Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          qtEP7Tu+zgpIoPJn4oHpcjoMp0W2QxpQFv7EksWPpPY=
Subject key identifier:   F7:DE:9E:17:DE:3B:B5:38:1D:D1:E1:76:C0:B8:89:BB:82:1F:0A:EC
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       019F4B79DAF8403753389CC68CC2172653A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0C1C
Signing time:             Fri 10 Jul 2026 10:01:44 +0000
Manifest this update:     Fri 10 Jul 2026 10:01:44 +0000
Manifest next update:     Sat 11 Jul 2026 10:01:44 +0000
Files and hashes:         1: 1-2UtBiTjHsLQddCqGP3gVri-xW0.roa (hash: DJE2DUvAsy++YyvCOr1N7VjrxiOrJBdKXmpjw8gEGfk=)
                          2: 3Syacw0kA1-ynTLjhAFHVC60Ux8.roa (hash: U3SW2ZOoHktaoXakRfEn1+6KwZhVhuD7PQXG5yVZEPA=)
                          3: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: 0tl7u/7Umq0P2WClKqoJgd4RR4a5vtCyfAMnwH+DQ9M=)
                          4: GnkphrOjuxTcnLnVByZAmcLPCW8.roa (hash: JM+qW4wdjiqLdb+xSRmHLF9aUafcLcAwlui6gPABGZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4b:79:da:f8:40:37:53:38:9c:c6:8c:c2:17:26:53:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Jul 10 10:01:44 2026 GMT
            Not After : Jul 11 10:01:44 2026 GMT
        Subject: CN=f7de9e17de3bb5381dd1e176c0b889bb821f0aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:40:c8:11:5d:38:5e:a2:ed:8d:fa:73:89:49:
                    8d:ad:97:b1:e0:5c:16:de:c4:8c:a3:1d:35:82:a1:
                    ed:af:f6:ea:e9:ab:09:40:1a:27:9f:28:02:90:3a:
                    e0:ff:4a:b7:6b:37:45:75:16:8a:e9:00:82:a2:14:
                    f9:eb:47:1c:49:36:60:bf:aa:78:c9:12:cb:c7:c1:
                    1d:6c:84:65:e8:06:bc:e5:1c:4d:01:aa:a5:a8:d4:
                    28:84:b9:b7:59:69:88:c5:59:b3:b7:cc:6a:0d:73:
                    c4:78:4b:7c:65:f0:0d:06:7a:21:99:46:6f:56:18:
                    3a:d8:b3:71:fc:22:68:3d:47:ec:e7:de:55:52:26:
                    dd:4c:33:09:d7:47:ae:d6:2b:0b:1d:83:76:84:00:
                    48:b4:ff:04:04:22:2b:6e:07:e0:06:61:6f:ee:e9:
                    43:2c:46:d3:9d:9e:1d:cd:7b:de:24:75:fa:54:c8:
                    61:81:ee:74:dd:a7:48:5f:60:00:33:00:95:db:b4:
                    d2:7b:53:3f:70:bb:15:8f:7f:1b:63:2d:3e:c5:19:
                    7f:02:da:c2:23:0c:56:76:c7:f2:30:7a:eb:11:cb:
                    72:02:da:35:16:c2:d9:f6:1f:4c:ce:9a:83:35:cc:
                    9e:e1:07:5a:a7:a7:da:e7:f4:55:89:0e:ed:43:9d:
                    99:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DE:9E:17:DE:3B:B5:38:1D:D1:E1:76:C0:B8:89:BB:82:1F:0A:EC
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:12:97:39:77:d7:c9:af:1c:26:6a:11:17:1a:a4:4e:56:
         48:6b:ef:5c:48:7b:4f:f0:bf:41:fc:c7:63:83:46:ad:75:32:
         fa:eb:15:ec:3b:cb:e7:d2:53:de:c3:cc:5f:9d:d2:67:5f:db:
         d3:bb:68:86:23:78:0a:9e:f5:df:fc:37:c7:95:75:8d:90:73:
         94:f6:03:e1:82:ec:49:a4:16:15:f3:af:42:9d:ec:03:e7:8b:
         f1:a0:40:54:87:fa:ba:78:12:e4:70:fb:f1:0c:91:19:55:1d:
         48:c0:9b:7e:00:65:03:ec:fe:a4:a1:c9:70:7a:d4:8b:b4:a7:
         7b:62:14:38:c8:d1:2e:3d:b3:b8:e6:c3:b9:58:2b:98:71:07:
         9a:56:62:f7:1b:7a:01:27:da:0a:15:a5:ca:70:65:a4:18:2c:
         f5:0b:88:29:d3:9f:b4:d8:4b:30:e9:c7:62:28:aa:7d:42:7f:
         06:80:83:2d:7b:f6:c0:ab:a6:04:ca:3f:74:43:c2:4f:f5:56:
         7b:18:7c:1a:56:c4:8a:61:fb:85:35:7f:ac:6f:b6:3f:fe:f4:
         50:74:fd:35:17:94:57:f4:56:98:3a:27:ae:43:57:02:0a:f2:
         95:73:01:c9:66:b2:6d:83:2d:56:c2:b4:12:4d:be:58:da:44:
         a2:87:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:39:10 2026 by rpki-client