Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          8HYnEF+bsz4N6YvGib3howfv0pLxcwjNbkVPlukxXPA=
Subject key identifier:   83:8D:7F:52:28:C5:F2:0A:7C:89:79:F4:1D:15:35:6F:C8:10:8E:29
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       019F3829C564CD9C478F3A36459966FB9CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          0901
Signing time:             Mon 06 Jul 2026 16:01:29 +0000
Manifest this update:     Mon 06 Jul 2026 16:01:29 +0000
Manifest next update:     Tue 07 Jul 2026 16:01:29 +0000
Files and hashes:         1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
                          2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: V8DAJetcFo9b3fyEqTBktIMzQo9dSsWWg3FlZnddojQ=)
                          3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
                          4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:29:c5:64:cd:9c:47:8f:3a:36:45:99:66:fb:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Jul  6 16:01:29 2026 GMT
            Not After : Jul  7 16:01:29 2026 GMT
        Subject: CN=838d7f5228c5f20a7c8979f41d15356fc8108e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:42:f1:db:3a:a2:0f:3a:41:93:7c:c7:c3:
                    5a:48:3e:a6:f3:37:78:ec:49:fe:42:0a:86:b8:8d:
                    20:fb:2f:95:7f:65:31:05:54:1f:1a:d9:77:ed:d9:
                    f1:2a:18:ce:45:c8:88:13:98:ec:16:f0:05:1e:55:
                    a5:36:d7:bc:f7:1a:da:e1:2a:f7:bd:0f:4e:84:a9:
                    7c:af:be:a4:3b:6c:94:a1:25:99:26:a2:a2:98:8b:
                    3f:8e:99:f9:aa:94:87:df:f8:86:7a:b7:ee:c6:d9:
                    ec:6b:ba:98:25:0a:ce:32:e1:2b:fe:9a:af:2c:a8:
                    ae:9e:0d:26:07:60:5c:8a:64:35:67:b2:32:8e:17:
                    1e:5c:3a:92:19:db:4f:f8:cc:5c:69:a4:50:0e:fe:
                    9a:ce:c6:35:3f:3f:7b:84:11:4c:c8:ef:39:de:99:
                    fb:ea:81:96:df:74:a0:0b:d7:3f:3f:b7:7c:99:b2:
                    a8:7f:8b:3a:f2:55:f0:f8:ad:6e:59:cc:41:54:8a:
                    bc:22:c2:13:8f:d9:9a:03:84:77:ab:58:3f:b0:ca:
                    d7:e9:31:9d:98:c8:1d:39:63:3a:39:88:d2:63:d8:
                    08:1e:48:6c:ce:08:a8:40:64:43:d4:63:1f:44:d9:
                    e5:d1:78:e7:52:d2:4c:ea:04:43:c8:f2:45:40:98:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8D:7F:52:28:C5:F2:0A:7C:89:79:F4:1D:15:35:6F:C8:10:8E:29
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:7a:af:94:bb:3d:06:a9:65:1d:74:58:c7:7c:24:02:cb:
         19:d6:aa:c7:ee:9a:df:8e:b7:62:e9:18:c0:bd:84:d3:f8:da:
         ee:b5:d8:3f:3e:9f:e7:88:9f:a0:91:e9:38:29:55:10:e6:59:
         89:6b:04:83:f2:97:28:59:ed:f6:f1:b6:51:08:4f:47:74:03:
         45:61:9c:d0:b6:b5:cb:5f:69:a9:8e:66:a5:2f:16:cf:1b:ea:
         d1:01:22:6a:79:8a:6f:03:e0:54:80:4e:7e:5a:e9:7f:11:87:
         00:bd:96:5b:4c:26:28:04:75:84:99:52:8f:ff:77:3d:7d:07:
         a1:f6:98:95:64:4d:7e:7b:a2:26:79:63:b8:ac:55:8a:c2:d6:
         d2:51:57:aa:2c:46:d6:78:5f:ce:5c:39:8d:15:f9:68:10:28:
         33:e7:dd:e2:40:61:0b:3a:b9:38:9d:70:e7:1e:87:4d:57:f4:
         87:63:cc:85:57:88:13:9d:f1:17:d5:23:a8:34:b4:5f:d1:38:
         18:23:54:da:85:c2:6a:f0:04:fe:5a:85:81:89:a1:89:a6:cf:
         e9:ba:f5:81:9e:a8:2c:f3:fe:3c:a7:cf:8c:42:b4:fb:27:c0:
         29:50:9c:61:ac:f9:93:aa:10:5a:5d:d5:16:bb:0d:31:b5:d6:
         69:03:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:15 2026 by rpki-client