Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File:                     c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier:          5Lg4guPRe7NOY8n/w/pslFafe04i1WLTD70/jvt7r+A=
Subject key identifier:   69:58:5A:E1:37:15:C5:A6:29:EA:C3:23:74:18:84:11:F1:AD:A7:E3
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer:       /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial:       019FCC3861193698A7E163F1DBA4EE8BBD3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number:          0DCC
Signing time:             Tue 04 Aug 2026 10:01:14 +0000
Manifest this update:     Tue 04 Aug 2026 10:01:14 +0000
Manifest next update:     Wed 05 Aug 2026 10:01:14 +0000
Files and hashes:         1: FApYjE878gTQjnR6VxM2QnFzIxE.roa (hash: VNJOfYtDuAPjExn4P6G0DeQAutPtIF8Xz9lKtPfTGNc=)
                          2: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: rcEcTgEXUM6YFPCQUH/l12nKy92r9yQMsExWvqzOyVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:38:61:19:36:98:a7:e1:63:f1:db:a4:ee:8b:bd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
        Validity
            Not Before: Aug  4 10:01:14 2026 GMT
            Not After : Aug  5 10:01:14 2026 GMT
        Subject: CN=69585ae13715c5a629eac32374188411f1ada7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:ac:42:4d:9d:e3:dc:51:0f:91:27:b1:d4:
                    4c:1b:9a:d5:13:2b:a8:b3:a6:f7:e1:85:32:32:bc:
                    7a:e5:6e:0d:95:86:7e:58:b0:ad:37:9b:aa:1c:3f:
                    95:23:df:59:73:5d:da:ce:41:44:00:59:54:77:16:
                    c9:a3:7f:69:de:c0:c2:cf:46:4e:e6:cb:03:82:61:
                    47:7b:3e:2c:0f:29:69:23:76:da:35:88:89:49:c9:
                    99:ff:05:0e:3c:72:c9:f4:e7:00:ed:4b:12:e6:eb:
                    5c:ad:bc:34:b2:35:c6:de:07:af:53:91:aa:93:73:
                    c3:1a:17:db:80:0d:56:2a:79:cb:2c:ec:6d:aa:2e:
                    6e:d6:48:c6:a9:56:22:1a:12:fe:55:e2:13:8a:35:
                    d1:97:2b:2b:21:c7:aa:ca:e8:b8:ea:ab:5b:c3:38:
                    b1:42:c8:6a:44:b1:6e:8c:76:4c:1a:3f:1f:61:18:
                    f2:be:7d:a5:a6:30:e1:fd:f8:21:d1:be:b3:20:a0:
                    0c:a4:89:a4:49:eb:db:2f:d4:ad:d1:e0:d8:df:43:
                    cf:43:b4:62:29:ff:7f:15:36:e5:ec:5b:70:05:e4:
                    eb:74:8b:76:fc:90:87:08:d1:e5:26:c1:8f:a2:dc:
                    e2:a4:52:48:33:8c:88:4c:41:00:9e:a1:eb:8f:80:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:5A:E1:37:15:C5:A6:29:EA:C3:23:74:18:84:11:F1:AD:A7:E3
            X509v3 Authority Key Identifier:
                keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:a0:74:fb:25:72:1e:8f:26:2d:75:93:c2:9b:ec:51:4a:
         b2:c0:73:85:0c:e9:81:56:45:4b:18:a9:68:58:5a:ed:32:4d:
         25:07:1a:70:d8:88:87:cf:f9:6a:f8:7e:26:eb:33:95:ba:a8:
         31:b6:09:4a:2a:a3:7a:af:dc:a9:b3:a9:50:0b:32:70:09:9f:
         32:35:42:db:bc:03:05:95:fb:f6:82:b1:71:c5:03:2a:a5:0e:
         60:7a:61:a8:07:c7:3c:45:83:ed:72:c4:30:c4:42:43:61:1f:
         cc:74:54:d2:39:e4:e9:a6:51:42:fc:d2:f0:a7:ae:8b:66:9b:
         31:5d:54:fa:20:fa:71:43:a5:9d:37:ec:b6:61:d7:3e:90:34:
         58:2c:79:2e:29:7e:a1:1c:0f:a2:e5:67:18:cc:b3:4c:c4:46:
         f6:35:ee:f4:4b:50:09:f8:41:75:e0:cc:80:4d:bf:86:26:bf:
         11:3f:5e:fc:75:fb:6d:41:9f:78:92:4e:68:37:81:31:42:ae:
         b1:bc:30:ae:84:42:95:2e:3e:3c:2d:11:a1:83:33:41:85:ca:
         97:7b:7f:4d:fd:fa:06:1d:d4:30:02:d1:0b:5f:2d:d4:8d:1d:
         98:47:41:97:4d:75:fd:ac:6d:b7:4f:4b:66:b2:71:50:5a:95:
         4c:f0:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:59:34 2026 by rpki-client