Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File:                     tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier:          Hu6mKAJGw4il9sMFVEVbS9tZFfa1NIC3B43UPHlJ4yo=
Subject key identifier:   C6:BB:50:B2:AA:18:A1:34:37:32:0F:C8:A3:F6:E4:4D:91:C7:A4:8F
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer:       /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial:       019F9D033FEFB10410041750391AD792E23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number:          46
Signing time:             Sun 26 Jul 2026 06:01:03 +0000
Manifest this update:     Sun 26 Jul 2026 06:01:03 +0000
Manifest next update:     Mon 27 Jul 2026 06:01:03 +0000
Files and hashes:         1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: jIoVx0FyqjNUJRCtrzza0mW/8NAH0FVhAYUYsQ27Law=)
                          2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:03:3f:ef:b1:04:10:04:17:50:39:1a:d7:92:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
        Validity
            Not Before: Jul 26 06:01:03 2026 GMT
            Not After : Jul 27 06:01:03 2026 GMT
        Subject: CN=c6bb50b2aa18a13437320fc8a3f6e44d91c7a48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:34:e9:65:3f:d3:a3:bd:c3:94:c4:9a:cf:
                    a6:c9:2f:b1:66:f7:db:8b:a1:37:03:35:9d:19:24:
                    29:07:df:41:fa:c5:15:cc:0c:b8:03:a4:c3:6c:a7:
                    df:5e:00:1c:19:fe:37:33:c7:6e:c6:3d:c0:d2:45:
                    c9:92:87:77:52:5d:eb:bc:f0:9a:1a:11:33:2f:b5:
                    8a:5d:38:14:31:67:cb:e7:88:ce:f5:45:5f:89:8d:
                    be:95:4b:ef:4a:e4:a3:87:23:11:a0:46:8a:08:dd:
                    bb:af:21:19:c9:dd:f9:dd:a5:bf:c3:17:c1:3d:54:
                    b4:a5:05:3d:c9:36:ae:9d:6c:54:56:64:83:fa:ee:
                    01:11:ed:95:21:25:6b:78:74:7e:1c:52:ba:dc:2d:
                    ba:4f:5e:b2:78:ac:6a:ac:bc:e7:43:f1:44:24:14:
                    28:6c:b9:c7:c1:87:24:64:6a:c8:0f:68:fe:8e:69:
                    42:bb:d5:fd:e9:32:43:88:c6:3e:53:6c:1e:69:6a:
                    48:b9:5e:50:16:6e:06:87:46:62:40:78:73:37:5e:
                    0e:01:69:c7:d4:9d:5f:e3:07:db:e1:58:02:4a:b0:
                    73:d2:0b:97:4b:c8:9d:0f:61:1d:29:59:7a:4c:f7:
                    4a:06:b3:fe:79:b9:fb:0f:31:93:b5:3e:91:83:f3:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BB:50:B2:AA:18:A1:34:37:32:0F:C8:A3:F6:E4:4D:91:C7:A4:8F
            X509v3 Authority Key Identifier:
                keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:ef:cb:60:c0:60:63:49:ff:ae:41:3e:4f:0e:9c:2b:18:
         be:a7:34:c8:ef:07:fc:3e:9a:9d:e7:bd:84:61:37:0e:cf:cd:
         14:48:3a:a9:6c:37:11:25:1a:ad:20:97:4b:2d:2e:95:06:42:
         e3:11:cd:90:d8:15:82:c0:83:d4:a7:d5:f9:61:32:66:fc:f7:
         2c:3c:79:fd:e2:4f:61:da:1f:ac:99:49:d0:b7:d5:25:4b:8f:
         6f:9c:f1:23:a0:bc:7d:27:92:18:c4:c3:e1:27:e2:4e:be:90:
         fb:71:df:57:42:b2:b7:31:79:b3:78:c5:3e:37:c2:72:1b:4f:
         bc:f1:b9:4e:c4:ec:2f:b7:d6:ff:be:f7:dd:4e:5d:15:00:4c:
         63:98:9a:4e:78:b3:5f:15:aa:8d:83:9c:ea:bc:d2:eb:01:85:
         33:d6:37:56:e4:32:28:64:54:0f:6b:98:6a:a7:b3:d1:88:be:
         25:34:96:22:83:69:fe:0f:f8:db:a0:b8:49:be:38:3f:da:a6:
         b8:0f:e9:cf:f8:bc:dd:ae:b7:b9:01:71:41:3b:94:43:2f:7a:
         5a:1c:d9:0d:f7:ee:33:78:21:cc:98:b3:c3:6c:ca:10:b4:16:
         8e:25:c4:1a:e4:e7:da:76:79:e9:8c:79:6f:8a:b7:2b:05:55:
         e4:d2:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:36:11 2026 by rpki-client