Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          mStIDH5zXwohjWSltrhqyeZpHpF3s1aXFcA2uy+xi4U=
Subject key identifier:   E1:89:9F:79:EE:46:08:1E:0A:9D:B1:1F:0C:B2:A0:40:32:A7:26:39
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019FCB259EB0FC1099502F9360CC107699A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          19FB
Signing time:             Tue 04 Aug 2026 05:01:07 +0000
Manifest this update:     Tue 04 Aug 2026 05:01:07 +0000
Manifest next update:     Wed 05 Aug 2026 05:01:07 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: IobzWaXvjZLRWunZlcxmarsV9usBViKzw7qhsdEp1bU=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          12: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          13: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          14: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          15: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          16: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:25:9e:b0:fc:10:99:50:2f:93:60:cc:10:76:99:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Aug  4 05:01:07 2026 GMT
            Not After : Aug  5 05:01:07 2026 GMT
        Subject: CN=e1899f79ee46081e0a9db11f0cb2a04032a72639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:51:73:d1:04:f7:bc:d3:a3:f1:b7:d4:3c:
                    f8:5e:15:d6:b4:3c:ab:fc:91:64:4b:76:a4:06:fe:
                    8a:ca:0a:c6:17:f5:a5:55:28:62:2d:42:80:c2:07:
                    c4:2d:72:73:a7:53:5b:73:31:b4:4b:0b:d3:16:8f:
                    7c:67:86:d9:29:5b:56:47:6f:79:08:0c:3e:ef:2e:
                    c1:4c:bc:de:cf:4b:83:ce:91:dc:a6:9e:b5:24:c9:
                    ae:11:64:2b:90:9e:b5:03:46:b4:79:c5:57:60:b1:
                    d7:43:9c:96:38:90:91:bc:53:7b:e7:5f:35:59:f3:
                    4d:db:18:29:71:0a:3e:03:f5:de:f3:59:c4:8a:9b:
                    59:5c:b5:55:98:66:0e:5c:f3:5b:31:e9:77:64:aa:
                    47:64:6e:fd:44:e0:cd:a7:cf:5a:7c:8f:c0:99:60:
                    34:38:d5:d6:5c:c7:b7:89:fe:01:40:16:24:a9:53:
                    74:fc:f4:29:ed:fc:16:ba:06:4f:29:2e:33:bf:54:
                    6d:f9:5c:55:40:e0:44:b6:aa:78:c8:5b:4b:1d:3d:
                    a2:96:a2:8a:0e:2a:90:91:a5:76:6c:c8:e9:2d:5a:
                    8e:93:de:6a:1b:b2:30:b1:b3:92:3f:6b:aa:a6:c9:
                    c6:50:3b:7f:1b:2e:60:8b:18:82:f1:e2:b7:7e:bd:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:89:9F:79:EE:46:08:1E:0A:9D:B1:1F:0C:B2:A0:40:32:A7:26:39
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:71:6a:ee:b4:fb:1d:f0:3c:e1:c4:c8:ce:03:c1:cc:b5:
         af:57:dc:9f:09:8b:85:08:e6:3e:d5:18:18:1f:71:a5:fb:d9:
         f5:f6:37:1d:18:d8:4d:94:fe:58:c6:aa:f1:b9:30:c1:d3:35:
         a1:08:3f:d3:77:cc:48:ad:b1:e0:5a:5e:3c:04:88:db:b0:22:
         f3:2b:24:f4:57:3b:07:30:69:5c:cf:ac:7c:47:a6:8e:e6:06:
         c3:c1:7c:82:27:32:6d:e7:cc:1b:9f:93:15:d2:b3:2f:16:2e:
         ed:81:8a:8a:91:5a:24:fd:5b:c1:ae:8b:be:d1:cf:be:35:b6:
         22:9e:e4:6a:da:fc:69:74:e9:2a:55:47:92:ee:01:b3:00:3e:
         44:35:83:c4:5d:ab:04:bb:25:5a:20:97:bd:0f:96:c7:1c:a2:
         b3:3f:4a:76:59:dc:a0:5f:58:2d:97:7d:41:84:06:2b:4d:33:
         63:36:5e:f3:8f:2f:4b:36:cf:69:f1:16:0a:12:b1:a1:ea:5d:
         d5:e5:e9:4d:6b:44:dc:74:41:54:02:81:98:4e:0d:3d:f6:12:
         c9:d5:6c:95:6d:36:16:fd:ec:90:a1:00:80:bf:e6:08:f7:e2:
         d4:11:ed:ce:ff:00:24:b4:a9:92:b4:93:c3:ce:4e:f0:d7:bd:
         e3:cd:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:10:27 2026 by rpki-client