Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File:                     SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier:          eoRios2GOua4DTnvkwbrX/JrCIvk8aY1qGX1cdlPFkM=
Subject key identifier:   AD:B3:75:DE:0F:FB:D1:25:50:76:8D:60:E8:91:10:73:78:34:42:E6
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer:       /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial:       019F9FCD678CD58E12FED72574AE3DF705AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number:          1381
Signing time:             Sun 26 Jul 2026 19:01:06 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:06 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:06 +0000
Files and hashes:         1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
                          2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: pLCaq6gqEXiij74M5M3V9LZ3clgrESJgx0TSTXybZ80=)
                          3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:67:8c:d5:8e:12:fe:d7:25:74:ae:3d:f7:05:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
        Validity
            Not Before: Jul 26 19:01:06 2026 GMT
            Not After : Jul 27 19:01:06 2026 GMT
        Subject: CN=adb375de0ffbd12550768d60e8911073783442e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:05:78:ea:7e:e8:8f:f3:f2:82:52:2e:01:
                    37:e7:7d:14:33:8c:c3:b2:87:84:0d:12:2e:05:7c:
                    da:26:31:6d:80:db:e4:bd:24:49:52:eb:90:04:a2:
                    6e:4f:fd:34:dd:ab:9e:cd:74:4a:48:17:a4:40:4c:
                    02:29:44:78:bf:f0:d1:20:4e:16:b3:1e:76:22:67:
                    d1:3b:56:5b:76:79:6e:7c:5c:1d:99:96:2b:c7:74:
                    c7:14:b0:73:86:ca:52:5e:25:34:4a:d4:8e:ab:2a:
                    ce:bd:50:72:92:8e:f9:01:94:b6:f3:16:2d:21:fa:
                    a2:4b:a5:29:d5:2b:c6:38:96:9f:6a:d7:f0:1a:87:
                    4f:a6:7b:59:fe:bd:42:0a:8a:31:9d:3d:06:47:96:
                    d7:62:e9:15:d6:62:25:86:0d:42:14:c3:3d:21:a0:
                    65:a7:1e:78:67:d8:cb:f2:71:a2:f5:4c:47:38:c9:
                    ed:30:82:a6:93:83:06:0d:84:88:8b:89:36:31:bf:
                    99:85:27:00:ad:3f:d1:fb:4e:93:cd:c7:cb:f1:83:
                    41:f8:61:36:25:09:fc:01:37:e9:21:13:57:21:59:
                    11:c1:a3:e2:be:98:50:c3:d7:c5:26:c5:b3:f2:87:
                    5a:fe:a9:ce:1a:40:c8:ca:64:11:9e:9f:85:53:e0:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:75:DE:0F:FB:D1:25:50:76:8D:60:E8:91:10:73:78:34:42:E6
            X509v3 Authority Key Identifier:
                keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cf:2a:41:6c:a1:34:fe:ea:f0:4b:79:b7:24:31:bb:9e:b2:
         5d:b5:7a:95:1f:78:e5:5c:42:af:af:22:42:96:f7:25:01:d9:
         83:96:f9:24:a4:ae:12:0a:8a:83:ea:0e:ba:99:ad:98:be:79:
         10:48:b8:0c:77:2d:a8:d8:01:d4:83:5a:b7:78:7f:95:a1:4c:
         40:b4:d8:c8:eb:f5:c3:e6:17:17:4d:50:9d:ee:2e:1f:49:60:
         ee:91:61:67:d1:d7:88:08:48:1b:9d:85:ad:1c:26:72:b5:e4:
         96:78:0d:3b:70:98:a1:51:c2:8f:ce:dd:ab:84:20:38:ea:39:
         89:ed:58:d8:1e:c1:82:79:f1:f4:37:49:72:86:9e:79:ce:6c:
         05:72:1d:ed:fc:4a:a3:83:9e:f0:63:d7:80:4a:d3:27:00:da:
         68:4d:cb:a3:07:7b:e2:41:49:cc:d2:7e:fd:a3:4e:16:3c:00:
         50:d8:a7:1c:08:0b:c8:bc:e2:cf:4d:00:bf:fa:8f:e6:0d:f9:
         70:77:5f:a9:6a:e2:9c:3b:fb:f9:d9:48:07:4b:10:85:69:49:
         b4:79:c3:a6:12:d5:9b:6c:aa:75:8e:ff:e5:06:a2:47:13:23:
         4b:5e:9c:27:8d:ea:da:37:cc:42:85:9c:c3:97:c4:1c:7f:11:
         fc:8e:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:20 2026 by rpki-client