Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File:                     X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier:          F2S9pACr2Yrlad4f0yg/08vnZXsHdv1668fgHdzj2D4=
Subject key identifier:   6B:14:E5:D1:F7:B6:94:76:FF:7A:54:08:64:54:1A:63:22:EF:97:67
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       019F9F5ECDE2AACBC3618BF52AD4809C3CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number:          0EC3
Signing time:             Sun 26 Jul 2026 17:00:17 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:17 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:17 +0000
Files and hashes:         1: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: /bgg7oEsSKE07Z2bYDAyCnBFU09Qh6d6kibwKx+EyjM=)
                          2: at5a5rELRNEAw0rbmlFozDBKmf0.roa (hash: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg=)
                          3: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (hash: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw=)
                          4: o__yenjb_byTDMgOBxUzVji8MJk.roa (hash: i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5e:cd:e2:aa:cb:c3:61:8b:f5:2a:d4:80:9c:3c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: Jul 26 17:00:17 2026 GMT
            Not After : Jul 27 17:00:17 2026 GMT
        Subject: CN=6b14e5d1f7b69476ff7a540864541a6322ef9767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:72:1e:32:c1:40:8f:3f:92:64:36:4b:5e:
                    4e:95:26:4c:d1:c5:d7:f6:39:a4:a4:27:9a:59:80:
                    98:c2:c4:b5:7f:62:d4:38:bc:9b:d3:00:4b:f9:cd:
                    e5:d4:05:85:be:f7:73:38:19:87:15:fd:12:95:84:
                    bc:ca:f8:44:ac:de:9a:81:e5:f8:d3:6f:ed:c9:11:
                    6f:b7:78:e7:b4:eb:cc:40:a2:39:ec:72:99:48:dd:
                    49:02:55:7a:8d:2a:66:c7:26:b6:a4:16:90:88:e1:
                    4e:d6:59:f6:68:1d:b1:d9:05:b7:21:ef:a6:90:11:
                    c3:a1:a8:b9:cd:47:4f:80:58:7f:d8:86:a0:09:57:
                    fa:78:b8:44:1b:da:5e:3b:59:d7:1c:57:fe:81:47:
                    80:e9:a0:76:79:90:c9:33:6d:26:ed:24:cb:93:27:
                    77:8e:88:a8:b0:d8:9d:70:65:21:6a:af:1e:8f:90:
                    40:93:3d:7b:5f:2e:27:6b:61:a0:59:5a:65:34:bd:
                    f8:70:1d:17:52:48:10:ad:be:37:82:ed:72:21:c4:
                    9a:06:1c:ee:4a:2c:0e:66:52:10:c8:4d:13:60:30:
                    e9:8b:d5:79:c0:2a:23:09:9c:4a:4c:87:0d:07:3e:
                    7e:bb:26:f1:95:92:ac:53:aa:6c:02:80:22:d4:db:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:14:E5:D1:F7:B6:94:76:FF:7A:54:08:64:54:1A:63:22:EF:97:67
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:23:db:78:16:8a:61:e7:d2:43:77:48:bd:27:23:bb:3d:56:
         f1:3e:02:1f:2d:81:bf:44:ad:0e:51:78:da:ef:10:1f:4c:a4:
         55:ae:37:44:76:3c:cb:a9:4e:e1:80:44:37:a0:51:5b:40:d7:
         5d:53:31:84:a1:73:82:0b:4f:25:6a:fc:34:fe:d2:2e:15:99:
         71:8b:22:24:d1:fe:fb:e5:36:32:15:59:87:18:52:86:7e:65:
         85:15:ae:d5:bd:13:28:56:8e:b8:4c:6a:dc:cc:84:44:a6:1d:
         54:55:7b:2b:2c:de:b3:be:f2:3d:ba:9c:eb:bb:d8:2c:1c:e3:
         77:df:da:2f:ae:31:ca:14:ea:1c:3d:5d:11:5a:9a:fe:86:b7:
         a6:db:e5:8f:13:6d:2c:4e:e4:98:b3:3f:8a:f1:89:56:34:3c:
         c8:24:fa:7c:7c:ef:1c:f9:20:05:cf:1f:4f:32:93:74:28:fb:
         2d:cc:e0:eb:9f:25:da:c1:89:84:9d:9c:c6:fe:0a:81:d8:1c:
         fe:d3:21:99:af:31:dc:3c:1d:74:46:e8:9e:2c:cb:74:49:f0:
         74:c2:73:49:bd:51:d4:67:33:c2:f5:9d:23:f9:0c:07:9f:f1:
         71:0f:0d:4a:20:b8:c7:d8:fd:9d:c9:4b:28:a1:ef:1a:3a:5f:
         f0:6d:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:25:44 2026 by rpki-client