Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
File:                     m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft (raw, json)
Hash identifier:          TxUA7kxVpDojcsHYfYDKXAunYf5BqjzxoMCcoRPSJTU=
Subject key identifier:   FB:C1:11:50:13:41:17:3C:76:BD:A9:85:87:9C:0B:A8:88:A2:19:29
Authority key identifier: 9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
Certificate issuer:       /CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Certificate serial:       019FABD10BFB84D34BDC8052F1066E175A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
Manifest number:          2B
Signing time:             Wed 29 Jul 2026 03:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:31 +0000
Files and hashes:         1: 1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa (hash: Dz6lLNPsk+ndbehBfxapa+ksrphrNfbcDIDf943cyGI=)
                          2: m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl (hash: PxxvsmAvA5xu6rpz8hcudvb4LHXzDvnxs/tPvdgg07w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:0b:fb:84:d3:4b:dc:80:52:f1:06:6e:17:5a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
        Validity
            Not Before: Jul 29 03:00:31 2026 GMT
            Not After : Jul 30 03:00:31 2026 GMT
        Subject: CN=fbc111501341173c76bda985879c0ba888a21929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:3d:18:54:62:b6:eb:93:93:64:60:b7:bf:
                    e8:30:2b:2d:89:93:d2:66:54:38:60:d7:18:e3:eb:
                    1b:57:ab:29:88:80:05:ff:f4:ab:8f:21:59:a5:98:
                    0e:cd:b7:e6:7a:82:f0:4a:e6:39:f5:84:44:92:0c:
                    13:3a:bb:7e:41:4e:79:c4:30:6f:56:45:f4:f4:42:
                    ba:e1:1a:a3:cc:98:bd:ef:43:f9:89:fc:76:43:4f:
                    2d:e3:26:ff:3a:12:1d:f3:d1:9a:6a:92:b3:4b:bb:
                    cc:91:ef:79:23:0a:e4:32:cd:af:ee:3c:21:4f:47:
                    45:7e:3d:29:60:fb:56:a3:fa:f7:4b:df:90:cb:90:
                    b1:4e:1e:a0:41:24:45:13:dc:3a:20:d1:2b:fb:7c:
                    c2:d6:24:d0:63:ad:fc:f5:d2:33:11:36:fb:e1:4f:
                    8d:dc:61:d7:45:e5:3b:fc:ba:92:88:96:2b:03:c2:
                    32:8d:22:a0:b4:24:dc:c8:1c:17:1a:95:e0:95:fe:
                    71:8a:f8:78:e0:b9:45:dc:5b:cc:e3:3e:a1:c5:dd:
                    5d:fb:f9:23:89:f2:9d:e0:11:02:3d:78:24:b8:17:
                    30:f5:cd:08:96:e9:1b:47:d5:02:f6:a6:e5:60:f0:
                    b4:67:58:e4:61:71:8c:24:b5:76:a1:48:4d:27:77:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:11:50:13:41:17:3C:76:BD:A9:85:87:9C:0B:A8:88:A2:19:29
            X509v3 Authority Key Identifier:
                keyid:9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:8b:ab:85:3f:10:44:98:fe:ed:bb:42:93:a7:9f:1f:4c:
         79:fa:3c:c9:3c:28:85:46:b8:bb:13:ff:62:06:7a:d9:d8:74:
         22:f2:4c:e0:32:81:6f:f1:1b:1e:1a:39:37:cf:7e:86:a4:ff:
         18:49:94:33:05:75:e2:20:03:16:85:ff:44:06:9c:98:69:f2:
         1e:b6:b2:8a:aa:97:5e:3c:22:82:e4:5c:46:cf:1d:5c:fa:b7:
         6a:9f:bd:1c:0e:07:9a:9d:34:6f:c7:77:d1:52:ee:e7:39:a7:
         41:00:d4:de:5b:6a:08:d2:38:ea:1b:ae:96:77:2d:72:35:38:
         77:9d:a8:54:a8:a4:d6:20:3c:fe:d6:3b:3e:8d:9b:85:96:3c:
         79:a4:16:1f:16:87:22:6f:55:36:ec:b8:55:54:af:96:8b:57:
         06:1d:69:d1:42:19:9b:1b:70:f7:95:c0:da:25:c9:d2:83:0e:
         64:55:8b:11:63:7a:c3:9e:79:f5:85:ab:3f:b7:b7:47:cf:dc:
         d0:bc:31:9f:d5:f2:9f:68:a9:b2:68:30:4e:5b:91:d2:81:59:
         59:1d:5d:ae:12:9b:43:4d:88:7a:65:60:ef:5b:43:1f:e7:dc:
         9e:a1:1a:ab:d4:aa:cf:9c:e7:11:23:04:7e:c6:65:23:1f:33:
         85:6b:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:28 2026 by rpki-client