Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File:                     MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier:          Sy21LMjE05sfHMonTF8Yk1CAPT7SxDzRMjFajPS7jWk=
Subject key identifier:   67:6D:F4:1B:55:8B:49:DA:56:45:10:F4:D2:F7:FF:BB:9A:F9:FA:2D
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer:       /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial:       019FAC76827316196814E9CC7E406C27C02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number:          1719
Signing time:             Wed 29 Jul 2026 06:01:15 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:15 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:15 +0000
Files and hashes:         1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
                          2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: QuYkMAPgWrghKH9DG1047RFog5iXsDEd5cVbFKekf88=)
                          3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
                          4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:82:73:16:19:68:14:e9:cc:7e:40:6c:27:c0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
        Validity
            Not Before: Jul 29 06:01:15 2026 GMT
            Not After : Jul 30 06:01:15 2026 GMT
        Subject: CN=676df41b558b49da564510f4d2f7ffbb9af9fa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:fa:08:d5:7d:4a:0f:39:db:aa:1a:45:8f:
                    b8:b4:d8:ef:f0:ed:34:59:01:20:6c:f3:d6:b6:98:
                    7c:2f:d8:07:c5:41:75:c9:11:dc:e1:f5:c4:57:df:
                    4a:bd:96:f7:0f:92:ac:a0:61:15:84:66:c1:4d:9e:
                    f1:19:70:75:0a:83:be:fc:86:88:7c:23:c0:52:d7:
                    eb:5f:87:e4:58:85:cd:d2:26:9a:17:05:ff:08:c1:
                    78:1a:bd:da:e9:7d:4a:50:c6:19:8c:31:25:b4:2d:
                    10:ec:34:4a:ab:bf:cd:1c:0f:cf:ba:d7:ef:1a:3f:
                    e7:f8:9a:98:80:b7:39:de:3a:fb:ea:71:52:d5:57:
                    4b:45:82:43:25:28:41:e8:48:83:98:b2:de:61:f0:
                    9e:00:ed:fe:4b:ff:94:6c:6a:1c:03:33:09:fc:f3:
                    ec:75:75:96:b0:6d:d6:bb:36:df:9e:cf:a3:b1:2e:
                    3c:c4:55:1d:93:e3:e3:20:c7:9b:50:b8:61:87:ef:
                    99:c8:01:d6:08:99:98:eb:c8:1f:83:61:a7:01:03:
                    93:54:6c:d5:25:63:e4:02:26:78:86:d6:db:bf:13:
                    3f:c5:47:db:df:2f:67:02:6a:c2:4a:a2:46:70:b1:
                    0f:3c:b1:b1:f9:6c:7d:a3:a1:32:cb:31:ea:dc:53:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:F4:1B:55:8B:49:DA:56:45:10:F4:D2:F7:FF:BB:9A:F9:FA:2D
            X509v3 Authority Key Identifier:
                keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:8c:11:5b:8b:22:fe:0a:cc:ae:0c:8b:15:6c:3d:28:22:
         7b:5f:13:75:b3:64:cb:b0:d6:15:94:6e:1b:c2:fc:09:5d:40:
         a0:5f:a9:e8:17:c0:49:26:36:f2:a8:33:83:07:2f:f1:d3:a0:
         2d:47:c6:9f:7e:83:a1:26:b7:c5:83:5e:c3:0f:92:52:4b:20:
         a9:3f:08:da:68:77:d0:e6:a4:71:eb:3d:5a:a6:56:54:a8:2a:
         f4:f4:23:d9:bd:9e:95:81:21:31:8d:69:43:61:02:5b:97:1e:
         10:3f:ca:9a:47:c8:48:5f:7a:c3:7a:b7:a7:8a:65:34:0b:d5:
         9f:11:fc:55:c7:43:c9:77:b6:7b:41:3c:40:11:d8:71:f4:b6:
         d5:4c:61:be:93:27:bc:53:89:ad:a2:30:a7:be:15:98:16:8c:
         b1:d7:d4:a1:cb:0a:2a:b1:44:07:eb:71:99:a9:65:0a:5b:9b:
         58:49:99:77:5a:59:a6:13:fa:f8:c7:8c:22:49:5d:b1:43:a4:
         a5:d9:ea:89:c2:e8:42:9c:bb:92:8f:c6:59:e9:bb:5f:48:7f:
         5d:5b:85:88:23:77:3f:17:33:19:81:33:4a:cf:1f:01:28:5f:
         2e:00:1a:86:ab:39:03:03:64:dd:2f:a6:2b:01:6d:fd:ee:38:
         27:17:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:55 2026 by rpki-client