Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          0EI4OEZ3KOhjLTj7B0E2Z1azOuEyKFFPVb7IL93+m5M=
Subject key identifier:   A0:BE:7B:87:7B:EE:73:8A:41:99:4C:64:33:A2:07:9B:BC:8B:F4:F4
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019FA296E1659B70EE3F293B707555A1625F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          1962
Signing time:             Mon 27 Jul 2026 08:00:24 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:24 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:24 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: /thQx0QrCNqPCDMB6BSe2DzbsIr+Ljd75yyrGgiQ+BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:96:e1:65:9b:70:ee:3f:29:3b:70:75:55:a1:62:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Jul 27 08:00:24 2026 GMT
            Not After : Jul 28 08:00:24 2026 GMT
        Subject: CN=a0be7b877bee738a41994c6433a2079bbc8bf4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:40:f4:0c:10:c5:92:c1:7d:15:67:73:08:
                    01:a7:a5:42:2e:4a:5f:5d:56:6d:4b:d7:25:65:69:
                    8f:15:9e:44:6b:03:6b:87:ec:14:83:d8:43:68:a9:
                    1e:c1:7b:e1:f4:4c:18:fe:54:a4:ef:f6:18:6f:47:
                    0d:bd:59:f8:39:10:58:56:7c:94:ec:a4:f5:71:76:
                    4e:ab:ea:ce:50:e9:69:63:9c:0e:33:9b:6d:8d:37:
                    38:19:57:16:94:1b:72:11:10:bd:3e:f6:04:6f:aa:
                    82:a8:b8:6d:2c:32:c8:88:d8:a1:7b:5a:34:91:f4:
                    c8:7a:23:e5:d8:bd:60:7d:58:74:a0:5c:1c:75:bd:
                    c7:3c:6c:36:27:95:fc:4c:24:e0:8e:98:fe:62:9f:
                    08:49:92:e7:63:30:e8:19:7c:d7:6e:38:77:ac:e3:
                    11:8f:92:95:6e:2b:9c:54:fe:51:76:78:b7:68:31:
                    ec:48:70:58:2a:c5:db:6e:b0:38:c6:e3:b0:1c:8d:
                    36:a6:09:d5:db:7b:37:e9:da:a2:84:5d:10:3e:61:
                    00:71:24:d9:c4:ef:ab:e7:9b:74:dc:38:4a:f7:2f:
                    4d:42:d4:5e:02:66:10:43:f9:fe:3e:6a:77:61:db:
                    51:10:93:56:21:b3:5e:89:ca:a5:59:5a:8c:b8:c3:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BE:7B:87:7B:EE:73:8A:41:99:4C:64:33:A2:07:9B:BC:8B:F4:F4
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:cc:6d:19:a3:39:28:a6:4e:33:a8:bc:a6:70:85:cb:14:
         c5:e7:75:49:ec:17:cd:38:eb:4c:d5:aa:69:4d:f1:2f:80:2a:
         bc:09:0d:88:27:9a:82:27:a5:98:a4:54:d2:39:a5:61:e9:e2:
         7e:ba:ff:18:5c:af:25:81:64:bf:c6:10:f6:11:18:d5:16:ec:
         dc:f4:2c:9c:01:20:03:a6:75:9a:b1:c3:ce:59:ee:34:a9:b9:
         61:ec:c7:7a:2e:bc:53:2a:7a:84:22:72:a9:f5:9c:2e:69:20:
         bd:57:77:02:86:c1:bf:5d:09:dd:4c:52:5f:60:83:53:d3:fa:
         fc:f3:0d:2e:99:dd:d1:14:ac:99:52:4a:88:ec:62:7e:3d:c5:
         c1:8b:8d:91:00:38:fd:b5:55:2f:02:4c:a9:ba:bb:ef:42:82:
         35:95:3e:00:c4:6a:b6:0c:92:e2:47:38:99:8b:e1:05:ec:8e:
         2c:2b:57:fb:8d:fe:8d:4c:04:a8:44:a7:22:18:94:b6:47:b6:
         fc:1a:f6:17:68:4a:9f:a5:b5:5a:67:59:77:d1:82:8b:3c:e7:
         f7:90:93:1d:1e:53:f2:d2:38:01:e5:63:6d:21:cc:d4:5c:38:
         7c:48:2a:36:da:90:df:fd:79:19:fa:42:0f:ab:28:dd:ab:f8:
         08:e9:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:42:36 2026 by rpki-client