Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File:                     r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier:          IzoGUvbiqFU0sSZ2dcK7N2jlh/Rsc2zpbkZJwf4RMy8=
Subject key identifier:   3E:DF:F3:F1:0F:5A:A0:94:41:8A:FC:AC:10:51:9C:F2:1B:BB:E1:BA
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer:       /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial:       019F9F95EA07B87116D1B3940E7D79A4D4F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number:          6D
Signing time:             Sun 26 Jul 2026 18:00:29 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:29 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:29 +0000
Files and hashes:         1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
                          2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: muzBuIm/OLbpvpK3PJA72RH69cHj2Ti4Ls2JLi7KYNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:95:ea:07:b8:71:16:d1:b3:94:0e:7d:79:a4:d4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
        Validity
            Not Before: Jul 26 18:00:29 2026 GMT
            Not After : Jul 27 18:00:29 2026 GMT
        Subject: CN=3edff3f10f5aa094418afcac10519cf21bbbe1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:b9:6c:52:d9:5c:9c:6e:ff:a7:57:09:e5:
                    a2:0d:9c:75:07:93:38:e9:bf:f1:a7:2d:69:1c:b2:
                    72:28:19:a7:76:c3:4f:ec:1d:ff:65:a4:bb:9c:d6:
                    9b:a2:62:76:4f:52:ca:97:e7:cb:12:b4:bd:3a:e0:
                    7f:17:8d:6e:49:40:59:09:83:ca:df:91:17:ba:af:
                    7c:d6:4a:d6:d8:6b:34:67:86:79:5c:12:b5:67:73:
                    fe:9b:13:ad:2f:73:fa:2c:a6:4b:73:b6:3a:28:2e:
                    42:ce:ca:ca:5b:b7:d1:a9:a3:07:c3:7b:63:c0:82:
                    b4:b4:60:02:35:6f:f3:82:71:c3:f0:b9:5a:f9:5a:
                    da:54:21:21:f2:f5:f1:21:09:69:74:b6:86:e9:49:
                    8b:d4:73:51:ac:2b:04:9c:84:ae:7e:21:6d:a2:d9:
                    c6:e9:d9:25:97:ab:d9:5f:6e:b6:e5:39:67:a4:88:
                    e4:49:fb:7a:d8:24:98:e0:fd:bb:50:6a:02:42:3e:
                    f5:4a:a3:17:f7:82:d0:90:60:db:63:45:85:cd:1b:
                    6e:f9:29:08:e4:b7:4f:19:8c:cc:ba:d1:07:16:15:
                    cc:07:51:5b:cb:de:96:75:95:c8:8d:00:3e:a3:11:
                    aa:de:88:de:f3:09:22:fc:d0:aa:5d:26:a1:e5:5b:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DF:F3:F1:0F:5A:A0:94:41:8A:FC:AC:10:51:9C:F2:1B:BB:E1:BA
            X509v3 Authority Key Identifier:
                keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:41:c3:38:94:bd:05:27:ee:68:77:24:7e:d6:51:aa:2b:
         3b:4b:9b:a2:73:be:c0:25:9d:42:0e:41:22:f1:22:ea:7c:d8:
         7c:86:3f:75:4a:42:3f:58:e6:f0:b4:28:79:0a:84:fe:c8:eb:
         a5:66:1a:b6:bb:db:ec:8b:4f:3a:8a:ef:7d:65:6d:32:9b:df:
         9c:0e:11:18:1b:fb:51:4f:31:d0:f5:55:c6:95:64:29:b3:94:
         55:1f:51:28:00:69:40:49:14:fd:7e:f8:dc:6f:ba:4a:92:72:
         18:5e:04:31:4e:18:15:56:7f:1f:98:75:5d:73:b1:e3:80:1c:
         ec:2b:f9:e2:81:4c:68:06:90:0d:fc:48:25:4a:81:c8:81:ed:
         ab:5e:87:3a:dc:4f:7c:22:8c:66:7c:de:12:c2:8f:48:2b:9b:
         ae:36:a5:91:1c:91:29:27:f5:7b:9f:a9:ac:eb:29:92:9e:ac:
         47:e9:62:cc:63:7c:4f:2e:12:0e:c3:26:39:1a:54:19:8d:42:
         ea:45:c3:2a:44:d6:75:6a:b7:b5:43:d7:95:13:72:ce:c9:f1:
         e9:da:75:6e:a7:cc:58:87:0c:d2:13:5d:4a:54:6a:78:0a:e3:
         5f:53:6a:b3:94:6e:0e:71:85:b9:c4:a8:55:80:0a:8a:9c:b8:
         c8:33:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:47 2026 by rpki-client