Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          dN4dIrjUlEMe9c68EkvDPWDAiNv9euODmlwq+Sqg4hw=
Subject key identifier:   79:87:B4:02:12:4E:FF:7C:DF:B4:A6:30:A5:79:0F:F2:94:E8:96:B6
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       019FAC75ABB4B6BB4E29D3F86CAA385BD0FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          19F7
Signing time:             Wed 29 Jul 2026 06:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:20 +0000
Files and hashes:         1: LpI3PyYDEsil-gJ9EybHYHEQzSw.roa (hash: Bj0/Slyl4mS0qWkcQjxpCqfI9YGYFKmWx9MPsOE7/Uk=)
                          2: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: NZNU3XYr7Zx6zbfk6epNKDP9H7/T4ql+aTyccBnCMlI=)
                          3: wP0JXiaPHK1PWypoONdu1P4k-xY.roa (hash: hOHj+bHUfpcBNhAym5OZKL6pfElusgMVxMa3fRinXoc=)
                          4: zbPHBRrSSTxxm5GjBesQOmg5BOU.roa (hash: 2nuGIy4NdEBraXqbAUjxFu75DMqgnt0PJMHdEvGwETc=)
                          5: znypVRB8HdELH7t-EZvR2o9mzZ0.roa (hash: VtWRBjrQreIxKps4k8DyQN35GM7QKv0koJ0vJoZMRsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:ab:b4:b6:bb:4e:29:d3:f8:6c:aa:38:5b:d0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Jul 29 06:00:20 2026 GMT
            Not After : Jul 30 06:00:20 2026 GMT
        Subject: CN=7987b402124eff7cdfb4a630a5790ff294e896b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:45:16:10:34:2a:5e:9e:13:c1:8b:0c:f8:
                    a5:cc:76:4c:8b:a5:96:35:b5:5b:e4:76:10:4f:b0:
                    4c:5e:de:b0:23:4f:e6:e3:4a:91:95:e9:81:a2:fe:
                    47:db:70:a0:d0:e6:23:a3:db:f7:0c:a8:c9:86:7f:
                    d7:d4:ed:15:2d:fe:37:3d:16:3f:6f:e5:79:b9:d1:
                    07:9c:1c:6a:1f:2c:d2:04:64:cb:a5:be:c7:d0:07:
                    80:97:8e:5a:96:23:0a:78:0b:64:15:3d:b1:2f:40:
                    bf:ec:a3:95:94:1f:d2:c2:8c:b9:42:5e:a4:10:33:
                    ef:07:57:6e:94:31:10:e6:ab:0e:ad:46:7f:61:11:
                    a8:0e:0a:3d:d8:69:b2:76:db:44:f2:30:fb:95:27:
                    c5:35:57:43:f9:0e:8c:4a:9c:31:16:99:ae:85:76:
                    df:45:b2:fc:a9:aa:48:b5:53:f0:e3:b2:7f:9f:cc:
                    8c:ae:39:14:53:3b:eb:64:13:86:ac:8f:f1:ce:fb:
                    08:e8:cf:a7:63:60:98:24:bb:a7:39:f6:12:86:94:
                    48:23:f8:49:e0:ff:ec:ee:30:ba:79:4e:f5:23:b3:
                    ba:47:28:50:74:09:0d:64:d8:d4:ad:62:3e:d8:6d:
                    e3:0a:8c:ab:57:a5:c7:4b:71:a4:db:aa:0f:cd:3a:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:B4:02:12:4E:FF:7C:DF:B4:A6:30:A5:79:0F:F2:94:E8:96:B6
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:94:92:ca:cf:4b:dd:55:b7:dc:e2:07:57:c1:bc:df:91:
         83:87:c2:14:9e:5f:79:f8:27:4f:50:d2:ee:af:0d:e4:42:e0:
         7e:cd:b7:5b:c7:4d:d6:94:aa:7f:16:a6:39:c8:6d:1d:c5:8b:
         6e:d2:9c:c5:b1:63:fc:e9:db:94:45:21:89:b4:da:bc:32:6a:
         de:2c:20:04:b1:d5:7a:e1:3f:b5:a3:f3:6e:df:ee:7f:cf:24:
         58:11:af:66:0c:cf:e7:6a:d3:28:66:25:e7:aa:25:f9:03:6a:
         f0:64:db:1b:82:68:04:21:3a:42:12:5d:f5:86:1b:35:63:4b:
         41:c7:60:44:08:89:97:ac:b3:07:9c:05:eb:d8:85:21:e9:c2:
         69:dd:01:72:bf:51:4d:d7:91:59:22:b8:d8:99:26:15:c0:a7:
         1e:99:a3:41:a5:3d:c9:ea:ec:2c:4e:90:40:8e:9d:d1:6f:03:
         80:0e:31:00:d8:5b:38:26:0c:c7:6b:a6:cc:de:61:56:00:d5:
         e3:4c:10:7a:de:17:9c:3a:ef:19:bd:bf:df:2a:68:4a:37:8a:
         61:d0:09:16:d5:ec:ce:14:9c:0d:5f:bd:00:2a:5a:02:2d:27:
         9e:97:88:b1:21:60:0a:50:0e:4f:2c:b4:52:86:f8:8f:71:91:
         37:30:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:28 2026 by rpki-client