Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File:                     sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier:          4HlI8bRGhRpUAsIRdP/b0sj0euyqcaGgk0XKoLkduDw=
Subject key identifier:   61:E2:C9:D1:12:BC:EE:D2:1B:25:D9:0B:3C:B0:EF:CF:2A:3A:56:89
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019FAA50C784FF429B61C6FF944C07DD95A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number:          1790
Signing time:             Tue 28 Jul 2026 20:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:48 +0000
Files and hashes:         1: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
                          2: SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (hash: kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=)
                          3: p16cU-7zatx3ndSU5oxcouZGGsA.asa (hash: 2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=)
                          4: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: hhVxEeugDVMobEuxd4PoEyB8i0PqugP3h0z1q0Pzpu8=)
                          5: zQ__yCcwrvF4SpWJekyRseIBHM0.asa (hash: 5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:c7:84:ff:42:9b:61:c6:ff:94:4c:07:dd:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Jul 28 20:00:48 2026 GMT
            Not After : Jul 29 20:00:48 2026 GMT
        Subject: CN=61e2c9d112bceed21b25d90b3cb0efcf2a3a5689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:a6:81:fc:67:f6:fb:56:23:71:1f:54:01:
                    ab:33:fe:f1:26:ef:0f:2f:18:0b:43:57:d3:82:09:
                    53:52:62:f2:fc:91:28:6a:45:63:1e:15:b1:0a:bf:
                    d4:1e:63:ec:c3:a8:05:3d:90:34:47:62:be:62:cc:
                    55:9b:bd:40:9b:e6:52:4b:34:07:fc:42:ab:5b:a0:
                    18:00:bb:38:21:7e:6f:f9:b0:88:02:32:17:aa:2b:
                    c8:35:af:9d:60:57:23:c6:08:09:b6:66:fb:8a:5f:
                    4a:b6:ec:07:19:d4:6b:57:58:d6:fd:0c:75:b9:fd:
                    de:a4:0d:5f:d5:53:77:76:58:e4:25:94:f6:fa:1e:
                    73:8a:66:4b:3e:69:1a:a7:9a:81:a0:f2:5d:1b:d9:
                    51:aa:38:7f:57:73:ab:ee:94:df:29:3a:0d:71:9c:
                    87:58:f7:6b:88:1c:ea:7e:a4:5a:7a:5b:db:0a:8f:
                    71:da:48:87:cb:11:25:3a:ca:a0:ba:c8:51:63:2f:
                    13:74:46:22:82:53:e7:d3:0e:69:25:e6:53:b9:45:
                    b0:f0:e0:b4:7a:be:a8:8d:af:c6:3c:f8:10:ae:1c:
                    27:36:8b:3a:d4:d6:f6:da:a0:56:4a:16:6f:b3:af:
                    3e:4e:24:fd:f8:22:d2:75:31:be:91:6f:79:a7:ab:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E2:C9:D1:12:BC:EE:D2:1B:25:D9:0B:3C:B0:EF:CF:2A:3A:56:89
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:de:55:ca:76:67:8b:ab:26:d5:9f:54:29:30:14:c5:f9:58:
         a7:de:1a:f1:cf:6f:46:44:40:4d:4e:2b:c7:2e:33:f2:db:73:
         78:c2:f0:da:fb:30:08:c1:f5:c4:50:ba:9a:55:6d:79:03:5b:
         f7:c2:8d:26:03:ee:b0:dd:59:8e:f9:18:b3:c3:38:9e:13:1b:
         35:af:da:5e:69:8d:74:bf:a0:2e:a1:f0:cc:b1:05:67:be:15:
         b5:26:9b:5d:06:df:37:d4:a8:49:04:8e:80:82:fe:29:e0:86:
         0a:c3:80:a2:71:aa:33:5d:d4:32:f5:74:36:77:9b:af:8a:c3:
         71:9b:1d:50:44:6c:c6:93:8e:1f:31:08:4f:ab:1c:93:54:a5:
         69:5a:f9:ac:79:48:05:9e:1f:be:e7:de:ab:49:a6:c9:4e:37:
         b0:2b:0d:c8:df:fa:e8:42:71:da:d2:54:33:a9:50:30:3b:0f:
         a0:a7:be:75:26:14:a6:2e:a0:c5:98:1e:73:e4:62:98:bb:43:
         c3:f9:08:51:00:f8:2b:34:2d:82:33:8a:80:bd:fa:88:99:81:
         ac:c2:61:2b:30:46:a5:a2:4f:e6:55:fd:83:25:3c:ee:62:fb:
         cd:df:3e:42:ef:81:b3:76:44:44:8e:07:cb:64:08:fd:b4:73:
         f6:a6:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:10 2026 by rpki-client