Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File:                     r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier:          ytqjcMdLEg7h+XoIsmdbjXFjN/q9Sok4yZu+EFAu4vA=
Subject key identifier:   20:75:64:C1:49:4E:75:08:44:5F:25:64:72:B7:AA:62:D1:8B:D3:D0
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer:       /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial:       019FAB2C8EE804F0D9963E74F9E1B13EF672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number:          73
Signing time:             Wed 29 Jul 2026 00:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:51 +0000
Files and hashes:         1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
                          2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: qUV7DXggLcF1s3h/5UHEe6xhSrBVQTzxLx621MbAJ3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:8e:e8:04:f0:d9:96:3e:74:f9:e1:b1:3e:f6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
        Validity
            Not Before: Jul 29 00:00:51 2026 GMT
            Not After : Jul 30 00:00:51 2026 GMT
        Subject: CN=207564c1494e7508445f256472b7aa62d18bd3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:c0:02:ea:00:29:8e:62:41:42:83:d6:ef:
                    ba:67:a6:7f:f5:4d:b7:7f:42:0f:e2:f8:54:06:6d:
                    5d:7f:5d:bc:9d:1a:5a:b2:6b:a3:39:24:8e:f1:ef:
                    cc:bb:ad:b8:8a:38:13:2b:c0:fe:4c:9b:63:78:7d:
                    7f:b4:26:e5:25:c9:5c:cc:68:59:a3:c3:0e:ba:51:
                    7e:96:f7:64:30:61:53:89:6b:a1:95:ea:c1:07:2b:
                    b3:62:5c:d2:57:22:c5:6b:da:2d:be:40:46:91:6d:
                    0e:56:f9:4f:7f:43:c0:7b:d6:a8:15:7c:57:64:85:
                    0f:7e:a7:81:05:14:d0:ae:76:02:5e:fc:3a:ef:5c:
                    c0:6e:79:07:20:a1:a5:da:d0:53:1a:5b:45:6c:0b:
                    39:00:53:05:c6:78:23:fc:a6:db:77:bb:aa:f1:01:
                    a9:41:39:55:de:3b:de:2d:d0:d5:8a:68:fd:b5:48:
                    19:33:a5:6c:68:eb:fc:26:23:bc:2f:70:1e:d7:92:
                    6b:2a:6c:c0:c7:da:17:d0:2e:96:61:09:7a:01:e4:
                    52:66:e5:35:d5:7a:0b:85:43:8d:7e:ce:a6:60:c3:
                    1d:67:5e:8f:7a:27:b0:9b:4c:0d:e5:cf:0d:e6:4b:
                    e5:e2:61:71:87:3e:1a:25:29:c4:26:df:8d:27:0c:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:75:64:C1:49:4E:75:08:44:5F:25:64:72:B7:AA:62:D1:8B:D3:D0
            X509v3 Authority Key Identifier:
                keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:20:83:19:ba:f6:21:2a:67:53:e2:72:46:92:06:9e:f1:60:
         2f:ad:ba:97:ec:6f:87:56:f8:ff:b8:2d:5c:88:fb:22:e5:99:
         52:e3:06:a5:66:5e:70:c7:a1:f7:d9:11:2c:5d:fa:73:1e:06:
         94:f0:85:b2:d1:63:58:67:3f:b4:db:91:1a:98:2f:ac:0f:7a:
         33:f4:ca:83:0a:96:14:52:d4:10:52:e5:a3:de:bc:b9:6a:70:
         60:45:04:59:ab:75:6a:8a:c3:6f:76:03:13:1d:c3:47:b9:a0:
         c5:c9:f3:a5:3f:ae:27:06:27:cb:4f:a2:bd:09:ad:3e:98:3a:
         53:f8:a3:a7:4c:4a:78:8e:e7:79:cb:94:9a:36:78:76:58:c0:
         b1:e4:f2:31:32:fc:6f:a1:e0:e8:bd:52:6e:bb:ad:ee:9b:a5:
         04:b7:bd:37:fa:65:c3:9a:f6:87:6d:97:91:0c:a7:89:f1:ab:
         c1:83:a5:97:97:f8:be:2e:63:89:10:7b:a8:76:75:86:8b:93:
         d1:b3:c1:36:b9:9e:79:a0:5b:21:a1:62:0b:b1:08:3b:40:71:
         95:fa:e5:70:3f:ed:9b:a4:f6:9e:5c:76:b8:b2:45:e9:de:3f:
         36:2f:83:ed:65:80:a0:a9:c3:70:db:9f:72:4f:93:da:7d:1f:
         e5:a9:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:29 2026 by rpki-client