d1:4e:48:1f:69:93:93:c1:56:
                    81:4a:38:21:4e:09:b2:bc:bb:83:00:f3:c8:ad:de:
                    ff:cd:d8:18:e5:11:b9:c0:67:e0:64:97:66:28:9f:
                    76:34:1d:55:4a:70:32:b0:3a:40:fd:7a:0c:38:0e:
                    26:34:8c:aa:88:fa:72:ce:5a:e5:45:4d:9c:f5:af:
                    d9:fa:66:43:24:5c:c1:23:6a:4f:93:89:ee:36:73:
                    8e:1a:ee:f1:4f:0a:04:2e:04:fe:6a:94:01:72:5f:
                    de:1b:3e:6c:d9:79:e3:e2:89:c0:95:68:98:79:f6:
                    97:6b:f4:25:e0:65:8d:83:1c:94:5f:a6:cd:7b:ab:
                    31:15:92:72:f1:c2:0c:03:3a:c5:2b:b0:cc:ef:58:
                    2d:f9:47:50:db:c4:09:e0:48:64:72:57:f9:16:8d:
                    55:7a:46:88:b5:98:64:8f:19:c5:da:59:98:5f:1d:
                    ac:b6:f2:66:ac:71:94:16:d2:66:05:b8:79:d8:e5:
                    15:02:43:95:4c:4a:11:52:80:31:f2:a9:6b:bf:c8:
                    ac:b1:12:01:e6:b6:9e:c5:fc:78:58:f1:c5:f1:29:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:D7:56:44:7C:A9:3F:FF:E7:06:76:1C:BB:AB:77:5E:7E:3D:79
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:d9:b9:12:9d:53:3b:c2:9b:ad:60:53:c3:31:e4:22:ef:
         bc:98:92:23:3e:d1:eb:34:f9:f4:92:82:90:2c:89:77:bc:d9:
         e7:d1:6c:b7:36:d9:5b:45:b1:70:68:9f:0a:e2:f9:f5:9d:3f:
         09:68:e5:75:7a:56:13:84:d3:f2:4c:98:ba:d8:76:1e:78:30:
         c5:4b:3d:81:50:88:3f:65:6c:11:81:a3:6a:22:b6:9f:f5:4c:
         d1:93:67:70:79:82:1f:78:d4:3d:2d:1c:ae:fd:75:8f:11:cd:
         6f:dc:6e:85:08:d7:45:72:0a:6e:e6:65:08:9f:15:95:2e:ad:
         a4:d9:90:58:c0:da:a5:05:20:fc:9d:f0:d5:92:c2:e3:b2:dd:
         ce:53:f5:cb:27:b2:6a:a3:5c:4e:5b:6d:92:35:02:7c:7e:ba:
         f8:3d:f7:56:b4:5b:16:cb:75:9d:bd:f3:78:ec:44:98:1a:35:
         80:4f:55:9c:25:f0:ec:71:ba:b3:ef:c5:c8:cc:4f:53:22:92:
         61:e7:30:21:31:82:d0:25:f3:69:ac:5b:e0:e2:01:a5:b2:3b:
         08:88:73:08:d6:3c:8d:f7:f7:d0:41:3b:15:76:9a:04:0c:34:
         08:d8:a8:22:8e:69:81:a0:28:8d:89:1c:79:fa:20:e1:2f:99:
         df:67:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:59:21 2026 by rpki-client