Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File:                     sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier:          ZlO9qj/Dai9LXYrsoAJE2+2fFQddTE15Wf9RKM6pS/I=
Subject key identifier:   1F:BF:31:C5:45:5A:D5:B2:F6:1B:70:BB:8A:13:04:56:3B:95:39:56
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer:       /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial:       019FCFDE07D48E3D137D983FB4CC73B02CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number:          030B
Signing time:             Wed 05 Aug 2026 03:01:02 +0000
Manifest this update:     Wed 05 Aug 2026 03:01:02 +0000
Manifest next update:     Thu 06 Aug 2026 03:01:02 +0000
Files and hashes:         1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
                          2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
                          3: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
                          4: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
                          5: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
                          6: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
                          7: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: qTtwvR4gWWYs4XbiEr0FK//G0R2opZSSdF4qpYbg4PA=)
                          8: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
                          9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cf:de:07:d4:8e:3d:13:7d:98:3f:b4:cc:73:b0:2c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
        Validity
            Not Before: Aug  5 03:01:02 2026 GMT
            Not After : Aug  6 03:01:02 2026 GMT
        Subject: CN=1fbf31c5455ad5b2f61b70bb8a1304563b953956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:13:31:e3:58:3b:04:c6:69:00:4b:a8:af:
                    bb:95:73:ba:9a:0c:9d:1d:80:bf:61:ce:c8:ef:e2:
                    97:97:e7:f8:77:1e:a6:a5:f8:72:eb:1a:ba:1b:9d:
                    ff:d9:d7:2b:4a:f4:7e:b6:a0:e7:3e:56:b2:1d:04:
                    e0:3b:2a:f8:1b:21:2e:0e:13:8f:50:a4:bd:5a:5b:
                    ad:64:32:57:90:a7:0e:72:8c:7c:0e:f7:f5:03:36:
                    96:6c:29:d0:a9:36:50:4a:b4:f1:f3:19:3d:bd:5e:
                    e8:3a:92:78:0f:cc:a4:d7:f8:92:a6:c5:84:69:4a:
                    0c:9d:c6:40:dc:39:db:ab:d0:7b:0b:1e:22:65:86:
                    c4:31:45:9a:cd:b8:fd:fc:c9:01:17:ce:b3:f0:0f:
                    bf:fc:72:fb:00:21:2b:35:4f:d7:40:84:30:94:21:
                    0a:44:40:ac:5a:fe:92:37:5a:07:73:df:ca:5a:61:
                    ce:ee:35:5f:bf:76:2c:f1:b9:7b:99:cc:9a:aa:f6:
                    02:d0:a4:b8:2e:29:f1:98:af:81:38:c4:ee:81:76:
                    49:b8:54:22:e8:2a:d2:8c:e1:31:f6:d3:0d:fc:88:
                    66:83:f8:d2:01:e2:62:df:7b:f8:6a:01:f3:b6:a7:
                    6d:29:a4:f7:25:48:8d:05:75:64:7c:41:06:90:c9:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:31:C5:45:5A:D5:B2:F6:1B:70:BB:8A:13:04:56:3B:95:39:56
            X509v3 Authority Key Identifier:
                keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:96:56:a2:7b:15:76:f5:db:e2:29:ae:22:37:bf:c3:f2:f3:
         00:f9:04:ce:ff:3e:f4:9d:80:27:4b:01:e6:c3:1c:e0:59:64:
         8b:72:f7:2d:8c:f1:a0:49:4b:35:b1:e4:11:7f:83:87:b4:28:
         76:f3:3a:2e:4f:89:a8:77:e7:aa:75:e7:ed:f7:26:53:c4:9c:
         bd:e9:f7:56:24:94:d3:29:4e:da:77:16:cb:58:ca:94:f7:80:
         21:28:52:43:9c:42:66:c3:98:3a:4f:07:17:5e:8f:82:b1:60:
         c4:5a:35:32:c5:60:42:c5:7a:8b:e1:5b:56:e0:90:48:4b:41:
         b4:cc:69:87:58:8b:8f:9c:19:92:13:5e:28:68:39:fa:ac:9a:
         90:9b:91:dd:c9:75:5d:a0:7a:fd:44:16:86:ee:23:42:3b:f1:
         5a:e1:af:48:a4:bd:1b:0d:4e:d0:b0:72:d1:42:c3:24:14:ec:
         f1:1d:b7:1e:61:6c:33:8c:31:7e:f5:ee:2b:b9:25:ce:3d:bf:
         02:ee:fa:97:c0:04:0b:50:71:c0:c8:74:02:00:2c:39:48:98:
         f7:33:d1:f4:9d:89:e7:61:53:e1:bd:23:24:0b:30:2e:f1:38:
         26:ff:01:48:0c:88:d5:6a:4d:b5:3c:b4:61:4e:80:d2:bc:87:
         8c:7e:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 07:32:14 2026 by rpki-client