Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File:                     _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier:          x8UjgJ/ZqCnmCszMQEOSv3wdVVxiZ5IRzwySk7CjQl4=
Subject key identifier:   4D:9E:6B:61:D8:73:00:26:69:52:EA:45:65:AC:59:50:89:A8:58:F4
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer:       /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial:       019FAC3F57AB03A75A43720763612717A464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number:          1340
Signing time:             Wed 29 Jul 2026 05:01:00 +0000
Manifest this update:     Wed 29 Jul 2026 05:01:00 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:00 +0000
Files and hashes:         1: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (hash: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU=)
                          2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: SOFL8Snl7NSi3FMRvieNOLsJ3n8HXe3GjCCoHapG5oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:57:ab:03:a7:5a:43:72:07:63:61:27:17:a4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
        Validity
            Not Before: Jul 29 05:01:00 2026 GMT
            Not After : Jul 30 05:01:00 2026 GMT
        Subject: CN=4d9e6b61d87300266952ea4565ac595089a858f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:42:5d:eb:a8:12:bd:96:5b:4a:69:b8:78:
                    19:9e:5b:7e:50:f3:f5:64:f5:71:f3:13:ac:97:25:
                    a1:3c:5c:0e:58:21:9c:ff:4e:f9:e0:81:31:e0:3d:
                    51:44:d5:fa:6d:a5:d6:5a:1d:6e:33:6f:16:5d:f3:
                    01:2d:56:14:db:08:45:8c:12:f7:32:2c:02:e4:a5:
                    84:df:6e:fe:c0:2c:c5:88:a6:f9:13:43:e1:c8:68:
                    64:f0:06:15:7e:0e:3c:79:af:a2:c1:db:d7:c6:69:
                    ac:3f:ad:dd:5f:ea:1d:d1:a2:66:16:cf:be:d5:31:
                    c6:e9:09:cd:df:09:e4:73:e7:d6:99:c4:4c:6b:bc:
                    7c:b5:83:7e:63:7a:19:a3:de:f7:44:0d:46:44:fe:
                    c6:04:80:98:75:f5:a5:ae:d2:ec:0a:30:a5:18:02:
                    e2:0f:51:39:b7:ca:ba:ff:52:9a:5a:5c:d8:d9:8b:
                    b9:a9:c4:ef:94:11:3d:30:65:7c:7c:a7:56:42:48:
                    de:26:87:b3:f1:de:64:d0:33:56:90:4f:98:2f:21:
                    51:22:f9:23:16:85:ed:7a:1f:d5:8f:9c:51:3a:55:
                    54:43:a9:ac:c4:f5:c2:30:27:bf:cf:16:18:25:d8:
                    4f:2a:b0:8a:04:34:75:6d:71:29:82:94:c8:01:d5:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9E:6B:61:D8:73:00:26:69:52:EA:45:65:AC:59:50:89:A8:58:F4
            X509v3 Authority Key Identifier:
                keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:42:d1:dd:9c:b5:a9:bd:ef:53:04:eb:1c:4d:05:39:2a:
         fa:35:ef:88:06:7c:66:7f:34:a0:b1:aa:67:48:1c:88:2a:0f:
         4b:59:74:9f:8f:0f:fa:a0:0d:5d:12:b9:79:10:92:e9:cf:d3:
         26:21:29:b4:5f:f9:fd:9b:ea:0c:3a:57:b8:a2:38:e7:41:49:
         09:6b:b6:32:61:7f:5a:ce:7c:a6:ac:54:8d:9a:3e:7e:a7:94:
         4a:19:e6:6c:bb:ed:bc:59:45:bd:48:52:39:b6:55:33:72:0b:
         bc:ba:b9:5c:35:4c:db:c4:88:31:c5:cf:54:33:37:62:88:de:
         18:86:cd:1a:a5:8f:84:07:da:8b:31:90:2a:ce:46:a3:4c:07:
         f4:55:04:2c:82:29:0c:a9:4a:87:1b:66:61:fa:f0:3b:97:bc:
         ac:6d:0e:84:0b:82:43:0c:0c:85:93:eb:23:43:3a:c7:e4:cd:
         94:9f:e1:44:3b:cb:0e:7c:36:f0:13:6a:3c:d5:75:85:b5:df:
         21:50:e7:43:f8:69:ba:b3:7f:f5:8a:4a:00:10:a7:e5:b3:47:
         e4:1e:42:43:2a:d9:9b:29:27:8f:34:86:e0:68:d7:5b:06:2f:
         73:91:f8:1f:3c:7e:05:3d:d7:db:e0:0d:a5:48:11:5b:6e:de:
         e3:f6:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:55 2026 by rpki-client