Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File:                     r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier:          7HBaiuSauZQjI4RV/MqwBu0MkkYQkmx9Dr7MVxWQQEo=
Subject key identifier:   67:E4:91:13:B9:AA:05:ED:2A:B3:B4:CF:24:B0:19:65:24:0E:94:78
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer:       /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial:       019FAB9A066A9AA3F20625DDCDC25543A8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number:          09FE
Signing time:             Wed 29 Jul 2026 02:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:25 +0000
Files and hashes:         1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
                          2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
                          3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: /ZK8XSPGxg2y8cM3K+RCv0hcEJmrrjtD+76JrW556bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:06:6a:9a:a3:f2:06:25:dd:cd:c2:55:43:a8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
        Validity
            Not Before: Jul 29 02:00:25 2026 GMT
            Not After : Jul 30 02:00:25 2026 GMT
        Subject: CN=67e49113b9aa05ed2ab3b4cf24b01965240e9478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:02:0a:da:e8:0a:7b:2c:d9:d3:33:ac:e5:
                    76:dc:57:62:4a:d5:6e:83:b4:51:06:ee:ac:e5:d6:
                    cc:5c:0f:7b:d4:90:f5:be:0a:10:c5:3d:e6:3c:78:
                    17:64:ef:ad:d4:15:14:1f:e2:62:17:34:14:24:1d:
                    c5:0f:4e:c3:6c:8c:4f:04:c3:f2:28:03:40:b2:8b:
                    2b:d8:5b:91:8a:e2:f9:ed:a5:e8:28:79:12:67:66:
                    30:f7:08:27:44:61:31:f9:96:ec:34:6e:c7:05:1f:
                    41:4f:e3:ea:f4:fa:82:74:fe:c2:c1:4f:93:49:c1:
                    fd:f0:cb:59:2a:64:b1:4e:10:be:04:90:5a:bd:4e:
                    c7:f5:1b:41:fa:01:44:47:88:8e:01:44:47:84:af:
                    6c:dd:cd:2a:6c:7a:94:9c:37:7d:21:3d:8b:49:04:
                    cf:63:a1:d7:53:50:19:cc:2a:de:a1:ef:f8:c0:91:
                    4a:57:e6:ea:3c:d2:4d:df:fa:e8:83:61:b7:c7:07:
                    bb:42:5d:98:24:dd:db:55:d8:d6:fa:bb:b5:ec:c6:
                    93:b3:3a:18:cd:32:ff:06:ed:73:f6:31:51:f6:ad:
                    d8:ae:66:d8:7a:df:10:43:fc:33:71:c3:7f:ed:70:
                    7b:80:ef:a4:90:ce:01:af:44:d9:c2:47:24:0a:79:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E4:91:13:B9:AA:05:ED:2A:B3:B4:CF:24:B0:19:65:24:0E:94:78
            X509v3 Authority Key Identifier:
                keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:49:ca:2a:6d:52:a1:4b:bd:c5:37:3d:80:90:6d:12:f6:
         62:41:b9:6d:a0:f9:84:cd:70:b7:f9:3a:58:c8:36:b9:29:84:
         0f:cc:2b:12:be:94:9b:cf:b3:d8:24:b5:da:18:fa:fd:fe:d2:
         ca:f4:91:b1:46:0b:33:dc:da:1d:45:ae:d1:4a:7b:ef:a6:b1:
         d6:8c:77:7b:e7:b3:49:88:4b:1b:c0:e1:32:93:97:63:73:1f:
         40:50:88:c8:7f:39:54:c8:f6:d6:75:cf:a7:65:a0:dd:c9:70:
         63:b7:be:d9:49:db:92:b5:9d:ea:63:a7:5a:2c:03:b7:08:ca:
         b4:b6:5b:35:ee:47:09:c5:6c:86:12:ea:d5:82:55:f3:5e:13:
         67:55:7f:e6:45:d3:d4:bf:f7:da:f4:7c:8b:ee:95:92:54:c2:
         6d:bb:25:fc:f4:b5:55:19:65:e0:c0:76:21:f9:69:ae:f8:2f:
         29:dd:48:f4:79:64:41:bd:ab:e4:1d:d5:b6:28:ad:ea:91:8f:
         09:3e:dc:85:aa:13:3c:96:24:a5:3e:01:86:3c:3a:f2:16:54:
         42:97:0e:fb:bb:2d:79:0f:43:3e:ee:d1:b1:84:d5:57:1e:d5:
         74:bc:42:fb:01:71:3e:92:e2:12:c1:a3:15:98:a9:b3:14:d6:
         fa:d5:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:12 2026 by rpki-client