Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          u0iXciQ6BOhhWkEtT/dz1t1y5uJ1GGSg4YTOxQtuY9M=
Subject key identifier:   6C:E4:DE:78:07:8E:92:18:F9:9A:98:C3:31:77:53:C2:82:F4:6A:76
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       019FA116D255A07976D3ED8C9CD1F06713FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1A70
Signing time:             Mon 27 Jul 2026 01:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:55 +0000
Files and hashes:         1: EGceg2KC2veG2ubJ67lLnyLOjtI.roa (hash: wY6zYtQUbn46Y33mgpfT8vGawedlaPHOCiudGF0vIQ4=)
                          2: FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa (hash: zLIxet4MNh+fLw8tWoHJ+9JWHfqaXota8sy9Ge4lA3s=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: gOhSGFzhrCjcejKt1D9ZS6KVwKI8Lbq+tKtMz5I2LCU=)
                          4: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (hash: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw=)
                          5: Nct5nqhjZ5MmurkxWJBHHWbRMa4.roa (hash: 33QaAZca2Ux5dbZ3qMUfSafv9njl74xnkMuofl09biU=)
                          6: XFzx0VxKKF-e5w2Lr2cCrOGeanM.roa (hash: UP6bd6FhB5DBxfN1nWdp5xVVm3xQKWBg64Qhp36elmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:d2:55:a0:79:76:d3:ed:8c:9c:d1:f0:67:13:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jul 27 01:00:55 2026 GMT
            Not After : Jul 28 01:00:55 2026 GMT
        Subject: CN=6ce4de78078e9218f99a98c3317753c282f46a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:05:1f:0b:3e:5e:42:2d:c3:e4:68:36:b4:
                    c0:8e:53:c1:75:30:7b:26:af:fc:6c:f2:c4:82:2c:
                    35:a6:0c:8c:bd:2d:50:58:1c:89:a6:e0:2e:3a:9b:
                    ef:8a:f4:c1:81:15:05:89:38:59:26:0d:45:9a:54:
                    2d:45:42:18:3d:0a:48:7d:b7:6e:4f:cb:3e:77:20:
                    01:40:03:37:c7:b8:55:83:c3:26:4f:ab:2a:07:6f:
                    d0:47:b1:97:b5:ab:0c:db:0b:04:11:ca:29:29:52:
                    67:9b:52:65:80:3c:c3:2f:33:0a:82:95:7b:51:d7:
                    22:aa:0b:e0:75:3a:d8:71:8e:11:56:f5:ff:df:25:
                    44:0a:2e:5b:4f:44:21:5f:0c:ef:04:1b:70:02:3c:
                    7c:3e:fc:bf:a0:ec:0e:a8:92:f2:93:09:68:91:14:
                    45:3a:85:e2:44:76:46:02:4d:a8:70:6c:45:6f:b4:
                    dd:49:11:14:3b:29:e2:d5:d4:41:df:1e:0d:dc:06:
                    d3:9a:be:0f:4e:e8:55:2d:85:e4:fc:df:d0:1d:5c:
                    21:44:50:72:f4:6a:5c:42:e7:03:ed:68:8f:7e:5e:
                    db:b7:84:48:69:47:6b:fa:15:e3:68:ce:25:a3:35:
                    d3:2c:15:b0:df:fb:42:83:61:12:f8:32:77:b9:b0:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:DE:78:07:8E:92:18:F9:9A:98:C3:31:77:53:C2:82:F4:6A:76
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e2:62:5e:48:05:84:4d:9c:3f:01:ae:9b:2b:33:dd:ae:dd:
         65:1c:a3:f3:f8:e5:3f:f5:87:80:ed:81:13:02:ba:4f:22:f0:
         f2:7b:c4:a3:5d:d2:ac:e9:3c:3c:4c:98:ae:38:99:79:69:40:
         0e:f7:32:60:23:3a:11:a6:2c:48:af:75:e2:9b:bd:64:83:c8:
         ed:ba:ea:8d:40:3f:1c:35:69:33:d4:75:23:77:d9:b7:34:e8:
         ad:d8:50:47:09:c7:72:df:c0:37:87:f9:09:12:b6:0c:ff:3d:
         d4:17:ea:15:05:c5:e2:f8:cc:3c:47:ee:99:af:1d:60:a0:8e:
         de:91:e6:68:4d:46:54:91:6d:fb:9e:d7:34:00:7d:b9:b0:f8:
         a5:07:c6:1e:12:4c:19:9c:ee:2d:c4:dc:be:00:7f:42:f6:2f:
         88:9f:0b:fe:2b:e7:60:9b:2c:b0:7a:f2:97:59:49:04:64:63:
         2b:40:f7:43:35:e7:e3:45:2d:78:3a:1c:03:39:c8:ce:8d:75:
         28:26:4f:7b:05:29:53:23:62:9f:f5:94:d8:72:b6:b9:1b:9e:
         a0:6c:c0:d9:90:8c:04:e7:b8:a3:56:02:16:1c:00:51:60:97:
         0c:5a:e5:84:a9:80:a5:3f:ca:62:f5:ee:31:3d:16:fe:35:93:
         ba:3f:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:30:26 2026 by rpki-client