Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          4Fytkf4FpY15QU8ajcF5Gwvd8niIOt9rH6rVD3BINtI=
Subject key identifier:   02:10:71:13:18:12:D0:FC:BD:E7:31:CC:1F:F2:6C:42:21:A7:28:A6
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019FA296DB9C88543C0EEBCB6D40F83AFEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          19D9
Signing time:             Mon 27 Jul 2026 08:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:23 +0000
Files and hashes:         1: Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa (hash: 01J0VB2/sc7Wjg5UC4eC51E7MgriDtGuK8sC7s32gVc=)
                          2: eaURa3uTlyiZsAXJzkPz_x5Muw0.roa (hash: c+Yhm7pE68b9qJ0hObSRz8BZLxOQWu5iU9oFtQINp5c=)
                          3: epQedJVwRBT94oycCSPj2YdU8Tw.roa (hash: zh7Uj6j3oKDWZJe0YH4R9IHGVwdwn+U1F6Ti2AwnjzM=)
                          4: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: NFsHfuT5JwgDLFOMe5gY7kOT4BUcYImTUb335Pp7Qyg=)
                          5: ohKELa4D7u4-F5h5znUYEfXBTrQ.roa (hash: fMVIcUvcrWF7H5I6/6miPXqqmQnLYpDWZI9AaMxyhp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:96:db:9c:88:54:3c:0e:eb:cb:6d:40:f8:3a:fe:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Jul 27 08:00:23 2026 GMT
            Not After : Jul 28 08:00:23 2026 GMT
        Subject: CN=021071131812d0fcbde731cc1ff26c4221a728a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:53:a4:66:55:3d:cb:0b:c0:9c:3e:f1:ec:
                    c6:80:45:78:65:3f:c5:07:ce:3f:cd:08:92:e5:9c:
                    30:4e:9d:ca:0e:59:0d:9d:d4:12:6d:80:2c:87:61:
                    1b:13:79:7e:1c:57:a1:fe:ff:53:0b:a7:43:50:2e:
                    50:cf:36:88:b1:70:fd:84:d5:70:b9:7a:20:0b:82:
                    cd:9d:f3:d5:4e:50:01:e6:09:1e:5b:ee:02:41:16:
                    6b:f9:5a:4d:47:d3:50:7f:6a:e6:60:b7:f9:5f:1e:
                    17:e1:1f:b0:83:5c:57:53:2b:ae:bc:dd:45:3d:45:
                    41:7f:df:8a:c8:4c:2b:71:ff:a3:04:da:93:6a:d5:
                    a1:6e:07:c0:b8:83:ec:d4:54:a4:34:05:78:dc:6e:
                    77:8d:06:f8:55:63:af:da:31:c6:32:2a:4b:23:e0:
                    5d:01:db:89:2d:4f:ac:e0:06:5d:44:60:d4:c8:d6:
                    f8:dc:0b:6c:9d:bd:6b:a3:2b:10:7a:3c:ae:17:12:
                    8e:ad:3d:57:c0:7f:75:45:85:be:fa:9e:b4:35:92:
                    75:d2:5a:dd:86:54:23:eb:bd:b9:71:24:6f:32:69:
                    8a:af:20:de:c7:81:b0:37:bc:3f:30:49:d2:86:66:
                    7b:80:ee:ed:62:8f:99:8c:2a:3d:89:d4:b5:b0:c0:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:71:13:18:12:D0:FC:BD:E7:31:CC:1F:F2:6C:42:21:A7:28:A6
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:41:d1:28:d6:ba:f5:7e:45:b2:0a:d9:fd:7c:24:60:52:77:
         80:71:a9:64:90:92:86:86:6d:04:94:6b:3b:fb:08:6c:6a:f3:
         b9:77:c2:85:fe:c4:72:89:b9:80:5c:75:6f:22:c9:c6:95:9b:
         c7:a5:0e:18:63:a6:a9:d9:2f:f0:cc:39:8e:43:db:00:98:1d:
         10:1c:63:01:d2:39:95:a3:ca:96:f6:56:71:71:7b:43:73:f9:
         8d:d6:80:c5:3c:10:ef:4e:df:9c:2e:8e:41:e3:64:1c:5f:d7:
         76:de:99:86:63:92:93:09:25:56:12:d7:e8:a6:9f:43:63:f5:
         1c:18:e2:f8:84:0e:47:3b:fc:a8:f9:6e:c3:7f:35:54:51:70:
         76:5d:f5:8c:f5:f1:41:d5:52:55:0e:fc:07:89:c5:01:89:48:
         f9:e1:e6:00:4c:07:42:4f:9a:8c:a1:6f:6f:d8:2e:19:f6:82:
         77:b2:43:e9:1c:fa:db:bd:42:66:0a:ea:ee:87:a3:c8:1b:5b:
         bb:65:0e:9c:b3:2c:b3:f9:38:5e:6d:4c:3e:2c:ad:78:b0:67:
         53:ff:59:d6:dd:e5:88:26:a5:9e:88:db:36:a2:63:9a:b0:d9:
         48:7b:e1:47:94:fb:a3:86:e4:bc:19:2a:97:e8:42:9a:99:c8:
         e9:b6:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:20 2026 by rpki-client