Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          WF/1GC6zEXRu1UjLY41BiwXmBW9BEvf1gjK+3XlYSng=
Subject key identifier:   C2:05:E9:A6:4C:39:6B:12:DC:05:D3:E3:DF:1A:E1:A7:C2:B4:D3:8F
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       019FAABE970B2A58DEEB877F4F6EF077B42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 22:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:44 +0000
Files and hashes:         1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: st6VFBDIfKJ6zsgMaSqxcItSlCaTAdtzLjLTGAlCEXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:97:0b:2a:58:de:eb:87:7f:4f:6e:f0:77:b4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Jul 28 22:00:44 2026 GMT
            Not After : Jul 29 22:00:44 2026 GMT
        Subject: CN=c205e9a64c396b12dc05d3e3df1ae1a7c2b4d38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:94:00:5a:81:b9:f1:d5:ab:f3:de:e4:7c:
                    19:bc:7f:2c:df:80:21:58:9a:24:8b:26:f1:1a:94:
                    aa:c3:a2:92:e7:59:5c:af:a8:2c:a6:44:c3:81:c6:
                    cf:16:59:4d:44:92:62:18:0b:00:9b:fa:bd:b5:2a:
                    eb:84:5e:48:b7:3a:c2:bf:4b:40:79:6a:32:b3:5b:
                    ad:ba:a5:f2:d9:e7:29:4a:ea:1d:72:2a:02:d7:d3:
                    31:6d:0b:a3:e9:6d:5f:fd:81:b7:43:94:39:9e:5c:
                    b0:d5:59:52:df:e8:d1:9a:20:1f:6e:d2:b9:ad:95:
                    f7:01:ab:d2:78:1f:3d:2d:59:65:98:f4:b9:c5:41:
                    c1:a3:d6:f6:80:dc:6b:b5:a3:76:90:bb:50:90:b9:
                    a8:4d:85:41:db:de:c2:59:6a:d0:e5:df:2b:26:11:
                    94:55:02:3c:53:82:ac:5b:de:ed:66:a4:67:14:98:
                    d0:a8:7c:fe:0a:05:01:62:91:67:2e:4f:dc:2f:a9:
                    c4:d5:b4:c0:9f:51:df:82:a6:b3:32:b5:64:ad:02:
                    36:17:9a:53:69:cb:95:23:e6:ef:40:ee:14:ac:22:
                    08:d3:42:15:a9:04:0c:f9:e1:29:16:de:fb:2c:c9:
                    de:cf:e2:3d:c5:1f:2d:47:61:92:fc:d7:4b:6b:25:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:E9:A6:4C:39:6B:12:DC:05:D3:E3:DF:1A:E1:A7:C2:B4:D3:8F
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ac:fe:c0:13:4b:cb:a1:ef:06:03:eb:15:a0:05:23:02:a1:
         c6:2d:ea:5b:83:14:87:83:28:8b:09:f5:a9:70:fb:b3:85:5e:
         ef:68:28:c3:af:94:1c:a8:4c:14:ad:75:e4:70:02:51:a9:16:
         6e:19:52:63:42:c3:96:07:a6:4e:e4:a9:f0:48:f1:de:95:57:
         7b:32:b1:95:c7:7f:92:ec:08:6b:34:28:23:6d:1f:e8:0c:16:
         ae:bd:b1:f1:e9:d1:ef:cf:c0:6b:b6:62:92:06:a7:a6:2c:24:
         90:1b:29:fe:c9:44:da:db:b5:1e:79:81:d8:27:43:62:f5:a4:
         ad:53:52:43:53:bd:fe:9e:71:fd:7d:ee:58:38:14:03:65:f9:
         42:3f:5c:ca:44:86:2e:5f:84:16:02:a3:cf:25:82:fc:e4:3e:
         19:da:f4:d9:82:92:fb:c3:d2:8b:2b:6f:75:08:6b:cd:0e:c9:
         cb:59:3d:d3:8f:cb:6b:ca:5b:c2:17:7e:b0:d2:96:27:92:2e:
         2f:1d:32:30:56:fa:5d:af:61:86:c5:1e:56:1c:91:77:30:86:
         91:7f:dc:55:72:40:60:8d:f8:de:78:95:03:fd:95:b5:2f:f4:
         c4:3c:09:bb:5e:b9:a2:1c:e9:b2:e2:83:5e:2a:91:cb:01:7a:
         9a:97:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:58 2026 by rpki-client