Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          HvndrUvXFGSIlAbHYKSMBys8uFK8uEcf+e1jeqma2IU=
Subject key identifier:   35:8E:32:80:C9:48:DB:31:36:1B:90:CC:2C:02:86:DC:3E:CE:14:15
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       019F87FC1CD1EE122CE5505351AEADF0157C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          0685
Signing time:             Wed 22 Jul 2026 04:01:14 +0000
Manifest this update:     Wed 22 Jul 2026 04:01:14 +0000
Manifest next update:     Thu 23 Jul 2026 04:01:14 +0000
Files and hashes:         1: BcjvqCw20vlSUqkMcH2OIN19k7g.roa (hash: LwtF+uCxprVmgkkr+DnqU8Ri3wrgLRvmUXhKTVeiNnA=)
                          2: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          3: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (hash: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI=)
                          4: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: Uh8q9d07en+CCbq5npgpUdnlW8UTmiHdegCja2A/Utc=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:87:fc:1c:d1:ee:12:2c:e5:50:53:51:ae:ad:f0:15:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Jul 22 04:01:14 2026 GMT
            Not After : Jul 23 04:01:14 2026 GMT
        Subject: CN=358e3280c948db31361b90cc2c0286dc3ece1415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:dd:60:3c:00:9d:4e:ba:e5:3e:9a:fd:8a:
                    97:0a:7d:64:30:98:6a:c0:12:57:8b:81:55:72:d3:
                    54:76:62:25:bf:f9:72:0a:5c:85:69:ee:22:14:ff:
                    b8:d6:e2:59:5b:7d:fb:e5:8e:d2:21:6e:76:0e:d2:
                    d0:5f:fe:b9:d1:2f:c6:17:03:d3:99:49:5f:81:15:
                    00:62:dc:ca:c6:05:ea:5a:c3:76:e2:70:3e:b0:fc:
                    41:fa:be:08:fa:e2:54:68:18:9e:e7:f6:30:b8:80:
                    4c:bd:cb:1f:fb:9d:1a:eb:49:e8:8c:3b:aa:4e:45:
                    e6:44:e8:b6:6e:3e:8c:2b:dd:5f:57:2b:ec:72:13:
                    5d:9a:77:a5:3d:4b:f1:4b:df:45:3c:f5:6b:83:5d:
                    ae:ed:94:c2:f3:2d:53:8b:27:9e:c9:3c:98:70:3f:
                    f0:65:08:c0:12:da:2a:aa:cf:df:57:8d:98:0b:41:
                    d8:cc:72:ab:33:f2:62:a4:01:c3:a8:8f:70:98:64:
                    a7:4e:55:9a:e3:f0:9e:48:eb:35:1b:4d:75:d0:6c:
                    cc:89:e6:44:bc:0b:28:0f:49:6e:aa:45:1d:95:1e:
                    3b:e9:bd:e6:6b:a4:4e:97:d6:cd:8a:de:d9:91:0e:
                    82:31:eb:bb:d7:ad:ff:1c:36:65:78:57:55:9d:53:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:32:80:C9:48:DB:31:36:1B:90:CC:2C:02:86:DC:3E:CE:14:15
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ae:ff:44:42:d4:99:0c:43:c9:e0:89:e5:75:66:e5:10:04:
         59:95:db:11:7b:00:37:77:df:7e:0f:41:88:af:1b:cb:d1:3b:
         17:b8:fa:53:90:9c:0e:0f:33:f0:ee:0d:eb:d5:cb:db:97:aa:
         9d:ec:49:f1:b3:00:c2:7c:d7:02:b7:16:6e:bf:a1:c8:b4:e0:
         0d:17:ae:18:f7:a2:0d:06:b2:bb:ca:d6:31:b2:0a:31:d4:fd:
         59:1c:f6:1b:50:05:f1:77:95:91:44:cd:d5:5d:13:6e:82:28:
         e5:b3:62:ce:47:82:ce:e8:b3:6e:7e:b2:24:73:b9:65:30:39:
         b6:0c:12:3a:4d:25:78:cd:1f:75:cc:51:33:af:a3:6f:6f:fa:
         55:ca:d4:ed:c7:8f:92:95:2f:37:dd:ae:0f:6d:9d:9f:fe:1d:
         21:d9:cc:e6:22:73:df:2a:1e:76:bd:dd:46:92:94:8b:10:3b:
         ac:ad:39:ef:b7:59:15:e1:a4:48:a2:6e:e0:2a:28:60:e4:6f:
         48:f4:1e:06:0f:30:2f:92:00:16:21:8e:7d:5d:fa:a3:f4:12:
         4d:72:1a:03:12:9b:7b:9b:e3:4e:f3:a2:d3:aa:1c:83:4d:18:
         a5:33:33:02:77:39:39:52:60:9f:3b:ce:da:e2:62:94:56:fd:
         87:94:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:37:42 2026 by rpki-client