Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
File:                     in2Cv6bL-YO5cDSUAb3veO1mgrg.mft (raw, json)
Hash identifier:          FDlL5tqOches6iAGzZ092I6sNaVIzjRfYBy9ATOJjDk=
Subject key identifier:   4C:6F:11:2C:84:DB:CF:80:56:C0:62:30:E5:1D:AC:7C:D4:64:24:3D
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Certificate issuer:       /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial:       019FA33C8F480B6C4CAADAADA2A68A32C8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
Manifest number:          14
Signing time:             Mon 27 Jul 2026 11:01:22 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:22 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:22 +0000
Files and hashes:         1: hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa (hash: zDEzbE4uwtCgoLiCH/chQKVEo68ut8ck0BWOTkrF+1g=)
                          2: in2Cv6bL-YO5cDSUAb3veO1mgrg.crl (hash: OiXt3hRQNdjws95CQ5n9P5Q5te3vhfXr3X0xoUtQ8wY=)
                          3: xS8E-QjHw2dzPf1KkLqn10hE7LM.roa (hash: 5/fVJMfp+DX4M6I9ZjhWtgFG3senFJ4L1a5dgOE8EkY=)
                          4: yeXW_YTNCb28ui0glUomJkKeHCk.asa (hash: vdoh5rReyHOdjiVdFljYmY00V/dpR9j9Pzzhrb2/aMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:8f:48:0b:6c:4c:aa:da:ad:a2:a6:8a:32:c8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
        Validity
            Not Before: Jul 27 11:01:22 2026 GMT
            Not After : Jul 28 11:01:22 2026 GMT
        Subject: CN=4c6f112c84dbcf8056c06230e51dac7cd464243d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:13:e6:c5:5b:86:dc:38:7c:98:53:a3:12:
                    45:62:17:0c:6e:96:32:0d:91:cf:26:69:a9:d4:13:
                    46:f7:7f:4a:39:47:da:00:4a:3a:7a:e3:2a:bc:fb:
                    e5:bc:a2:17:db:43:5d:c8:68:b3:f8:b0:42:90:f1:
                    33:71:5b:83:5e:03:f7:a0:30:49:0b:f8:47:6b:7e:
                    dd:12:65:fe:17:1f:f9:d5:16:36:7f:78:6f:36:db:
                    6c:b5:d1:fb:46:a2:25:57:f8:8e:69:68:85:6c:06:
                    e6:0f:b4:35:f7:50:75:f7:85:67:c1:0e:cf:74:99:
                    cc:c2:9a:79:63:eb:48:85:85:b7:b5:aa:ca:87:22:
                    4e:25:36:b0:2b:8a:f6:ad:d9:2e:a9:1f:07:8b:0f:
                    60:ce:94:c5:71:8c:f1:c3:da:7e:61:16:59:9c:e0:
                    a1:7e:35:9f:e1:b3:09:ab:43:81:00:97:e3:a0:5d:
                    66:09:70:de:e4:1a:eb:22:65:27:fc:d8:45:22:e7:
                    0b:86:a8:93:a1:a6:a6:38:f4:49:75:82:82:08:4e:
                    1c:82:c8:7f:ac:ef:2d:c3:11:59:9c:3d:25:f9:bf:
                    20:f9:f6:bb:be:e9:91:ef:7a:38:d5:0e:5c:d2:9f:
                    c1:78:27:da:39:52:20:f9:cb:8a:1f:ac:d1:88:9c:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6F:11:2C:84:DB:CF:80:56:C0:62:30:E5:1D:AC:7C:D4:64:24:3D
            X509v3 Authority Key Identifier:
                keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:92:de:ea:21:98:1e:ea:b6:30:b4:82:7e:e5:d8:95:db:2b:
         2e:f3:3f:03:13:9a:03:78:0b:d7:3c:d8:ce:6a:3a:b2:c2:31:
         fb:13:1b:c1:7f:87:e3:90:c8:e7:79:f3:4b:67:79:03:00:9e:
         e3:f5:fd:3e:f3:1b:c2:31:c0:33:7a:5a:d1:ed:ef:44:fd:fd:
         d3:8a:f3:06:df:c8:01:14:8a:25:36:03:69:98:07:02:8e:1f:
         71:9d:b1:c9:db:9b:41:6e:fe:20:e9:00:f7:1e:45:38:f4:8f:
         a5:25:78:ef:93:d2:15:02:63:58:6f:e6:d1:4d:4b:82:3a:68:
         13:49:0e:16:e6:bf:36:67:eb:33:6d:c6:23:e8:0f:84:66:e2:
         f3:c6:56:b7:ea:7f:aa:b7:e3:c4:71:19:a8:de:89:6a:1d:09:
         ff:e3:6f:ce:b1:2d:41:44:8c:ca:33:8d:ff:44:16:4e:ac:bc:
         47:b3:ae:83:e7:1c:7b:b6:12:ee:91:24:56:01:67:1f:c9:b5:
         12:1b:ba:60:bc:47:f5:6d:1f:eb:25:3e:14:33:bd:e4:81:5e:
         a0:f5:6f:f5:a2:0d:25:96:ef:fb:ea:08:15:4d:1c:11:92:ed:
         6a:10:7b:d5:71:d8:47:98:8a:1c:6b:8a:6a:db:9a:9a:05:67:
         6f:6d:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:14:20 2026 by rpki-client