Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File:                     234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier:          af2fP/GZM5dVxN68v69x23jaBCQzZGTdhzR7BcL4wfI=
Subject key identifier:   BC:74:F8:66:CE:59:35:23:C2:57:C4:6D:9C:30:86:98:E8:BE:A5:4A
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer:       /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial:       019FA116490D75AAB499D210D25CFC7BD49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number:          0730
Signing time:             Mon 27 Jul 2026 01:00:20 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:20 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:20 +0000
Files and hashes:         1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: Je3J7JZIv99+VAGvW2sUyrM96RAJM3dLRWNTEMRfRvs=)
                          2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
                          3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:49:0d:75:aa:b4:99:d2:10:d2:5c:fc:7b:d4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
        Validity
            Not Before: Jul 27 01:00:20 2026 GMT
            Not After : Jul 28 01:00:20 2026 GMT
        Subject: CN=bc74f866ce593523c257c46d9c308698e8bea54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:14:7a:43:35:a7:1c:0f:b5:95:06:6f:25:
                    f8:51:b6:fd:0e:8b:08:27:5a:0c:f3:b2:ed:94:90:
                    68:19:42:cb:af:7b:3f:3a:b9:ed:29:c7:13:1a:54:
                    7d:79:0b:f0:17:1d:e0:0e:c7:57:8f:a1:db:d5:94:
                    f8:7d:f7:74:b1:4e:57:5d:f2:9f:34:a0:a0:cb:63:
                    fd:58:56:bf:b5:c6:c6:13:96:d8:46:c2:8d:c2:72:
                    1b:5c:7e:a9:9f:76:c8:63:2f:b2:da:e8:a6:ca:86:
                    8e:31:5f:44:8a:20:a0:a4:81:cb:1c:6b:c5:ce:c1:
                    18:23:ec:0b:bd:64:da:58:b8:2e:c1:1c:9a:7c:56:
                    08:9b:62:d0:d4:72:a9:59:5f:1f:e7:6e:ef:fb:be:
                    95:ed:db:6f:c2:a9:06:ab:06:48:fd:84:d5:14:dd:
                    97:09:4e:76:1c:51:6c:9d:88:02:b0:08:35:13:b0:
                    01:18:af:7c:d3:64:39:54:e3:b8:f8:1d:50:a7:7a:
                    f0:e4:be:c1:49:4a:4c:b0:46:6c:4d:b5:85:4b:a3:
                    5b:b1:71:92:6c:51:9a:a8:cd:10:72:ba:3e:55:08:
                    c4:c6:75:26:23:74:39:65:e0:e0:98:42:03:f9:7f:
                    b3:ae:d2:be:df:b3:bb:5e:36:18:06:48:fc:e9:3e:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:F8:66:CE:59:35:23:C2:57:C4:6D:9C:30:86:98:E8:BE:A5:4A
            X509v3 Authority Key Identifier:
                keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f3:72:99:ba:b6:e2:6f:e8:eb:30:08:85:91:0f:26:5e:d1:
         e8:30:a5:63:b2:15:1c:a9:a4:a7:d4:5c:f7:7b:a3:84:7c:85:
         c8:59:9d:3a:d6:07:33:97:af:04:e8:c3:9a:1b:e8:dd:3e:cf:
         01:63:35:9b:25:dc:77:6c:22:9c:81:73:3e:1e:69:1e:5e:6e:
         de:07:1f:f5:b5:c4:38:29:30:9d:fd:18:2f:c7:eb:8f:92:7d:
         c5:f8:f7:81:be:8c:9f:7c:b4:b6:22:ad:ed:a1:d8:a1:c2:13:
         b8:f8:20:ab:96:d8:ce:cf:ec:a0:0b:c5:49:fa:7e:2d:af:f9:
         41:a2:c8:ff:f9:e7:0c:f6:1b:23:b4:f9:56:47:56:1e:a2:22:
         2f:9b:69:c8:34:9c:1a:eb:6a:a7:56:72:c6:a7:57:ed:76:f5:
         ef:27:76:35:38:4d:cb:66:2d:80:43:fc:6c:a8:85:7a:b8:79:
         31:1a:c2:bd:25:77:45:ad:c6:66:6d:aa:83:6f:ad:66:b8:fc:
         47:03:4c:ce:f0:18:7e:53:48:a7:61:25:0c:8b:ef:4f:50:29:
         02:a5:2e:55:f1:4f:44:77:5d:04:7f:9a:34:17:96:b5:19:5f:
         1d:6a:61:7f:1e:5a:9b:8f:ef:6c:88:51:ba:70:38:d6:eb:57:
         92:50:9f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:51 2026 by rpki-client