Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File:                     RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier:          BZnSOhVshAyBALTVJlq3QcfE1MAZymkJ+Hc+r7kk2D4=
Subject key identifier:   FD:DD:34:46:9A:88:60:79:C5:EA:F2:E8:CF:C4:15:74:8F:37:1E:9B
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer:       /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial:       019F3B2A8971FC33F51A0E5A64DEEEAC2AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number:          07F2
Signing time:             Tue 07 Jul 2026 06:01:11 +0000
Manifest this update:     Tue 07 Jul 2026 06:01:11 +0000
Manifest next update:     Wed 08 Jul 2026 06:01:11 +0000
Files and hashes:         1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
                          2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: oWSYgKk6KmTy54/E/JEHmKcFofB6guGhH2aECWGxnEY=)
                          3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:2a:89:71:fc:33:f5:1a:0e:5a:64:de:ee:ac:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
        Validity
            Not Before: Jul  7 06:01:11 2026 GMT
            Not After : Jul  8 06:01:11 2026 GMT
        Subject: CN=fddd34469a886079c5eaf2e8cfc415748f371e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:c6:1f:1e:27:c5:cb:86:6b:e8:a0:86:44:
                    e8:62:3f:d5:24:e2:ea:0e:a3:03:28:5e:b7:0f:d2:
                    29:17:30:ec:dd:ae:9f:21:fe:df:3b:33:c0:a8:17:
                    0b:60:e2:03:f9:62:e2:61:51:75:8f:dd:74:11:12:
                    e3:c0:7a:20:8a:59:20:06:0f:28:d6:f3:e1:fc:c9:
                    a0:31:f2:85:ea:b4:2e:58:45:9c:11:81:f7:71:25:
                    8a:18:34:f5:c6:26:87:b9:46:cd:b4:77:be:89:26:
                    4a:9a:f1:35:71:7a:a9:60:02:d3:65:b5:50:3a:49:
                    07:96:35:81:d0:f8:9d:81:2f:85:fc:ec:0b:e8:fa:
                    28:03:28:ed:07:c2:18:a6:fa:7a:68:5f:bd:35:1b:
                    11:be:84:21:51:44:90:51:32:2e:a0:7d:84:45:6d:
                    51:2e:fa:b5:c5:60:38:0a:0c:bf:c3:29:c4:c6:21:
                    60:06:fb:e7:2d:f0:f4:95:3f:50:cf:c5:60:5e:e8:
                    f0:43:66:21:a0:ac:50:cd:0a:8a:14:e6:b8:29:2e:
                    07:85:a4:a3:33:44:7b:0c:b2:3a:8e:28:47:81:a9:
                    35:ba:31:16:96:0a:46:71:ab:e8:22:d0:7b:c9:29:
                    4c:9a:f9:e3:92:ad:09:43:bd:93:1f:8b:18:f0:6c:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:34:46:9A:88:60:79:C5:EA:F2:E8:CF:C4:15:74:8F:37:1E:9B
            X509v3 Authority Key Identifier:
                keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:27:50:54:d1:1a:1f:af:5a:ee:c2:a3:c2:58:f4:0c:d2:
         a5:a0:c8:80:97:8c:05:08:a1:59:ff:6c:01:6e:d3:8d:62:5a:
         55:63:fd:f6:79:c4:10:33:20:90:64:0d:35:8f:b1:ba:b8:df:
         9e:6c:b5:52:02:45:c6:7c:12:1d:40:9f:8b:0b:86:37:22:fe:
         92:d0:26:df:3a:e3:ff:41:a1:6f:c1:a6:72:ca:e2:fa:83:17:
         2c:c1:44:ac:43:91:f8:94:b6:33:51:c4:a0:ed:9c:6f:2f:da:
         a3:04:56:6d:e0:de:f7:fb:fb:c0:40:c0:d2:82:4d:ea:15:f0:
         46:4c:94:2f:47:2c:fd:a7:77:e0:c9:2d:63:dc:5f:71:ac:5a:
         0d:93:78:c4:9d:c1:3c:77:fd:7f:9b:78:73:45:f5:06:80:61:
         5d:95:1b:f2:87:2a:30:0a:0d:a1:55:00:02:c4:e9:33:8d:9b:
         93:3a:41:a2:9d:c5:40:d6:31:f5:50:37:f5:4f:9b:b0:75:c1:
         48:d4:42:22:d2:f6:44:4f:98:19:78:fa:a0:25:8c:19:94:2b:
         35:19:97:7f:10:78:15:09:3b:87:94:1c:45:bd:4e:12:dd:cc:
         fb:55:a7:18:df:40:39:a3:e1:e0:14:6f:05:56:c1:ee:b0:86:
         df:e3:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:47:34 2026 by rpki-client