Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          ds7Ul1Pok8YaCcay0u1blr3qt2noihxzX/tPpzpd91s=
Subject key identifier:   C5:63:72:94:C1:F4:02:2D:6A:66:64:08:D4:EC:25:99:6F:42:FC:8B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019F965C578BC03BE60011FD0DFBA2DFD80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0906
Signing time:             Fri 24 Jul 2026 23:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 23:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 23:01:01 +0000
Files and hashes:         1: 1-lZQQwIGspy-A49VyQ7kHmNHpKQ.roa (hash: 2vhnioGO/eiMQvJeJ+tmXutIm8YlR1a8HfWiqLl7pT0=)
                          2: 2LWYmASxuBLRbzVC9LCRKSvqhJM.roa (hash: 8dPo2gye6yX3KmBTpVEzeXu2YyozD5gTuof++Xq9PIQ=)
                          3: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=)
                          6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
                          9: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
                          10: LCFdxVlAtcLkcKUr0blTTKgZmEw.roa (hash: jGJaxEMPKFGeVP28YWJ4t2xMx4rPzI/ALe0dQ924UAc=)
                          11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: LST/4oepZX4fkykVkDtNR+kEy18DXcJEIvGKaUZUgOY=)
                          18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          20: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
                          21: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:5c:57:8b:c0:3b:e6:00:11:fd:0d:fb:a2:df:d8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jul 24 23:01:01 2026 GMT
            Not After : Jul 25 23:01:01 2026 GMT
        Subject: CN=c5637294c1f4022d6a666408d4ec25996f42fc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:8c:8b:4b:93:dc:87:d1:b8:94:6b:b4:bc:
                    68:e1:86:ea:68:00:72:6e:6e:0d:05:68:1b:bc:ec:
                    e3:0a:88:5d:52:75:7d:46:74:59:93:6c:22:b3:58:
                    7c:b9:f8:15:9b:0b:d5:2a:ad:87:58:9b:59:43:1a:
                    38:0d:7b:7c:a8:ac:f7:23:4c:10:87:dc:d4:03:7e:
                    6d:d6:89:44:02:62:d5:0a:a7:1b:77:e7:94:05:6a:
                    e8:ff:60:eb:70:9e:98:2c:0b:77:b1:0f:80:fe:0b:
                    5b:9c:2e:3c:0f:0b:c6:f5:56:97:b1:53:1a:47:81:
                    6d:c3:37:51:83:8b:33:2d:4c:24:a9:2f:79:c0:e2:
                    d5:d2:46:ca:84:8c:f6:1e:42:2e:8f:a4:77:e6:e0:
                    8d:fc:ac:06:9e:cb:ec:da:86:2d:87:d3:21:65:cd:
                    8e:11:ea:04:46:28:89:87:d9:ed:1a:4c:40:31:51:
                    80:d4:01:d4:66:bb:d5:8d:13:f7:5d:33:c6:b3:ef:
                    c3:40:42:62:31:41:fa:a0:e4:8d:f0:db:6b:45:32:
                    2b:54:16:84:03:88:34:93:c9:7d:43:aa:fa:34:57:
                    db:96:93:c9:d2:00:98:51:ed:e9:f4:fc:19:7d:c5:
                    96:40:bc:24:b8:3c:9d:2a:04:62:8a:ef:69:85:37:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:72:94:C1:F4:02:2D:6A:66:64:08:D4:EC:25:99:6F:42:FC:8B
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:22:b4:4a:f5:96:ea:2a:3c:24:5d:eb:e1:46:fc:b2:d6:00:
         1e:69:1c:76:b8:6c:cf:38:ab:c2:94:47:84:fc:1e:04:93:e5:
         d9:40:18:44:e2:ee:28:2f:22:c9:95:c1:64:52:de:11:74:83:
         77:f3:d9:d5:8f:65:43:3e:79:27:1a:d0:56:1c:36:f6:86:37:
         45:1b:3f:3b:2d:3f:55:b7:22:23:e4:49:16:47:34:0e:74:31:
         27:cc:09:55:3a:e1:81:8c:c1:95:3f:93:f6:52:0b:24:ba:dc:
         0f:98:be:d6:0d:a9:c6:fd:16:ca:69:ee:b8:86:dc:0a:fc:a3:
         3c:cf:a9:35:c3:6f:04:0d:5a:68:c1:d8:77:32:f0:bc:fa:18:
         8b:f1:c1:68:cb:d5:0d:94:9b:0d:be:bb:7f:61:40:f9:0b:a9:
         07:a4:59:ed:bd:26:e0:92:32:83:41:a9:d6:60:88:26:92:8a:
         91:80:97:ae:c2:bc:47:ba:39:f9:05:5f:d1:5f:92:c7:c8:5a:
         2c:21:e2:64:0a:bc:0c:b7:3f:48:e0:be:93:92:0f:cd:86:ff:
         7e:a4:6e:2a:92:d9:76:0b:2d:02:33:32:9c:f5:1d:f9:64:ef:
         62:67:dd:ca:db:22:8c:df:2b:e4:f0:2d:02:9c:2f:11:a0:50:
         62:57:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:31:56 2026 by rpki-client