Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File:                     thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier:          QwZL1Vil3xawVSKSlCRsjK09QrEypa1yClzAtYSmJcQ=
Subject key identifier:   F7:36:34:78:AA:EB:34:BA:CB:27:94:AE:BC:1E:E9:EB:1E:6A:70:BB
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer:       /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial:       019FA184630A46C9F8AD7BA90D9245669284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number:          0E14
Signing time:             Mon 27 Jul 2026 03:00:35 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:35 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:35 +0000
Files and hashes:         1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
                          2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
                          3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
                          4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: jycvnEpEZDN1N4TdPW59DarDh4e+huZ9YwkKgsnnru0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:63:0a:46:c9:f8:ad:7b:a9:0d:92:45:66:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
        Validity
            Not Before: Jul 27 03:00:35 2026 GMT
            Not After : Jul 28 03:00:35 2026 GMT
        Subject: CN=f7363478aaeb34bacb2794aebc1ee9eb1e6a70bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:bf:d9:44:43:a7:66:11:ba:33:80:3c:1f:
                    5b:6c:3e:cb:0b:87:06:31:04:a2:27:9a:f5:cb:4d:
                    03:df:24:67:70:c2:02:84:08:50:e8:0f:c6:ec:bc:
                    fe:0b:65:c9:1e:1f:e6:f3:fd:f1:c4:75:c6:fa:73:
                    86:8d:3e:e3:ae:b7:b4:46:ff:33:b6:62:9b:57:05:
                    e4:f6:a2:b3:df:87:5a:84:07:23:84:aa:05:2d:95:
                    6a:4f:6f:ac:63:fa:4e:f5:f6:b3:67:2c:d6:db:a0:
                    a2:85:d5:24:0a:70:b6:1a:16:ba:2b:c9:49:aa:96:
                    51:38:b7:14:ce:03:f5:a1:1f:ef:cc:39:ee:2e:77:
                    c3:c4:b1:1d:95:b1:40:53:dc:5c:11:fa:9c:60:3b:
                    96:f8:38:2d:8d:80:e5:e7:52:b5:5f:05:93:75:f5:
                    11:02:ed:4d:ba:57:e9:2f:cc:d5:5a:96:8a:28:f1:
                    be:3d:cc:20:92:75:4a:bc:db:aa:92:60:14:10:93:
                    55:2c:5f:55:cd:18:f5:7c:51:c7:65:e0:9f:58:c2:
                    e1:50:12:2a:85:7b:4c:8e:57:85:a8:5c:a2:97:ee:
                    8c:44:da:a6:7e:cf:6b:05:cf:04:96:83:2d:4f:dd:
                    50:ae:56:93:8a:ca:c1:ec:36:f6:da:99:84:93:bd:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:34:78:AA:EB:34:BA:CB:27:94:AE:BC:1E:E9:EB:1E:6A:70:BB
            X509v3 Authority Key Identifier:
                keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:4c:c5:84:07:0d:a6:c1:f9:13:98:eb:a1:aa:b1:b7:3a:
         d6:56:94:69:4d:62:e3:28:ab:1f:ab:5f:f8:8d:7c:66:9f:06:
         cf:22:18:90:1f:dd:2e:b8:6e:7e:2d:73:70:d2:20:20:b2:7a:
         7f:b9:b3:b5:28:52:fc:c4:5b:9b:66:8d:7e:8a:2e:3e:42:fd:
         54:a5:d4:1f:d7:b4:bd:6b:c3:de:25:c8:2c:8b:03:16:b6:b8:
         e6:19:55:f6:db:74:86:02:77:a9:dd:21:7e:dc:71:cd:46:2c:
         fd:17:1a:e4:54:89:61:28:7f:b0:57:d2:92:a0:18:31:37:23:
         f3:03:ac:b3:fe:c0:cc:a9:db:b9:4f:a0:0c:12:7f:54:f4:e3:
         05:b4:51:18:c4:9e:24:a6:e0:b5:4f:cb:9e:e8:6e:67:f5:62:
         d4:d4:ac:b5:8e:61:56:c2:d3:ec:c2:50:df:fb:a9:1f:92:fc:
         09:03:0f:de:e9:a9:21:01:14:32:03:c9:ea:b3:1a:07:8e:cc:
         88:30:93:67:53:ba:88:ea:e1:b1:de:40:36:fd:d6:50:b8:fc:
         30:ad:73:45:96:0b:26:22:97:00:b6:d9:e1:57:b9:76:54:98:
         fe:86:de:54:4d:80:97:46:55:a3:83:c1:85:1f:fd:9f:cb:3d:
         72:5f:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:46 2026 by rpki-client