Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          lyOiI5duFE238hv0XlTtxU58tA+2Eg5PmrXsJJOOpRM=
Subject key identifier:   83:4A:63:5D:FE:A8:F2:E9:D0:5C:20:88:14:83:05:93:B0:04:5D:B9
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019F86E8C95DD819EAE3AE0B0E1A2D5D77AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          1230
Signing time:             Tue 21 Jul 2026 23:00:30 +0000
Manifest this update:     Tue 21 Jul 2026 23:00:30 +0000
Manifest next update:     Wed 22 Jul 2026 23:00:30 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: HNsZumC5u/4oFtXWnCOOXcObaaVaU8v4Rz1FZp9SdlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:e8:c9:5d:d8:19:ea:e3:ae:0b:0e:1a:2d:5d:77:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Jul 21 23:00:30 2026 GMT
            Not After : Jul 22 23:00:30 2026 GMT
        Subject: CN=834a635dfea8f2e9d05c208814830593b0045db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:7d:c8:8d:b0:57:58:f2:12:2b:a9:28:2e:
                    c2:b4:17:6a:eb:7b:cc:58:94:5d:aa:18:0c:36:ff:
                    bb:78:7d:fc:a0:a9:e2:9f:5d:78:58:21:21:6d:aa:
                    68:74:3a:cc:04:0c:c5:d7:d7:62:5f:c8:69:02:32:
                    cf:de:56:28:2c:c8:a0:f7:26:ec:05:ce:f0:0a:d9:
                    e5:5a:2c:d5:ac:23:6d:91:aa:cb:30:3f:12:7d:a3:
                    3f:d3:30:f3:d8:0f:40:7e:c7:8e:ab:db:a6:8a:8a:
                    e1:2f:78:2b:a2:e0:dc:2c:ab:08:ac:71:7c:1e:97:
                    1a:fd:34:45:f2:ad:e5:32:43:3c:70:3d:22:76:83:
                    e7:cd:49:4e:54:80:f7:52:4b:14:cc:10:f2:96:b5:
                    2e:8e:24:36:80:61:cf:45:14:7d:69:d6:b2:eb:4f:
                    a7:86:42:be:2b:a6:53:84:01:6e:87:b3:33:0a:f9:
                    f8:56:ff:f2:ab:98:2c:49:01:78:8e:fc:24:92:c0:
                    99:e4:89:d2:77:65:8d:af:95:f0:bd:0d:3a:ae:c2:
                    bd:95:65:9a:1d:a6:60:30:e0:4d:9c:d3:d1:c8:3d:
                    46:d6:cc:be:79:e2:99:74:5c:a0:15:4b:f5:b8:2e:
                    4d:13:bd:0e:72:34:0f:46:73:7f:aa:0d:2b:d6:6a:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4A:63:5D:FE:A8:F2:E9:D0:5C:20:88:14:83:05:93:B0:04:5D:B9
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:47:fe:58:bd:5b:6b:37:01:3a:6c:db:77:5e:7b:24:b7:01:
         7f:17:53:07:96:f6:41:f7:64:6a:f9:a1:fd:80:84:47:94:04:
         de:f1:c9:a8:9f:25:3c:3c:25:0e:7a:37:49:36:db:7a:ae:00:
         98:83:74:1b:0c:5b:d4:b6:94:44:92:fa:20:80:24:58:d0:18:
         7c:ba:f2:f6:02:ce:1c:06:2d:ab:b8:b9:55:71:c5:0d:0c:05:
         77:12:bb:f5:37:58:9c:8d:bc:28:e1:76:9b:c4:fc:bb:83:04:
         1b:f6:7c:df:a9:58:93:33:1e:94:f1:b5:2b:28:49:d8:e1:4e:
         4b:1d:44:69:53:3a:29:df:cc:8b:67:66:cb:50:7e:40:b3:47:
         28:e8:bd:3a:c8:a6:80:bd:0f:51:bb:00:43:5d:9b:c1:8a:f9:
         d2:b8:09:17:96:72:ac:74:3c:35:85:d7:58:68:d8:31:8c:c0:
         62:f5:3d:e6:cc:be:3c:4e:41:f4:e3:c9:1b:03:28:a2:50:94:
         2c:55:2e:cf:2d:21:2f:66:03:07:f6:40:8e:fe:97:05:7d:fd:
         67:75:3e:47:ef:c5:e7:d9:10:69:0f:07:5f:04:e4:5e:22:9d:
         14:ac:84:fe:da:82:81:91:4a:1b:2d:d0:e7:38:5f:00:04:d1:
         28:90:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:42:40 2026 by rpki-client