Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier:          VwF0LZTUtDJrrCkf2wBhEge/KVu5P9YjYxOif9eD3jM=
Subject key identifier:   01:DE:46:03:BE:9C:B6:C1:92:EE:E2:AD:23:D5:FE:AD:1D:1D:B1:05
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer:       /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial:       019FABD1020AC0E99C133D2EEE3F144824B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number:          1830
Signing time:             Wed 29 Jul 2026 03:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:29 +0000
Files and hashes:         1: cMQiZnAEZAcj3C0lkcgvF6RD5y8.roa (hash: 42uo0Cj9Z9TNuXBZG2n2ywXXuk81qWLkR5LdFIJRmv0=)
                          2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: Kc4daCf2V7hwxMd5XV5y1IjSNH2ZeJT9/d9CemRivpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:02:0a:c0:e9:9c:13:3d:2e:ee:3f:14:48:24:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Validity
            Not Before: Jul 29 03:00:29 2026 GMT
            Not After : Jul 30 03:00:29 2026 GMT
        Subject: CN=01de4603be9cb6c192eee2ad23d5fead1d1db105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:0a:d6:19:3f:54:dc:1b:97:fa:8d:78:54:
                    c9:a7:eb:b7:6f:05:bd:7f:df:39:3c:9e:97:f3:0d:
                    d8:43:32:5a:fd:6a:79:2a:58:ac:0d:2c:61:41:7a:
                    d1:d7:56:94:b9:8c:5e:52:dd:d5:d4:2e:3f:0d:da:
                    17:9b:10:02:9b:a5:59:69:54:59:26:40:23:35:c0:
                    07:1c:e2:80:32:b9:43:1c:fb:6d:31:b7:69:2d:e1:
                    83:a2:73:5a:75:cd:b1:e3:91:4e:69:56:16:fa:84:
                    c5:9c:56:aa:d7:32:6b:ae:7d:6b:15:fe:4c:82:e1:
                    c6:aa:f8:67:fe:0b:f6:69:03:b1:22:96:e7:1d:fe:
                    a5:e0:9c:e5:82:3e:97:e5:db:28:4b:86:4d:d8:04:
                    2b:1f:9c:6d:c9:5d:79:22:73:fe:c1:f9:91:ce:17:
                    aa:45:d2:1b:d4:52:54:1e:d2:ed:1f:40:32:0e:c1:
                    8e:91:26:f7:84:1a:e7:2b:e6:e9:27:35:d3:14:4f:
                    7d:f9:0e:37:b2:37:8d:ab:a8:c8:f4:28:6c:40:37:
                    d8:3d:bb:f5:fb:7e:92:71:18:ef:23:5b:ab:40:75:
                    d9:08:2c:27:7a:04:7d:65:4d:01:ba:b2:ee:18:d9:
                    66:bb:34:45:f8:9c:14:28:f7:60:ce:9c:68:bf:49:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:46:03:BE:9C:B6:C1:92:EE:E2:AD:23:D5:FE:AD:1D:1D:B1:05
            X509v3 Authority Key Identifier:
                keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:9f:67:39:37:a3:c6:7e:66:b2:44:c1:4a:a7:ce:59:ca:
         24:3d:9b:56:6b:79:3a:b7:9c:bb:b3:f0:ae:75:df:64:4f:dd:
         10:95:62:97:34:29:01:0d:91:54:df:6f:98:42:44:e5:a6:26:
         a9:06:0b:2a:2d:9f:99:a2:85:94:07:dc:97:fd:9e:0e:ae:3c:
         cb:9e:28:b8:90:2b:13:ac:c7:4b:80:b5:d1:4f:c4:19:6c:54:
         98:91:32:53:72:67:10:8c:2a:26:56:b9:47:e7:82:e5:c3:4f:
         76:f8:c4:5b:17:74:8a:8d:a3:c9:4e:5d:f7:5a:6b:3e:9c:53:
         ba:7c:06:8e:5a:a2:9f:46:ab:e6:03:08:d5:39:44:67:c5:3c:
         5e:3b:6d:45:32:a9:7b:d6:26:df:b5:fa:6d:9d:79:77:24:9f:
         3e:0a:2c:c0:4e:2f:ba:01:ae:2e:90:a8:a6:77:b2:5b:b2:6e:
         7d:9a:6f:b4:42:8d:22:c0:e8:c2:07:2c:c2:43:f7:c9:8b:de:
         7d:fc:cc:50:b2:52:5c:2d:8c:bc:e9:ba:78:c3:98:a0:24:2b:
         0c:f5:89:08:3d:dd:e3:d0:a4:72:1d:cd:8f:e7:ba:78:6b:f5:
         57:81:d4:ab:db:8a:26:90:21:66:78:fc:05:9e:91:8f:a0:54:
         50:90:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:12 2026 by rpki-client