Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
File:                     m1bbbkurl01Zvy7tECKgLu49N64.mft (raw, json)
Hash identifier:          J+0MQMeVYP2EtDFM9RjiB26i+04js9XSGAyCFKTTsbE=
Subject key identifier:   37:19:7B:63:66:5D:EC:6B:B5:A9:E0:3A:E6:D8:47:47:3B:6B:A0:65
Authority key identifier: 9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE
Certificate issuer:       /CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
Certificate serial:       019F9EF26B818A7B3CEC1AD2EBE4CC0B68D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
Manifest number:          47
Signing time:             Sun 26 Jul 2026 15:01:54 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:54 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:54 +0000
Files and hashes:         1: MhgYeI3nHsQ7EnEqBs3ix3URXK4.asa (hash: OMQ4Jfqr1uKSBnWc8VFQoJ2KmKvXwz+ZT7n6PnlnJ/k=)
                          2: m1bbbkurl01Zvy7tECKgLu49N64.crl (hash: 36VrWtuvG5yCyZPqnSkehfglT16gXAw8BjNae4bZb/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:6b:81:8a:7b:3c:ec:1a:d2:eb:e4:cc:0b:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
        Validity
            Not Before: Jul 26 15:01:54 2026 GMT
            Not After : Jul 27 15:01:54 2026 GMT
        Subject: CN=37197b63665dec6bb5a9e03ae6d847473b6ba065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:1b:f8:3e:81:ee:b4:cf:5a:28:cb:54:7b:
                    74:8c:a7:3a:08:9b:b5:87:c0:e4:0c:b0:88:81:6b:
                    d3:87:1c:11:ac:92:be:34:6e:20:e4:7c:1e:0e:b8:
                    e6:70:ac:09:c2:c6:05:a7:60:1d:50:c9:be:fe:b0:
                    0c:ec:4c:30:b4:2c:cc:43:a1:06:06:26:fc:5c:a3:
                    d4:15:27:1c:87:4e:85:62:20:ad:4c:3c:c3:b9:5e:
                    d1:e6:65:f4:e9:d1:7a:41:19:6d:3e:a4:4d:7c:14:
                    88:e5:c3:46:9c:cb:cf:1c:f9:a7:16:db:47:c9:95:
                    d1:4d:ec:7f:7b:c3:42:32:ed:e7:c3:13:2d:35:e2:
                    5b:43:63:f3:c7:d1:ea:3e:2f:80:85:65:9e:40:74:
                    dc:5d:71:f5:2f:55:ef:d3:9f:a9:ec:48:82:b6:b5:
                    a6:59:68:7d:98:40:3a:3f:e0:c1:35:20:15:a4:b1:
                    45:df:ec:10:82:e7:6b:eb:65:9a:00:fb:0c:01:4a:
                    91:b7:4b:3a:6f:06:e0:e4:56:2e:a5:ef:34:9e:5a:
                    29:89:b2:2d:a4:1e:d7:49:cc:40:d4:51:2f:31:ad:
                    6a:9c:ab:b3:e2:b1:44:b0:c8:9b:5d:18:c2:c0:ac:
                    d9:fe:81:c0:08:e5:e6:91:58:24:b4:c9:97:02:6c:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:7B:63:66:5D:EC:6B:B5:A9:E0:3A:E6:D8:47:47:3B:6B:A0:65
            X509v3 Authority Key Identifier:
                keyid:9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:55:cc:9d:29:80:7a:cc:4e:23:87:e1:69:ad:dd:1f:c8:78:
         a0:31:7b:dc:ba:8a:94:d4:d7:51:fd:36:5d:84:8e:f2:79:3e:
         a1:2b:cd:54:0c:0e:70:98:cc:e7:14:1b:1e:75:cf:ba:f1:72:
         b3:a7:90:d5:30:02:30:a7:d6:cd:75:bc:4e:86:dc:3f:ec:23:
         26:fa:4a:3f:0d:03:11:f1:f8:dd:e7:9f:f7:6b:80:22:3a:87:
         28:b0:09:02:a6:3b:35:57:fb:1f:2b:ad:d7:d5:ab:ee:b1:47:
         b8:9b:3a:4a:67:26:f7:a0:67:4e:26:aa:e3:4f:33:9d:66:a5:
         3c:eb:3c:55:05:db:22:fa:8e:11:78:85:a3:eb:f8:e3:30:4c:
         a5:a9:fb:fd:eb:6c:9a:68:1d:19:90:f6:39:b8:0c:28:de:b6:
         19:23:40:7d:c9:66:a2:55:65:14:2a:28:8b:b1:70:3c:fb:6e:
         dd:45:ef:ff:7f:26:46:0e:50:cd:97:aa:da:d4:a1:3f:eb:8e:
         12:ba:4f:dc:08:6a:84:2b:e4:24:d7:92:28:06:29:e9:ac:de:
         08:57:f7:05:83:c0:f6:08:4b:07:e6:91:d0:bf:96:48:0d:a6:
         a5:22:40:b3:6a:ca:14:20:7b:df:b8:6f:6c:aa:cf:5e:eb:5d:
         09:b0:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:48 2026 by rpki-client