Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
File:                     SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft (raw, json)
Hash identifier:          myqYYLwsM96SDqqQnemoH5MCJX2gw0RLD0h/5Ds60YA=
Subject key identifier:   D7:8F:40:A1:CE:33:87:D7:A6:3C:4A:1A:0A:36:81:97:37:30:84:AC
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Certificate issuer:       /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial:       019F9FCCEB7C49B8FE9DF83CF2A9B5F63EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
Manifest number:          A7
Signing time:             Sun 26 Jul 2026 19:00:34 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:34 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:34 +0000
Files and hashes:         1: SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl (hash: 2/ljfYG8PIEAvu64vRyH8uN1m2meg6pK3c9nffqDv3k=)
                          2: nAuNT8fFeVBjZtYgykFbuWst1x8.asa (hash: mdAsPuC47rBd10CkK+9D8gN5/QKzTG6Rm9fyadbl32k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:eb:7c:49:b8:fe:9d:f8:3c:f2:a9:b5:f6:3e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
        Validity
            Not Before: Jul 26 19:00:34 2026 GMT
            Not After : Jul 27 19:00:34 2026 GMT
        Subject: CN=d78f40a1ce3387d7a63c4a1a0a368197373084ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:b6:f8:b7:ea:be:29:75:49:b5:52:d4:9a:
                    5a:40:c7:71:c3:6a:df:9f:5b:d9:19:51:0d:06:1c:
                    b3:39:d3:a0:30:3f:57:4e:f0:3f:e0:02:9d:ab:b7:
                    37:f5:32:20:30:76:d8:2e:65:4f:d5:db:8a:43:05:
                    68:08:e7:52:68:74:6d:a8:f1:45:69:17:bb:22:af:
                    34:56:3b:91:6f:24:69:93:58:3b:f9:29:96:55:96:
                    c9:6c:e6:88:ac:b6:8e:41:52:91:1e:44:62:89:01:
                    cf:3b:34:af:29:9d:b9:a3:f7:f0:af:84:76:ed:bd:
                    3d:77:3d:28:60:c4:28:03:13:2d:26:f7:bf:1d:c9:
                    1f:f8:b8:88:f7:56:82:25:f3:1d:19:a2:10:24:01:
                    7c:b4:15:38:60:8d:ee:db:22:d5:71:a0:35:d2:f8:
                    0d:6a:cf:c5:6e:5c:5a:a4:f6:27:ac:3f:8d:d1:e3:
                    57:a1:35:61:e9:23:e4:b9:4f:44:11:61:56:a6:a2:
                    b0:6a:94:7d:65:da:d1:a9:a6:97:19:ed:1f:c4:58:
                    b9:ea:c0:e3:d9:ab:27:c8:6c:ad:3e:de:99:98:6f:
                    dc:31:a7:5c:a5:cc:f1:6d:19:be:aa:a8:ba:a7:cd:
                    5f:8e:22:70:bb:f3:e8:1a:fb:4c:a0:87:67:93:74:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8F:40:A1:CE:33:87:D7:A6:3C:4A:1A:0A:36:81:97:37:30:84:AC
            X509v3 Authority Key Identifier:
                keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:f7:24:3e:ac:60:09:d7:c8:f3:80:b2:fa:2a:60:f7:24:
         e6:d3:bb:ce:fe:cd:e9:32:86:a2:25:55:dd:35:e5:65:8f:5e:
         f5:62:ff:81:f4:8e:71:30:27:80:85:c7:44:57:4d:34:ea:0f:
         21:cf:ae:11:c0:93:34:22:c8:34:ca:28:53:bf:42:8c:50:5f:
         4f:eb:6f:dd:b3:f9:99:c4:5a:5f:48:2b:18:0e:88:9d:05:e2:
         52:bc:a3:57:5f:d5:19:e0:17:bf:4d:4a:ca:65:e7:1a:25:20:
         bf:4b:0c:77:6a:9b:02:02:2f:19:c2:37:27:15:2f:71:21:89:
         4d:38:21:17:ab:7e:1c:60:64:80:19:0f:86:bc:7f:43:cd:92:
         6a:dc:da:ed:7f:36:60:77:64:b5:36:0b:1e:f7:bf:b3:69:74:
         b7:92:8a:20:2f:19:80:f6:ba:c5:4c:c1:97:fc:a6:87:71:ef:
         1a:25:40:61:25:0d:e4:0f:8e:2a:c6:5a:ec:49:9f:fe:6d:ed:
         a6:4e:5f:2d:ca:53:4c:2b:55:b0:a7:df:22:38:49:fe:36:a5:
         ae:b2:7b:ee:0e:a7:02:ad:50:14:44:2f:2e:c6:30:11:80:78:
         09:54:f5:56:a9:05:11:d7:27:4e:c6:a2:d4:73:1b:ab:f2:d8:
         2a:84:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:59:11 2026 by rpki-client