Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File:                     S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier:          Hb+Ftdm/jI4Iv5SydEDknu77LlOSfs5Pt5jkEIL9uJY=
Subject key identifier:   9F:77:C2:64:8B:F2:FE:93:0A:C6:81:12:3F:4E:E3:86:79:99:22:77
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer:       /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial:       019FA071873E0FF3418FB40866EE061E0950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number:          0594
Signing time:             Sun 26 Jul 2026 22:00:22 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:22 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:22 +0000
Files and hashes:         1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
                          2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: m2s+ogyJ/caJSAYw+PKnuUaRA3YQFOCMxL4aYIAiJx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:87:3e:0f:f3:41:8f:b4:08:66:ee:06:1e:09:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
        Validity
            Not Before: Jul 26 22:00:22 2026 GMT
            Not After : Jul 27 22:00:22 2026 GMT
        Subject: CN=9f77c2648bf2fe930ac681123f4ee38679992277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:eb:fe:20:92:4b:2b:b7:7f:a1:36:ba:4a:
                    1d:fa:7f:c2:27:c5:43:b0:14:7a:81:52:e9:4f:f0:
                    70:2e:c0:35:63:24:7b:c0:6c:4a:00:67:ae:19:f7:
                    5e:b3:8f:26:85:35:86:02:05:7b:8d:43:38:9c:29:
                    7d:1b:62:e0:7b:7a:31:5d:47:7c:87:23:c2:b7:7c:
                    c8:63:8f:52:58:f5:07:48:67:14:d7:13:02:88:ca:
                    e1:24:1e:14:9e:0b:9c:73:7b:b6:4b:e5:64:b4:dc:
                    ac:5f:f0:86:42:c7:68:62:ed:e1:d4:38:70:53:c0:
                    c7:8e:57:5d:6b:96:1e:0c:24:8f:45:3a:5b:a8:ed:
                    72:c8:aa:de:06:66:3d:9a:1b:fc:db:93:20:06:38:
                    b5:c3:e0:38:fb:cb:d4:a1:17:31:5e:c9:74:11:a3:
                    97:29:09:1d:f4:68:c0:d9:53:33:9b:c8:9d:0a:00:
                    d6:7b:e1:b6:39:3e:1b:c5:32:3e:f7:cc:7c:29:01:
                    48:79:39:c7:30:af:9d:a0:04:d8:61:ca:bc:f5:57:
                    ee:83:b0:3f:09:16:56:ed:50:af:ce:60:7c:d6:1a:
                    d4:61:61:d5:a4:05:c0:f6:fa:8d:31:51:14:9c:3a:
                    09:30:8e:6a:55:d2:3a:26:7e:f0:90:90:18:73:f3:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:C2:64:8B:F2:FE:93:0A:C6:81:12:3F:4E:E3:86:79:99:22:77
            X509v3 Authority Key Identifier:
                keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:1c:48:e2:91:48:e5:e9:81:7a:5c:ea:aa:69:a2:07:f4:
         a7:dc:bf:ef:73:21:55:3b:10:e8:a3:4a:3d:0a:aa:31:7c:8c:
         17:e8:94:6d:22:fd:52:81:5b:5c:54:2e:7a:92:68:e6:c3:7c:
         ec:2e:d5:ee:44:b3:4b:84:18:80:46:33:41:63:ed:ef:6b:30:
         58:6d:1d:a7:85:15:fe:3f:9a:db:ff:eb:e4:79:ab:dd:04:92:
         ff:0b:7b:8d:da:0b:34:fc:54:36:9a:10:a3:0b:54:b0:97:18:
         45:45:ed:18:52:64:f2:47:fa:8a:10:25:7e:19:73:1b:e9:73:
         be:05:9f:d7:5e:95:3f:57:ea:0b:29:30:26:38:37:12:27:68:
         92:e3:8b:90:26:64:b6:72:72:92:ee:d5:ff:7a:03:91:58:53:
         c2:d6:fe:dd:88:0e:ff:3a:ca:8c:52:69:61:72:b7:5f:ec:d5:
         a3:db:d7:3b:96:45:87:05:b3:92:81:9d:b9:62:7c:03:fa:0e:
         9a:f5:99:41:d3:1e:19:15:e1:85:bb:e9:c0:dc:95:28:56:fb:
         eb:38:6c:93:52:82:26:13:80:7f:3e:bd:0e:07:bd:e1:94:e3:
         20:79:b0:3c:16:6b:1d:c6:21:c7:77:5d:4b:e5:e4:77:09:0b:
         58:64:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:06:41 2026 by rpki-client