Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File:                     cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier:          2v+yThUo55ltZ9iPvhH72wmr4hmxJ0w4lco/M0P2gl0=
Subject key identifier:   07:13:BD:58:C8:9C:A9:3D:03:C7:D3:33:3A:FE:BD:95:77:CF:64:77
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer:       /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial:       019FA229A5523A1DD3F3926C8FECEE293376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number:          1961
Signing time:             Mon 27 Jul 2026 06:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 06:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 06:01:06 +0000
Files and hashes:         1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
                          2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: SF1kclb8RjtGmb5r19Vv3Owqieryaes4fXdVXxUsRJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:a5:52:3a:1d:d3:f3:92:6c:8f:ec:ee:29:33:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
        Validity
            Not Before: Jul 27 06:01:06 2026 GMT
            Not After : Jul 28 06:01:06 2026 GMT
        Subject: CN=0713bd58c89ca93d03c7d3333afebd9577cf6477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:39:45:f0:22:41:81:38:ba:7e:80:67:da:
                    36:63:e1:da:26:70:3c:45:3c:3e:76:c1:7e:08:90:
                    6e:71:a6:d0:9a:89:aa:92:1e:db:b6:92:6d:c0:ca:
                    a6:b1:f5:e8:71:96:38:ad:1c:38:51:04:8e:94:61:
                    e8:28:8e:c3:00:6a:fe:ab:d8:30:4f:e4:f0:57:f8:
                    80:2d:ec:78:9f:67:9f:b9:13:f8:b5:e8:2c:30:6a:
                    71:7e:33:29:ab:77:ef:23:51:2e:9b:52:c0:ac:09:
                    ae:ff:cc:98:3d:fa:cb:15:53:09:13:29:3e:5d:a2:
                    3b:11:76:c1:5d:26:9d:ae:54:76:14:09:98:85:99:
                    6a:b4:00:30:aa:5f:59:c0:9d:77:7f:c0:40:cc:a1:
                    e1:94:98:68:c1:bb:0e:41:4e:38:2e:6d:c1:b8:79:
                    f3:5d:05:6e:2c:e4:01:66:3b:02:ee:06:e3:23:4a:
                    0a:52:a0:dc:3c:b7:80:fc:90:19:45:a2:de:47:72:
                    24:ab:b2:96:eb:0a:76:eb:40:42:b2:10:f2:4c:19:
                    ee:bf:db:6e:ac:fe:e6:ae:e9:44:83:3f:d8:d6:3e:
                    03:e3:6d:de:19:93:7e:10:08:15:71:10:af:68:cf:
                    c3:86:ad:b7:90:b7:bd:49:d2:76:97:7d:06:25:33:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:13:BD:58:C8:9C:A9:3D:03:C7:D3:33:3A:FE:BD:95:77:CF:64:77
            X509v3 Authority Key Identifier:
                keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8d:4d:b8:26:47:e8:e1:ec:b6:33:7d:b8:3a:4f:17:07:d8:
         d4:0c:74:e9:f9:fb:23:29:94:8a:78:7c:15:bc:d6:fb:91:95:
         ee:47:6e:8f:cf:6f:da:94:ee:1d:b3:66:f5:8f:cf:c2:0c:8d:
         26:ff:19:65:0a:8b:9e:56:c6:9d:ec:84:bf:1d:53:b9:86:55:
         ac:89:44:3b:c4:59:2b:9f:a1:fc:f1:08:17:9c:59:bd:0f:b4:
         56:03:bb:e0:0f:e7:64:12:25:a5:fd:0a:ec:d5:b4:15:2b:24:
         68:5b:ca:99:49:bd:7c:b8:67:e4:84:ce:e6:8e:ac:b8:35:36:
         f1:5a:07:93:0c:8e:2b:fe:e2:f1:4a:34:79:d4:fe:2a:90:31:
         2b:a3:89:94:11:3d:f8:19:79:17:07:1b:a4:09:35:ab:e6:9b:
         dc:ce:fe:66:2c:be:87:93:82:38:67:2f:9f:ba:4e:a7:e6:7b:
         eb:11:b6:5b:e9:b7:f5:56:95:16:47:7c:18:b0:f5:a2:75:e7:
         f5:a6:df:22:4f:29:28:0a:06:ce:70:03:fb:e2:41:65:18:f7:
         30:ec:6c:1c:78:a9:67:44:94:da:3e:49:a6:9b:90:e5:86:d1:
         a8:35:ae:44:b1:4b:f1:a6:16:84:a9:7d:e0:79:64:0b:67:78:
         e8:1d:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:24 2026 by rpki-client