Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File:                     RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier:          F4PVMNia3vX0ODvn8eM4pB5+xv5kS0tWOZddzuUert0=
Subject key identifier:   0B:81:70:AD:1F:9D:14:4F:6F:74:D7:A0:8D:79:F6:50:31:21:BC:33
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       019FA37329CCF4717BC0D92E969309AC2DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number:          1928
Signing time:             Mon 27 Jul 2026 12:01:01 +0000
Manifest this update:     Mon 27 Jul 2026 12:01:01 +0000
Manifest next update:     Tue 28 Jul 2026 12:01:01 +0000
Files and hashes:         1: 0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa (hash: 2zRsav5IEfSlzcwSQLfdTFA0TTacyX5/9RQCzwFOfMo=)
                          2: 0qaV7J9RK3kRvbrwOrLwGL-59is.roa (hash: UvPJ59WZ0VSeeSOBjE40xguTq+GAWfJ5QMJ5cMTtGWE=)
                          3: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: BrUaupb4c0rn8bV4m+9AK9jfxLLt7Hq8I3bdv1lE+9Y=)
                          4: YjNMtDRzs2TGP5-x14XVzmAfxFs.roa (hash: FsTc0fpESg1ct7d6odO1YuCSb5A2XaTydzLOePR872I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:73:29:cc:f4:71:7b:c0:d9:2e:96:93:09:ac:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Jul 27 12:01:01 2026 GMT
            Not After : Jul 28 12:01:01 2026 GMT
        Subject: CN=0b8170ad1f9d144f6f74d7a08d79f6503121bc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:dc:90:af:ad:6f:85:6e:93:f2:2f:5b:f2:
                    2b:f9:a9:31:36:b5:31:8f:a6:61:0a:c3:c9:ef:9e:
                    94:4f:c5:b7:8a:7a:8a:4b:a7:a7:56:b3:d8:48:65:
                    6e:10:0d:19:0d:7c:6f:80:63:a1:53:0e:ad:d1:3d:
                    bb:29:25:0f:1f:f3:7b:12:0a:4c:b3:61:85:a0:f0:
                    05:bc:b1:dd:70:ec:55:f3:8a:34:b2:e5:5b:f1:17:
                    d4:69:03:d4:cf:ea:b8:43:da:9c:73:b6:93:06:00:
                    44:93:40:c7:98:d8:1d:33:c4:51:65:1c:9d:6c:c0:
                    2c:75:49:0c:3a:80:bf:1d:1b:bb:35:8c:ab:db:bd:
                    aa:c9:13:37:34:56:06:64:3b:a8:6b:1e:f7:b5:e4:
                    16:6e:5a:bf:60:d0:e6:9c:34:13:a7:28:f6:14:13:
                    7a:31:e6:0a:6b:92:53:37:0a:c2:4c:a5:35:20:7b:
                    40:e9:c0:9d:a3:cb:83:d3:91:5d:45:fc:4f:2c:30:
                    6b:18:bb:8e:dc:27:9e:43:83:6d:eb:06:1f:cf:8c:
                    5f:fd:bb:c8:76:e2:4a:53:3a:6f:99:9b:93:bd:0d:
                    1d:ad:fe:35:0d:0f:d0:51:f5:c4:ac:45:98:74:99:
                    a3:17:65:8a:56:a7:b9:c9:19:d7:ee:31:c4:c8:52:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:70:AD:1F:9D:14:4F:6F:74:D7:A0:8D:79:F6:50:31:21:BC:33
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:9b:fc:df:09:a8:57:c8:c3:30:10:69:da:09:a9:72:7a:
         a7:a1:c2:2d:45:52:d9:ac:e2:31:2f:23:96:56:c5:b8:4e:6d:
         60:c7:d3:2a:d1:b8:29:d3:87:ed:c8:53:71:3a:80:98:80:7e:
         b2:8f:ac:b8:d2:69:6f:bc:9a:25:97:60:60:17:16:59:fa:8b:
         f9:d5:2e:f7:57:a5:f2:15:9c:02:36:69:45:92:30:94:8d:d7:
         90:28:75:4b:99:2a:68:6e:93:ad:f2:6b:21:5e:88:8b:20:b7:
         d4:49:67:6a:7e:cf:d1:5d:87:29:d5:68:5f:e2:19:f1:10:42:
         d1:84:fe:91:8b:47:51:d7:fc:8d:fc:71:03:50:02:96:83:0b:
         bc:a5:6c:84:18:20:10:59:ec:ee:a7:8d:3a:78:99:2e:26:db:
         93:2d:07:67:ed:fa:a1:01:34:1d:8d:84:cc:4e:96:a1:19:54:
         89:2f:01:9f:c0:2f:94:07:34:e5:52:4c:be:05:0e:54:18:90:
         2f:24:bc:cd:35:47:46:ce:e0:42:f7:43:94:71:6d:0d:a7:5e:
         f1:f0:dd:b9:de:ee:89:4e:87:c9:e7:0a:d3:5f:f4:b3:15:4b:
         dc:d3:4e:8e:3c:3f:eb:58:6f:2b:da:4a:48:34:af:a2:7b:0e:
         04:75:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:47:11 2026 by rpki-client