Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          qsC20JqS/r8sBNKyAXhs6QM6S6aUPu3T9ODh81kTOnc=
Subject key identifier:   6E:33:53:A3:88:C8:76:EB:01:3A:35:5E:2E:13:14:9E:C6:4C:2D:C5
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       019F45ADEADAD150F68BEE6E003A9EC8D6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          10CF
Signing time:             Thu 09 Jul 2026 07:00:53 +0000
Manifest this update:     Thu 09 Jul 2026 07:00:53 +0000
Manifest next update:     Fri 10 Jul 2026 07:00:53 +0000
Files and hashes:         1: BHTm56F1JX3tXmfckS4aLIINLII.roa (hash: wAMHg65t7IQsW4KtiIHLr9C0peG2e2YbKnGvB0suYrg=)
                          2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: CJALeK7jUw4C1aYT2/fKUVYckvXhfJo7aIUaJ6CpSy4=)
                          3: IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa (hash: 5NDZ9fYEk6QjwvvjIgarKP6mtzbMjVq5FS8+N6De1Yk=)
                          4: XvBJZwcn7VU_moTOvJdb6scRTKA.roa (hash: qtP0FU9yzxkB6If5YZB4PVXGwxz8cr/TjgCYhAvSLVY=)
                          5: cSi7_OAuX-rLMOiqKcF2agOjyuY.roa (hash: SyyfBcCCktRPddt1j77ZoKfvba/2lQeJcmhdFBczGME=)
                          6: ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa (hash: XBY4/UtnM0b8oNJm9u2YyPgXyoTfFMPyMfliMhcU86s=)
                          7: oJ_9gZWX0-HZBwO501St9llybTk.roa (hash: TLUGLY8S71f/0cvwgOTLfE6brs5a4M3ghefdEt5ZM+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Jul 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:45:ad:ea:da:d1:50:f6:8b:ee:6e:00:3a:9e:c8:d6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Jul  9 07:00:53 2026 GMT
            Not After : Jul 10 07:00:53 2026 GMT
        Subject: CN=6e3353a388c876eb013a355e2e13149ec64c2dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:0b:86:ee:fd:a9:5a:a2:d7:ae:a0:47:89:
                    7e:b2:81:9d:6f:d0:82:66:59:b8:c1:51:e0:b6:5b:
                    5a:f3:3e:a1:d0:8f:dc:eb:20:71:55:b0:13:da:a8:
                    bd:67:1d:f6:8e:6d:77:57:c0:73:e9:ed:e7:53:79:
                    d8:42:d3:a8:cf:ad:c3:ab:f8:91:7f:b6:51:ea:49:
                    1b:58:4d:46:8f:51:df:7a:3c:84:03:c1:51:5d:ed:
                    7f:0f:1e:fb:d7:5b:e0:93:4c:c9:f9:07:22:e8:ab:
                    dd:c2:53:d6:7a:ce:f1:de:aa:b7:d6:dc:e8:35:8e:
                    5e:2e:1c:80:ae:39:af:7a:43:87:62:3f:e3:85:b0:
                    dc:4b:a4:e0:12:dd:e8:42:60:4b:8c:f3:10:37:89:
                    5c:ee:4a:70:8a:ad:11:f4:a1:af:59:3f:58:9a:06:
                    a5:1e:58:06:39:bd:12:73:43:23:86:02:46:bf:ab:
                    56:b7:33:8c:f8:19:d2:14:67:85:8f:1a:4e:b8:14:
                    8d:eb:e8:68:49:47:5b:a2:65:6c:da:37:6b:24:7a:
                    95:d5:68:d9:24:74:0f:e7:6d:b6:5d:5a:b2:70:db:
                    b4:75:04:e7:66:67:c7:c4:06:a4:28:aa:de:ed:a6:
                    19:c0:3c:33:c4:82:b5:6b:78:e3:e4:be:fc:44:e5:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:33:53:A3:88:C8:76:EB:01:3A:35:5E:2E:13:14:9E:C6:4C:2D:C5
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:57:14:88:3e:8b:6d:e3:c0:82:2b:d3:c7:81:b3:cd:69:ff:
         31:0e:4e:d0:29:09:88:25:ed:af:1a:a3:c5:c8:08:68:c6:5e:
         fc:61:4e:41:38:6a:b9:e4:55:72:50:77:44:8a:1b:20:40:7f:
         36:ab:08:e9:96:63:2f:bb:15:a9:02:61:68:a2:de:a1:48:de:
         79:16:3a:6d:2e:cb:5c:66:ba:07:81:1f:91:84:1a:45:5d:d7:
         c1:b4:9a:d3:fc:e0:5f:13:0c:21:e5:fb:fd:6c:57:5c:eb:3b:
         e5:be:f6:fb:3b:99:05:e1:88:75:c2:2d:77:2d:b5:ce:9d:49:
         f1:d5:36:97:c3:b1:a1:9d:ab:48:bf:15:ed:75:64:cb:9c:4a:
         db:ae:7b:d4:40:0f:5a:a1:84:68:cb:56:a1:cb:54:75:a5:24:
         79:9e:84:02:72:09:83:f8:c8:a2:69:8c:9c:bf:85:d7:bd:f4:
         48:df:52:4c:35:51:0d:13:19:68:4c:31:17:32:9e:e6:61:9a:
         c6:41:f0:de:a8:66:07:ab:77:79:cf:dd:55:bb:0a:93:ee:06:
         e0:f0:bd:18:23:60:83:37:12:f4:42:6d:72:28:ee:ee:07:fe:
         be:74:fa:f1:aa:ee:f1:0b:da:26:ac:42:aa:02:f0:90:e4:44:
         ad:47:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:55:35 2026 by rpki-client