Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File:                     cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier:          M4JJ+GnYQcj7Of3IBn7r9Dvz+vXqzVRpZG7h2M35SiY=
Subject key identifier:   B4:3D:0D:CF:D9:F3:E4:32:0A:89:DB:A3:86:47:26:65:02:72:DA:FB
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer:       /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial:       019F9EF13A624021CD2D39ABBD1DCA6E8A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number:          1404
Signing time:             Sun 26 Jul 2026 15:00:36 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:36 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:36 +0000
Files and hashes:         1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: x7Iv6nxjlfstEYIUXf1MMKNKce+8v+vdvdBVzyg4ycs=)
                          2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:3a:62:40:21:cd:2d:39:ab:bd:1d:ca:6e:8a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
        Validity
            Not Before: Jul 26 15:00:36 2026 GMT
            Not After : Jul 27 15:00:36 2026 GMT
        Subject: CN=b43d0dcfd9f3e4320a89dba3864726650272dafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:88:96:6c:6b:a7:8e:b9:f8:b3:dd:50:22:
                    2b:c7:23:68:1f:8d:a7:48:55:46:9c:c1:cf:9f:79:
                    ea:df:bc:d4:94:a9:d6:d7:5e:ab:6e:d1:cc:89:81:
                    23:65:d2:eb:a5:b6:d1:d9:8c:a2:6c:cc:ab:2a:0a:
                    ad:70:4c:da:93:17:5d:28:df:1b:12:d5:50:a7:7e:
                    0e:4c:90:93:4f:b8:10:86:c6:0a:9e:c5:e9:35:63:
                    cd:5b:2f:2c:26:03:50:7b:fe:37:f0:31:c1:c9:79:
                    20:73:ed:62:53:c0:67:66:5f:61:8a:05:da:b1:f7:
                    3b:5b:02:77:6d:49:71:6f:a1:3f:38:55:f5:a6:28:
                    7b:e8:68:0b:d8:5f:c1:53:92:55:61:55:af:fd:16:
                    0e:25:6a:ef:58:f8:ef:4d:5e:d7:61:ab:a0:7f:29:
                    47:05:61:aa:8a:77:3a:40:13:7d:2f:24:d5:7d:52:
                    39:3a:26:ab:23:c3:4d:55:be:8f:98:33:ec:47:81:
                    aa:a3:52:74:b0:00:c7:a0:b0:e9:0f:0b:f7:89:03:
                    34:cd:04:ff:0e:05:a9:1f:d0:fe:35:6f:44:43:d1:
                    1c:1a:75:75:da:79:07:42:2d:74:1b:ac:85:9c:d4:
                    68:ad:4b:35:f3:f9:18:5a:72:0e:c8:62:a5:c4:ab:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:0D:CF:D9:F3:E4:32:0A:89:DB:A3:86:47:26:65:02:72:DA:FB
            X509v3 Authority Key Identifier:
                keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:9c:43:4f:c6:f7:26:4d:be:10:2a:c2:34:d3:5a:d9:a7:
         1e:78:a3:f0:1b:92:7e:ea:69:ac:6b:d7:27:cb:23:c2:78:df:
         72:7c:5c:c9:79:1f:e0:dd:e9:9c:e1:35:69:9a:b2:cf:19:66:
         6d:18:3e:a3:c9:76:2b:52:3d:fa:54:cf:24:df:27:8f:3f:92:
         14:39:dc:6f:df:90:f5:5b:04:41:ba:2f:a8:4f:59:0a:df:e1:
         66:e2:1f:4c:c3:d4:86:ef:d9:a0:d2:46:c1:6f:fb:06:75:d3:
         5d:4a:4c:c7:5c:cd:cd:94:20:5d:63:b2:28:17:d3:5a:a5:8d:
         bf:c9:81:81:20:ef:59:aa:3c:97:e7:53:76:14:38:73:bd:60:
         1f:be:8c:d7:0f:6d:f1:37:31:b8:f2:15:e7:30:27:05:65:86:
         a6:c1:6f:34:b1:55:c5:2e:8f:72:d0:04:cc:8a:08:70:2e:18:
         ae:53:a9:40:3d:ab:f0:97:f9:cb:25:cb:aa:0d:1d:10:a6:ba:
         f1:3a:f0:b7:15:37:11:8a:a4:1d:8a:73:37:04:3d:6e:ae:e8:
         4f:d1:77:04:12:1d:58:03:d8:01:05:31:c0:7f:f9:18:6a:bc:
         38:2a:fe:1b:d9:3b:b5:a6:5a:17:d0:50:9c:bf:6e:ae:32:d7:
         dc:44:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:59 2026 by rpki-client