Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File:                     fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier:          NngJT4xj7vJ8avs8QvV8ICknzLLLjlVzNQCJp4O1U5k=
Subject key identifier:   97:B0:F1:B8:A7:CC:58:25:38:5B:95:53:D4:AD:3A:B6:17:A8:1C:DE
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer:       /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial:       019F9FCD5059DE42BCB68C75891A403CDC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number:          0D25
Signing time:             Sun 26 Jul 2026 19:01:00 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:00 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:00 +0000
Files and hashes:         1: 2Vg8mtqhtEjY6JU3zi44laQwebs.roa (hash: Uc9g1r54C8yp0GXiH0sU3THCD+1hgCm7+9g2Pk5/hcs=)
                          2: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: qhG1d5mKBxb/6/k/PBANomdHqpubDVRQQIq1WHQCX48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:50:59:de:42:bc:b6:8c:75:89:1a:40:3c:dc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
        Validity
            Not Before: Jul 26 19:01:00 2026 GMT
            Not After : Jul 27 19:01:00 2026 GMT
        Subject: CN=97b0f1b8a7cc5825385b9553d4ad3ab617a81cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:44:d7:9e:5e:eb:00:9d:bc:1a:a1:40:61:
                    97:07:08:77:c4:11:2d:ba:10:6e:f7:d5:06:32:51:
                    5b:0e:8f:49:c7:b9:3d:e1:ee:bf:70:88:c2:3a:b5:
                    15:30:62:7a:02:8c:15:56:7a:c7:9b:1e:c5:c0:93:
                    33:c4:f2:f7:36:34:b9:e5:14:37:08:fc:cc:a2:fc:
                    7d:68:d3:95:58:6e:69:8c:85:e9:93:d6:8c:19:93:
                    d8:6e:ed:33:a3:a7:57:b3:4d:2a:ac:9f:9e:f9:2f:
                    2c:71:e3:49:a8:ee:7c:77:9e:29:f0:96:c3:4a:30:
                    32:19:c8:a5:95:66:90:1b:eb:07:52:39:bc:5c:b0:
                    0a:11:3a:f0:bd:18:a1:11:58:d0:1c:ab:cd:98:88:
                    a6:44:a3:28:4e:9a:f9:4d:b7:ce:f5:9e:4c:51:b8:
                    ee:33:2f:60:fb:b2:34:6b:58:d5:fc:18:be:00:9c:
                    cb:8a:21:34:2c:5d:70:dc:3d:95:5d:8e:ca:89:54:
                    6c:88:15:02:f8:bf:e5:62:a6:c0:df:ce:cc:f5:c2:
                    00:bb:36:13:7a:11:96:64:b0:72:69:7a:f6:92:d8:
                    fa:99:51:3a:59:e0:16:29:87:e7:c7:7e:22:d5:a3:
                    08:cb:b1:0f:d1:74:51:37:2c:58:7e:00:c3:44:69:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B0:F1:B8:A7:CC:58:25:38:5B:95:53:D4:AD:3A:B6:17:A8:1C:DE
            X509v3 Authority Key Identifier:
                keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:73:9f:d9:b4:aa:2a:8c:42:50:80:2c:e0:4e:3a:41:93:
         d7:6e:6a:0d:98:13:16:8c:a7:c2:6c:26:2e:5e:e6:c2:a7:11:
         d4:86:98:9d:db:85:e6:bd:a3:7d:a9:03:e5:4b:64:5a:ba:d8:
         b6:ac:48:5e:72:27:5e:d5:d5:f6:3b:3e:b7:9d:eb:06:72:9b:
         b8:18:a4:c3:a3:e5:10:d8:a5:4b:3d:75:d9:d2:4a:eb:0c:72:
         2c:2f:bf:7a:06:5d:5a:a9:9f:f8:58:a3:87:44:83:38:fc:6c:
         02:95:91:19:2a:21:41:be:6c:d2:59:1c:29:db:31:2d:51:73:
         78:ba:a7:00:65:0a:5b:9d:28:63:6e:21:0b:0b:f0:de:ca:3c:
         54:5b:c5:43:a9:60:01:a6:91:cf:f4:45:ab:59:8c:0f:a9:22:
         aa:26:e2:bf:19:59:52:62:6c:c7:8e:bd:16:67:aa:c8:77:da:
         21:04:8a:b3:d7:53:48:78:e1:2c:ce:22:c2:c5:56:22:50:71:
         96:8d:70:53:6d:9e:46:31:e1:ec:9c:51:e4:56:e0:5e:dd:0b:
         e1:0b:e9:33:e2:b4:8f:cc:b8:1c:70:33:d2:d1:ac:9f:ad:85:
         41:3e:e3:73:df:85:d7:70:af:fc:fb:55:7d:4c:01:87:f1:b3:
         3f:db:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:54 2026 by rpki-client