Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File:                     D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier:          ViVfKC1BS/nWnzhIg1TPPkqJ9YXex04AzaptSoJGWQk=
Subject key identifier:   58:25:76:8E:27:44:EE:EB:23:03:F8:12:9D:F6:F5:E0:75:07:0C:9C
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       019FDDD14461D4FF258414FD4698F683D0B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number:          1A10
Signing time:             Fri 07 Aug 2026 20:01:47 +0000
Manifest this update:     Fri 07 Aug 2026 20:01:47 +0000
Manifest next update:     Sat 08 Aug 2026 20:01:47 +0000
Files and hashes:         1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=)
                          2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=)
                          3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=)
                          4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=)
                          5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: GMJr2CVOa3d9waPX1zKH3Y4diIikZVVjqKpmIMplZo0=)
                          6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=)
                          7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=)
                          8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=)
                          9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=)
                          10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=)
                          11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=)
                          12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:dd:d1:44:61:d4:ff:25:84:14:fd:46:98:f6:83:d0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: Aug  7 20:01:47 2026 GMT
            Not After : Aug  8 20:01:47 2026 GMT
        Subject: CN=5825768e2744eeeb2303f8129df6f5e075070c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:69:85:84:2c:3b:d5:4c:a0:77:4c:01:b8:
                    26:d0:24:64:69:71:bc:ec:9d:dc:1c:10:2c:22:1b:
                    aa:58:2d:65:de:a8:c4:ab:23:af:c4:83:46:a3:55:
                    c8:c7:d9:13:3f:fb:0b:79:e3:ff:ba:df:91:cb:98:
                    09:a2:a8:7c:67:23:0d:ce:c0:db:dd:bc:69:06:36:
                    c3:76:f0:0e:3a:02:52:76:7e:fb:2c:a6:42:d2:4d:
                    e6:5e:13:5a:96:48:d1:dd:5c:47:9c:6a:38:27:60:
                    81:18:44:c3:ff:53:6f:8c:d9:35:b0:08:ab:04:69:
                    f3:14:2f:10:e9:79:66:69:fb:53:83:72:7e:9c:75:
                    2f:b5:78:c3:c6:4b:3c:22:90:47:7f:83:34:49:de:
                    3e:5c:ba:a0:75:b7:15:10:15:b9:61:a9:5b:92:d0:
                    62:bd:2a:98:25:88:a7:b5:a9:86:02:a3:2a:37:28:
                    28:c4:77:b9:6a:4a:9b:fe:74:be:e6:c4:96:05:b9:
                    9e:9d:7b:44:d5:ea:35:4d:59:6e:1c:53:8b:1b:c7:
                    77:9b:0e:2c:11:6e:fd:bb:19:a8:0f:6b:c0:e2:d8:
                    0a:08:c0:2e:67:5c:24:c9:f1:4a:c6:dd:79:22:34:
                    ad:41:42:06:1e:a6:d5:d4:85:82:ac:28:d4:e6:fa:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:25:76:8E:27:44:EE:EB:23:03:F8:12:9D:F6:F5:E0:75:07:0C:9C
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:ec:3c:93:83:6a:ff:62:04:2e:6c:c1:ac:4b:2b:74:97:
         6b:6b:e6:ca:dc:80:a7:d2:41:ad:16:ef:c8:3e:45:7f:3d:99:
         f9:5c:6f:1f:69:28:61:ce:6c:d9:ce:b6:43:4c:73:28:ad:a3:
         8b:05:aa:e3:54:d1:4e:4e:e7:46:da:4d:8c:b0:0d:47:dd:6b:
         9f:81:66:fe:4b:4f:30:c6:c4:c0:e8:d9:7e:88:57:5c:1b:93:
         62:2c:cd:9a:ac:27:67:ed:ec:17:e7:33:f8:44:21:8e:1b:32:
         b7:82:6d:8c:bc:3b:bd:ad:21:21:2f:14:01:71:c8:8f:16:8d:
         55:dc:80:6a:80:6b:3b:42:02:c7:f0:d8:0e:ac:21:25:82:76:
         b5:ec:71:25:dd:c7:5d:9b:17:18:48:26:41:50:2d:6f:0d:3a:
         5f:d6:e9:4b:0e:94:de:dd:c5:55:3d:85:bf:9b:aa:65:5e:c8:
         e7:28:f5:6d:d8:fb:c3:96:84:d4:99:db:56:de:d3:58:38:c7:
         5f:c3:96:35:5c:5b:b2:8e:58:75:f1:11:2d:96:98:c7:b8:bb:
         0f:d0:cc:07:a5:ce:bb:f5:cd:a4:2f:97:e1:0b:59:29:8a:4d:
         a5:1f:7f:f4:ba:3d:74:cc:a7:3f:01:09:68:a6:be:55:cf:bf:
         33:e9:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:48:32 2026 by rpki-client