Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File:                     v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier:          JZxS484hqj0dTFFWMwMFJSnRbMG7qjhbbI+BpHDFGug=
Subject key identifier:   8A:58:7F:45:E7:9C:66:DF:9A:60:FA:B4:D4:6A:AB:64:0C:9F:DF:83
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer:       /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial:       019F38297582ADA83B695D9E7EDBB16B946E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number:          056C
Signing time:             Mon 06 Jul 2026 16:01:08 +0000
Manifest this update:     Mon 06 Jul 2026 16:01:08 +0000
Manifest next update:     Tue 07 Jul 2026 16:01:08 +0000
Files and hashes:         1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
                          2: _tzStQypjSsTd5J5hFzGNfegMAw.roa (hash: cVhf/9qGJtAWRxPefGE+MkLnZXCIUjakYo8t4TtVyiI=)
                          3: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (hash: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo=)
                          4: p_aeHI6dPvbsOjwGFyLYuNcLZ3U.roa (hash: +fN67tjMuhF62rvJ3yJ+5m6jiCBffohGv6YIDhdtBG0=)
                          5: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: 96+d21vnAFp1uGTls/2uL+sr8zMU7I/FoeT/UB4rc64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:29:75:82:ad:a8:3b:69:5d:9e:7e:db:b1:6b:94:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
        Validity
            Not Before: Jul  6 16:01:08 2026 GMT
            Not After : Jul  7 16:01:08 2026 GMT
        Subject: CN=8a587f45e79c66df9a60fab4d46aab640c9fdf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:80:17:57:4b:ac:c6:de:d4:33:ea:dd:88:
                    1c:29:31:cf:b0:4c:15:c3:64:d5:0f:ae:c4:a0:cf:
                    d1:e8:60:1c:08:c4:e1:fe:09:4f:8c:fc:ad:96:47:
                    93:d2:43:de:25:ff:09:33:1f:a1:91:49:ac:4c:44:
                    2b:05:a0:4d:f0:cd:e4:19:c1:86:da:fb:11:7a:bb:
                    41:2b:4c:fc:13:df:89:88:ef:1e:25:2b:26:30:cd:
                    e8:41:95:c1:7b:f6:13:03:10:ea:33:13:60:06:e9:
                    8a:77:86:27:de:08:87:5e:d9:87:7f:4f:37:83:bf:
                    e2:1d:30:d2:89:40:b4:f5:ce:94:10:e6:6b:65:05:
                    6e:45:b4:6f:dd:15:c7:29:3b:10:55:eb:2e:47:08:
                    0e:ff:6a:f2:27:88:a8:49:bf:ff:f9:37:77:68:ae:
                    0a:d7:ab:44:27:59:c8:4a:3f:04:25:78:d8:c5:62:
                    cc:7f:d9:70:16:85:3b:5c:00:d4:09:04:54:f9:d6:
                    f9:53:14:53:07:4c:f8:f9:7d:15:46:aa:c6:b8:a7:
                    d9:cf:3d:d1:aa:ec:74:be:64:18:90:71:d0:e6:8b:
                    50:ec:7a:7b:48:40:4e:9a:47:78:b9:b6:79:c2:20:
                    bf:77:2d:2f:5e:4c:61:da:45:d3:41:6f:d8:98:1f:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:58:7F:45:E7:9C:66:DF:9A:60:FA:B4:D4:6A:AB:64:0C:9F:DF:83
            X509v3 Authority Key Identifier:
                keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:df:48:a7:95:16:51:a9:81:2b:56:84:e0:76:ad:37:36:68:
         a1:ca:83:6d:e6:22:83:26:8c:50:a9:ae:2b:cc:f6:be:61:2b:
         26:83:3c:0c:df:fb:dc:c6:f9:4c:68:a9:50:f8:e2:2d:11:50:
         5b:40:92:39:ec:3c:b0:a9:7b:f5:08:7c:a9:db:f8:fe:6d:f3:
         22:34:eb:7f:a1:a3:f4:26:db:9f:29:fd:04:e7:09:0d:6c:c0:
         f9:52:79:e5:18:32:24:f2:40:5c:a3:69:f6:33:af:7b:dc:14:
         b4:fd:fe:05:2a:53:10:ef:a2:82:ad:8f:4f:1d:ed:2e:ce:0b:
         d0:a4:5e:d8:12:09:13:11:ef:ac:66:01:13:27:a5:27:ca:b8:
         35:da:78:21:d8:39:e0:be:a0:ff:60:3d:f9:2f:39:4f:95:82:
         a6:db:dd:20:91:40:70:55:88:5e:ce:3a:04:97:92:41:b0:07:
         7d:d9:7a:6b:18:49:df:69:bf:79:06:80:62:fa:7a:6d:ca:60:
         fa:eb:42:a0:ee:7d:56:51:c5:f6:e2:b7:63:87:86:82:d0:b6:
         af:ee:01:bf:0a:8e:8f:d8:66:2c:4a:27:be:86:08:f6:9e:1f:
         9c:59:38:70:1b:c9:68:68:78:cd:08:dc:70:6f:1d:d5:2c:12:
         5e:83:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:58 2026 by rpki-client