Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          vuoXsMNw6NBy8Yiie9t7qAw4w++ZbankgnKHvEOMm14=
Subject key identifier:   A2:96:A1:3D:D6:06:13:29:6F:D9:E2:94:30:26:1F:ED:E2:24:32:1F
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       019FA7F4559B3626FE4A557206FA6836EDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          19FB
Signing time:             Tue 28 Jul 2026 09:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:35 +0000
Files and hashes:         1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: nf+8Q/Z2xlzQJY15MzS6tAeH2fDubcxV+/PGQN7pve4=)
                          2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=)
                          3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=)
                          4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=)
                          5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=)
                          6: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=)
                          7: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=)
                          8: ODquW4yfiTrN0BslpesyLROdhCU.roa (hash: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA=)
                          9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=)
                          10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=)
                          11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=)
                          12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=)
                          13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=)
                          14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=)
                          15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=)
                          16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=)
                          17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=)
                          18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=)
                          19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:55:9b:36:26:fe:4a:55:72:06:fa:68:36:ed:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Jul 28 09:00:35 2026 GMT
            Not After : Jul 29 09:00:35 2026 GMT
        Subject: CN=a296a13dd60613296fd9e29430261fede224321f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:c2:d6:ae:cd:6d:8e:24:9f:b7:9a:9f:18:
                    da:03:52:fa:37:0c:66:cb:9b:69:2c:0d:5e:5c:96:
                    02:9b:5b:b0:6b:7b:7e:71:c6:7a:7a:ee:43:39:d7:
                    f4:ac:9d:26:cc:ba:07:b7:9f:e7:08:ed:34:26:45:
                    47:76:f8:92:99:ec:76:47:2f:c0:41:e5:73:13:dc:
                    97:58:47:20:e6:d2:a0:67:2a:f0:0f:88:5b:44:c5:
                    2e:a4:00:ee:91:db:e5:78:46:2e:a2:dc:98:e5:5a:
                    3f:93:ab:c0:22:39:34:0b:98:e6:71:49:3a:2b:93:
                    a1:5c:b9:69:17:a8:70:b6:ec:df:bc:7c:e6:cf:51:
                    20:99:53:9c:56:c8:84:ba:f3:51:1c:54:9d:7b:09:
                    14:7b:e0:61:fb:e2:79:fc:f4:fb:11:65:d9:6d:2b:
                    9c:2d:25:df:8a:c8:ac:be:69:e6:36:26:94:5b:15:
                    2c:c2:96:0d:61:fd:d2:53:17:6b:f4:f7:72:94:a9:
                    0f:8e:5c:b2:1f:53:c7:b0:27:38:4b:7a:21:a2:9c:
                    09:c6:3e:b9:2c:e0:9b:5f:07:6b:51:bd:e8:8d:06:
                    78:e7:2e:76:11:a4:4e:fd:51:5d:f1:ba:a4:f2:85:
                    ee:81:4d:2b:4b:b9:83:dc:97:10:02:e4:ff:a5:aa:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:96:A1:3D:D6:06:13:29:6F:D9:E2:94:30:26:1F:ED:E2:24:32:1F
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:94:1c:d0:fd:89:2b:5b:f0:d3:cc:fe:00:31:76:e2:af:e7:
         c3:c5:14:c3:d1:c0:2c:67:19:61:03:a8:e8:4a:06:01:c9:bb:
         2f:97:0c:90:87:dc:c3:ee:32:e5:9d:4e:36:05:c7:fc:32:50:
         23:a1:d0:10:5c:d8:c7:cf:1e:9f:d3:d1:d5:51:43:2a:2b:d0:
         ae:4e:b0:e9:10:95:4d:3c:80:5e:59:54:7b:df:ee:d0:37:fa:
         99:01:0e:9f:05:8c:e4:1e:54:9d:12:31:91:f1:ed:85:69:af:
         47:cb:de:a1:fc:f2:b2:a8:9b:48:44:dd:22:71:ab:bb:f8:11:
         bf:a3:b2:cc:09:9c:0c:09:32:5e:d3:e4:9e:1a:f6:d9:7d:8c:
         f5:d5:c7:2a:0c:49:ad:64:dd:bd:83:ac:87:8e:d5:d2:fb:07:
         88:28:89:8a:2c:33:c2:d4:d9:bd:79:c1:9f:96:88:e2:24:a6:
         e3:4d:1e:f7:25:c3:08:85:2a:f4:77:df:db:88:d0:4b:8e:13:
         b7:9c:d4:6b:51:e8:01:40:f0:da:f7:de:80:81:c3:5d:2f:44:
         bd:b3:c1:a9:0a:38:9f:e1:10:c2:6b:2d:99:f6:86:89:7f:9c:
         87:e3:a1:c1:82:5c:45:79:19:c4:d6:84:3e:3b:3c:b4:20:8b:
         6b:d8:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:50 2026 by rpki-client