Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File:                     y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier:          f6i6OCfE12HUGyLh0e9R1WQkteHLXzo/SkjOy7WrSKY=
Subject key identifier:   65:E7:8E:0A:D9:17:A4:96:F4:54:8D:ED:80:96:33:7B:33:FB:8F:60
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer:       /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial:       019FA072615A88D993C59A5107293AEED20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number:          14FA
Signing time:             Sun 26 Jul 2026 22:01:18 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:18 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:18 +0000
Files and hashes:         1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
                          2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
                          3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
                          4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: jGY59M3t1gG+4BuuZJ4RJRSJmrqOyToWiqlYpSfwruA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:61:5a:88:d9:93:c5:9a:51:07:29:3a:ee:d2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
        Validity
            Not Before: Jul 26 22:01:18 2026 GMT
            Not After : Jul 27 22:01:18 2026 GMT
        Subject: CN=65e78e0ad917a496f4548ded8096337b33fb8f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:dd:1a:44:cf:10:e9:0b:9e:90:83:11:38:
                    60:b8:cf:af:16:fc:5c:c6:7e:42:85:91:f3:12:eb:
                    46:a8:d1:38:2a:ea:f7:6d:36:0e:d8:6e:d9:9a:68:
                    d8:39:ba:ff:e5:d0:4f:71:7b:93:5f:7d:00:43:a5:
                    e8:fe:f2:a5:81:06:95:2f:9d:54:90:6a:5c:2d:31:
                    51:b5:da:5c:c3:dd:6e:00:dc:ad:c8:c6:2b:f0:7a:
                    ca:21:e9:70:b5:b9:78:a9:9f:84:1d:ad:d0:30:84:
                    87:fd:c8:d3:cc:59:53:8a:86:3d:6c:c6:39:c7:ec:
                    ab:ac:4a:b1:f9:56:77:2c:92:8b:33:cb:36:a2:28:
                    35:aa:12:7d:39:12:1b:4a:a9:1a:44:7c:c7:9e:b4:
                    9b:02:c8:30:b6:c7:4f:e0:e3:a5:18:3d:6a:f5:46:
                    5b:42:99:bb:85:4d:31:e1:8a:48:a3:2e:c8:6a:3a:
                    b2:d5:73:4f:f3:7b:bd:03:03:6c:f2:db:31:20:db:
                    39:ef:64:74:fc:da:6a:d3:13:b3:7b:64:87:42:38:
                    d7:4b:27:fe:96:52:85:80:ac:8c:ce:15:19:9e:63:
                    31:3f:93:93:5f:ac:29:81:b3:53:8c:e3:07:ff:b9:
                    7c:52:cc:39:06:14:60:c9:65:bf:0f:76:24:2d:47:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E7:8E:0A:D9:17:A4:96:F4:54:8D:ED:80:96:33:7B:33:FB:8F:60
            X509v3 Authority Key Identifier:
                keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bf:de:7b:94:43:12:33:01:a0:b9:65:01:7d:da:f8:c7:21:
         20:dc:c5:b7:9f:eb:90:c7:54:e3:0c:12:54:41:00:7b:45:b3:
         ae:df:49:9c:0c:b7:b5:2c:bb:6f:82:f8:e2:e3:66:bc:8f:23:
         65:25:3c:9e:47:1a:9c:50:8a:78:bb:21:33:44:13:74:9d:8d:
         74:e4:94:18:4c:84:c0:c8:70:76:33:e6:a8:8e:e1:23:0d:55:
         8f:19:68:14:7a:41:b0:de:66:a3:6f:4a:60:02:e2:3b:d8:34:
         a0:f8:88:2c:c4:59:e8:3c:4a:ea:16:e8:f1:2c:4e:e5:2d:21:
         ac:00:05:7a:d4:8d:b8:71:5d:cd:a5:50:bb:06:be:30:ab:f5:
         5f:f0:59:ab:36:a2:b6:59:7b:db:88:fc:1e:b4:8c:3b:90:40:
         f7:ae:c5:5f:90:ba:33:9d:7c:cb:ff:31:d2:08:62:dc:19:ed:
         7b:2c:07:e9:e5:73:03:be:51:70:be:69:52:15:d6:8b:72:ad:
         30:a7:e8:55:4b:97:8c:86:20:e9:38:f1:b2:39:9a:44:6a:57:
         29:59:16:c2:d3:06:52:6b:ba:f7:1b:2f:cd:da:98:2e:5b:54:
         41:b4:78:e5:71:f2:4a:7a:0f:1f:57:7c:13:65:0e:72:6b:5e:
         a9:9b:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:18:55 2026 by rpki-client