Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File:                     f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier:          7STK5sgjTqN5CHkMJIiU/VlLOurqTXrirnFNt3Ls98M=
Subject key identifier:   12:F5:B1:71:EC:37:37:9E:4F:81:A6:61:67:7E:6F:51:F5:B2:D3:C6
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer:       /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial:       019FA93E7003C41FB9B0D14B718A284F93F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 15:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:09 +0000
Files and hashes:         1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
                          2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
                          3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: Qt2RZAavyRC8zwYcjJ0a9WUN+P7aVxLf87Fk8VssvFM=)
                          4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:70:03:c4:1f:b9:b0:d1:4b:71:8a:28:4f:93:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
        Validity
            Not Before: Jul 28 15:01:09 2026 GMT
            Not After : Jul 29 15:01:09 2026 GMT
        Subject: CN=12f5b171ec37379e4f81a661677e6f51f5b2d3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:f5:b9:ba:a6:c7:46:d0:b0:72:03:00:b2:
                    f1:c2:16:44:28:18:b1:3c:2d:b8:9e:b0:5b:3c:6d:
                    ca:e4:ad:54:b2:f9:e2:a3:5e:f8:d8:e5:c3:f7:ba:
                    7d:30:7e:ed:71:e9:a2:e1:98:e1:28:ee:79:60:a4:
                    4a:d8:4d:33:8a:a7:e3:f7:15:52:6d:0a:07:9d:78:
                    c2:c6:b3:79:f6:8c:51:ef:87:fc:1e:26:2d:bc:10:
                    b7:a8:b1:77:71:b8:3a:09:eb:57:0d:af:1d:9c:ab:
                    52:1a:f1:19:7a:b8:96:fb:4f:8f:b4:45:28:1f:78:
                    d0:e6:fd:d7:31:aa:07:64:0b:3d:b6:8f:ef:04:4e:
                    db:55:b1:5a:bc:bd:b0:4c:12:77:e0:ca:5f:74:a1:
                    9e:2d:40:56:2a:e2:82:d4:c4:0f:6c:1a:f8:f7:0b:
                    12:f9:b4:5a:86:ea:47:ef:5b:75:35:94:82:06:ff:
                    b3:ad:73:a6:13:d9:80:21:5b:7b:01:f2:d6:0d:e0:
                    97:4c:ba:3e:79:66:65:f8:04:03:b1:75:d1:72:70:
                    7b:2e:0e:78:6b:0f:11:02:bd:dd:d8:15:c3:9f:e5:
                    96:e3:1c:3d:fe:bb:cd:df:81:97:55:cc:3e:33:a4:
                    e9:7d:fa:9f:31:02:90:4d:c8:b3:45:ee:52:0e:8f:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:B1:71:EC:37:37:9E:4F:81:A6:61:67:7E:6F:51:F5:B2:D3:C6
            X509v3 Authority Key Identifier:
                keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:55:10:19:4e:b6:79:74:85:e9:72:4b:65:ee:46:3e:9d:
         98:0c:55:2e:5d:0f:79:08:fd:93:75:a7:10:75:a1:fe:0b:e1:
         7d:f1:cd:04:e2:48:52:e3:ad:f9:74:e4:87:c3:11:0f:c8:d2:
         7c:81:c5:27:a0:6e:0d:53:03:58:a2:77:39:d5:5c:39:14:94:
         1b:4e:a3:1b:07:90:42:bb:89:c2:78:ec:96:f1:86:34:cc:62:
         91:45:cd:a6:be:6b:11:e9:d1:c1:c4:35:67:81:b8:83:32:93:
         f3:e0:18:47:e4:f6:76:03:90:72:59:a4:28:71:ba:54:d0:b4:
         2a:65:8b:e8:4c:9d:24:f4:1d:09:92:89:a3:a6:f8:40:dd:06:
         81:2f:a0:5a:16:58:fb:d5:c2:f0:5b:cf:a4:a3:21:28:42:70:
         bd:e0:dd:a5:6c:b3:e7:d8:5f:ae:b3:a5:4e:3c:1a:fc:fa:be:
         f2:77:bf:84:71:ba:3d:fb:ba:33:d4:04:5e:4d:c1:c6:a2:f7:
         7f:b2:9b:50:7a:f3:10:67:70:97:e7:a5:c4:42:ae:cf:d7:39:
         62:34:2a:97:60:6f:d3:38:99:11:05:b0:bd:3e:fd:be:d9:43:
         ee:3f:e4:02:1a:1a:28:7a:4f:96:0d:ea:f2:85:c4:f9:70:65:
         29:93:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:26 2026 by rpki-client