Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File:                     M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier:          dYMHy4oaEWij7vN0t64A4N6ZscnrgB2iplL4eEWBYZY=
Subject key identifier:   E0:3C:86:3C:38:0D:89:3E:91:62:34:51:C9:B8:38:04:81:64:B0:D9
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer:       /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial:       019F84C41375FC8067287F2435F8EA893EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number:          05DE
Signing time:             Tue 21 Jul 2026 13:01:10 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:10 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:10 +0000
Files and hashes:         1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
                          2: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (hash: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=)
                          3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: jlljiYNKFZUFkbs1AfW60DgrWzdH1YhdgqtqRUKDrQs=)
                          4: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
                          5: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
                          6: xR7LKB9cMx20WjaSYnBDWdIRF-g.roa (hash: vumkR84YsHI2dcyHQIVTL0w8JKyaUvc5rnjqJHi4+6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:13:75:fc:80:67:28:7f:24:35:f8:ea:89:3e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
        Validity
            Not Before: Jul 21 13:01:10 2026 GMT
            Not After : Jul 22 13:01:10 2026 GMT
        Subject: CN=e03c863c380d893e91623451c9b838048164b0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:8f:ee:69:45:64:6b:3c:49:f4:f3:a2:9f:
                    1e:2b:ee:a7:13:2d:ea:de:d1:9e:51:5d:7e:3d:db:
                    d6:6e:c1:a4:c2:83:e4:a0:16:b9:8c:46:a9:e8:94:
                    8d:a4:5d:d7:a4:b2:04:2b:29:80:7a:91:28:62:2c:
                    68:24:7f:5e:d9:a6:c8:9a:e3:02:00:9d:ab:9c:12:
                    96:14:6c:18:da:bc:b9:20:b7:84:64:06:c1:bb:7a:
                    c9:fe:c8:db:0b:e2:e6:0f:22:93:f2:b5:95:5c:84:
                    2e:29:06:de:57:e5:58:4f:20:4b:4c:cc:c4:92:78:
                    0a:62:9f:31:91:f1:d9:77:ec:11:05:1b:ea:c7:ff:
                    de:1a:98:11:47:bf:cb:b7:01:16:7b:75:19:bf:40:
                    bb:a5:bc:4e:e9:9c:db:9a:f8:ac:03:7c:c8:ab:51:
                    f8:f8:c0:5a:13:78:99:bd:a3:87:5f:c1:2a:70:11:
                    70:01:ef:67:37:66:35:9d:cc:ba:be:c9:b1:33:3c:
                    1c:e4:73:82:ea:96:6d:93:fd:80:3f:9f:82:e8:37:
                    72:7c:ce:c2:de:45:42:38:b7:a0:a4:90:f5:8b:08:
                    d9:09:c7:19:66:6f:e6:f1:ce:0d:57:8b:eb:c7:8f:
                    d9:bd:96:3a:42:4d:80:2c:12:e9:5a:86:df:58:55:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3C:86:3C:38:0D:89:3E:91:62:34:51:C9:B8:38:04:81:64:B0:D9
            X509v3 Authority Key Identifier:
                keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:bf:e6:40:4c:a0:0d:ea:2a:dc:77:0a:53:73:d9:a3:06:
         50:0b:51:16:f6:56:bf:cf:c2:3c:f1:1a:69:64:ca:a9:47:e9:
         44:00:52:13:3f:01:87:a1:f6:b0:02:f6:22:9d:a4:00:18:58:
         d8:66:b0:7e:b2:5d:03:76:f6:fe:6a:e9:89:44:03:2d:b9:3e:
         95:34:eb:27:21:51:f5:8c:4f:0c:0c:6c:b5:a7:43:ba:d4:08:
         7a:43:79:81:07:e1:dd:93:f2:b1:58:8f:59:5b:7a:9e:46:80:
         9c:83:22:4e:08:14:7e:e5:78:e5:e0:77:a6:f6:73:2f:84:8e:
         14:8a:09:9d:b7:2f:67:be:05:35:a2:a0:c7:cc:5f:23:ac:9c:
         76:42:28:bb:3c:f9:d4:8f:ef:51:49:67:ff:6c:bf:cc:6b:85:
         47:e5:19:a7:cb:6c:ea:68:75:de:bd:9b:9e:8a:79:e4:78:35:
         28:b8:eb:27:64:9a:00:23:10:53:91:3d:fc:20:80:48:4f:fc:
         35:d0:df:0c:0e:28:bb:06:55:75:e5:ca:da:46:59:b6:56:a1:
         b8:ca:48:f6:39:b4:f6:88:20:53:11:f6:a7:4a:5e:b1:3b:6c:
         1d:2e:12:9e:de:10:4d:a6:b0:00:cf:96:36:3d:44:87:11:ae:
         c8:47:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:00:33 2026 by rpki-client