Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          9PBzvnQzCbADUeHTd/2ehC6V9karzeaKLR0bb76a7lk=
Subject key identifier:   FD:C6:E5:49:D2:67:EA:0A:73:11:77:82:48:8A:0F:2F:93:6D:BE:CD
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019EFF831A63BE66E7FD94BD33A8623D8DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          19A7
Signing time:             Thu 25 Jun 2026 16:00:42 +0000
Manifest this update:     Thu 25 Jun 2026 16:00:42 +0000
Manifest next update:     Fri 26 Jun 2026 16:00:42 +0000
Files and hashes:         1: 8Tje-qV6QLUefgoToblFnjxFOug.roa (hash: RaGHLexPAGlKd+1GFvQT68V+7VmWYOnxyCrKQ89UTuM=)
                          2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          3: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: ns3hLcxZTc13pCbmssSl/dPnaAOGuKaL5N7Ni2aZ3rY=)
                          4: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          5: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          6: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          7: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ff:83:1a:63:be:66:e7:fd:94:bd:33:a8:62:3d:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Jun 25 16:00:42 2026 GMT
            Not After : Jun 26 16:00:42 2026 GMT
        Subject: CN=fdc6e549d267ea0a73117782488a0f2f936dbecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:f5:80:9e:f9:44:90:4b:f0:74:fe:cc:f8:
                    00:0f:b9:03:fb:24:9a:0e:d8:9f:eb:b1:49:0d:f0:
                    46:c6:55:fc:f7:af:3c:e0:ad:f1:57:e4:6d:b6:c3:
                    7a:e9:72:9e:ec:02:c7:80:79:b0:d3:74:d0:0f:3b:
                    25:f1:63:b3:06:37:dc:7b:05:97:87:0b:63:43:15:
                    b2:a8:fa:9d:6a:73:af:93:0f:92:04:3e:49:55:cd:
                    f9:b8:3c:b3:71:ee:bc:b6:c6:78:47:9e:fa:da:b3:
                    48:b9:dd:50:55:e1:0d:42:fb:a8:fc:67:3f:c2:ca:
                    a0:8a:dd:05:d5:75:65:2d:e2:dc:95:25:13:bc:18:
                    8c:d6:73:28:1e:fe:65:c0:b8:98:b1:44:99:16:c4:
                    95:9a:60:42:6a:40:c0:47:31:18:55:56:44:b4:3d:
                    89:b9:9c:ef:98:ce:47:6e:4d:16:94:9e:95:45:e9:
                    a6:a1:2c:c9:7c:b6:91:4c:4b:7d:13:3d:41:de:b2:
                    6f:4c:07:c5:bc:8a:e4:71:db:5a:b0:b7:e5:07:f8:
                    0d:8a:cd:51:ac:2b:d4:95:f0:62:4d:62:a2:69:cd:
                    d4:d6:66:0c:1e:c2:38:b7:d4:59:0f:6c:64:5b:1e:
                    03:6e:1e:69:de:11:ba:e0:be:36:5d:2b:d7:fd:60:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C6:E5:49:D2:67:EA:0A:73:11:77:82:48:8A:0F:2F:93:6D:BE:CD
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:34:09:0a:cc:88:79:10:e2:85:54:9e:0b:b2:68:18:18:
         f0:25:9b:98:b8:7b:ff:5c:9d:19:70:0f:e5:6c:43:5a:15:58:
         ca:45:5d:c2:2f:b7:71:07:9a:ca:6c:e8:cf:94:10:ee:5a:86:
         ab:df:b6:c3:52:f5:3f:7a:d0:30:6e:47:15:db:35:dd:2e:42:
         a1:17:45:b3:c6:7d:ec:49:50:11:83:06:c8:d8:96:7d:fb:57:
         5c:be:19:58:61:53:b6:33:36:09:13:f9:81:89:72:95:f5:9c:
         27:99:a7:cd:bc:6d:33:91:53:ec:df:10:8f:fd:3f:5f:22:6f:
         ca:f6:8a:73:05:f8:70:87:d0:fe:0c:f7:3b:f3:93:4a:f9:e6:
         b0:fa:8a:9a:bb:a0:50:d7:85:09:4c:78:a7:fa:09:0b:40:ec:
         a5:92:fa:2e:c5:93:4b:f2:c6:31:10:a3:43:8d:e6:17:38:bc:
         9a:a3:cd:ff:a0:d8:81:77:8e:25:06:8b:c2:8e:10:92:cd:74:
         a0:8a:dd:87:8b:25:7d:df:89:d4:25:2d:aa:19:8e:b6:f4:9c:
         ff:87:d8:f4:d5:24:e1:b0:e6:ee:06:db:46:28:98:b3:9a:ce:
         5e:4f:bc:2c:5d:f3:2a:dc:40:90:46:70:20:1e:a8:a0:a8:c6:
         66:20:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 21:49:19 2026 by rpki-client