Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          IuIrO7t0Qe7W4icafFDoXpE8HvDz/kfpDSTt/4n+cWM=
Subject key identifier:   65:63:58:9D:D1:26:0E:AD:98:8C:FB:2E:AA:E8:2D:BE:40:43:2B:14
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       019F7173625E5EB2A1CCB071262EEEC77EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          077E
Signing time:             Fri 17 Jul 2026 19:00:14 +0000
Manifest this update:     Fri 17 Jul 2026 19:00:14 +0000
Manifest next update:     Sat 18 Jul 2026 19:00:14 +0000
Files and hashes:         1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
                          2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: GMsyDoblHcKVnpMpLlzlhWZNEZ4+7K+WOnKC1P3VH+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:73:62:5e:5e:b2:a1:cc:b0:71:26:2e:ee:c7:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Jul 17 19:00:14 2026 GMT
            Not After : Jul 18 19:00:14 2026 GMT
        Subject: CN=6563589dd1260ead988cfb2eaae82dbe40432b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:aa:dc:a4:e2:27:9e:4f:6f:5a:50:f7:78:
                    c4:de:f3:1d:06:26:f7:15:c2:b4:42:20:4f:22:77:
                    3e:ed:9c:7f:1d:81:c6:a7:c0:4b:a0:0b:c4:be:31:
                    f6:e7:be:9f:45:a5:1c:91:17:06:7e:0f:7e:1f:37:
                    dc:a8:10:9d:0c:f8:ae:bd:49:b5:b4:d8:68:b9:b6:
                    9d:29:d3:48:16:aa:0c:79:e7:89:4d:4d:8e:e3:83:
                    8f:1a:a6:8e:d8:13:1a:1c:19:9b:45:bd:8b:d8:58:
                    be:b3:a4:6d:3d:b1:9d:d8:b3:62:f1:cc:d3:56:62:
                    2a:ad:97:3e:7e:f2:1f:c3:f6:eb:18:ed:70:31:cf:
                    81:9b:da:15:dd:0e:bc:bb:69:9d:a0:74:06:6d:6f:
                    11:b8:f2:5c:3a:d6:15:85:e1:ba:bf:ae:e2:c8:2b:
                    ef:65:fa:d5:0b:7a:39:25:f6:2d:01:ac:c3:ac:5e:
                    04:23:18:25:9e:8a:0a:df:b3:91:87:67:ad:f0:a6:
                    cd:f7:20:36:32:9d:e2:c7:95:2a:40:17:46:5e:94:
                    fc:e1:ba:2e:b9:51:5d:22:bd:06:e7:a7:4e:27:72:
                    d1:98:ef:0a:e1:37:51:40:00:68:e8:47:81:c3:2e:
                    cf:2a:c1:01:d1:d4:27:66:7c:37:32:a3:8c:33:be:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:58:9D:D1:26:0E:AD:98:8C:FB:2E:AA:E8:2D:BE:40:43:2B:14
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:89:dc:66:b6:9d:00:bd:a2:1b:d2:5b:0c:48:6d:bb:8c:83:
         f5:38:30:90:e2:51:9d:18:d6:46:4a:a4:23:de:c9:83:77:53:
         01:45:0a:91:89:9d:5d:34:37:f2:76:4a:fa:37:77:0a:18:63:
         08:55:86:99:cd:0e:c5:60:5c:c4:90:45:72:4c:64:48:e3:7d:
         7b:a4:c1:87:44:93:ce:d8:a7:c1:62:79:07:5b:2b:86:0c:4d:
         85:91:71:95:c4:58:0d:d7:03:92:14:cc:af:b0:cb:42:12:c0:
         5a:54:db:b2:ee:a8:35:34:7e:48:1b:b8:89:b8:e9:7e:56:59:
         d0:5d:ef:2c:dc:3d:c0:f9:40:17:21:62:f9:31:63:00:93:7d:
         7d:33:8d:e8:54:ea:b5:0b:d6:71:f1:99:f2:fb:c0:59:41:cd:
         81:3d:5a:af:1c:54:18:76:5a:3a:5b:57:7e:ac:8e:6f:72:54:
         dc:ec:a4:02:26:26:3b:6d:7f:20:53:da:24:51:7a:24:6a:42:
         b1:91:3f:2c:fc:e7:5b:ee:85:8d:2e:43:1f:a1:72:aa:e8:35:
         82:75:39:d0:ea:1a:1a:40:46:8e:1c:04:5a:a8:1c:99:5a:bd:
         fa:dc:4b:92:af:0a:dc:39:06:bf:65:a1:28:14:a0:c6:bd:3f:
         c0:9a:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:47 2026 by rpki-client