Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          vV4HfmcfqiVmhyek7QiuVLxfBm5vXAwO4j9VD4s0PVI=
Subject key identifier:   6A:0C:9B:75:61:79:34:98:B0:4C:08:1B:C3:2F:01:3A:9B:D0:47:ED
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019FAC3EBD7FF6A96EBB7E66836B5C8C8889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 05:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:20 +0000
Files and hashes:         1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: 43mEwcVLUxSMZENwrhpdjZ9iCq7M4sny08xGwfLe6w4=)
                          3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
                          4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
                          5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
                          6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
                          7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
                          8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:bd:7f:f6:a9:6e:bb:7e:66:83:6b:5c:8c:88:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jul 29 05:00:20 2026 GMT
            Not After : Jul 30 05:00:20 2026 GMT
        Subject: CN=6a0c9b7561793498b04c081bc32f013a9bd047ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:8b:17:40:a1:ea:f5:ac:16:48:4d:5b:26:
                    ba:1d:b7:5a:f5:4b:1c:97:28:2d:40:2d:0b:82:91:
                    92:e7:37:d7:5d:cd:b5:55:55:8b:38:80:14:25:0e:
                    b1:3b:03:3c:08:a6:e4:ae:e2:4c:a6:a6:fd:1b:a3:
                    42:bd:74:ce:9c:43:21:12:54:97:e3:62:b7:3d:d1:
                    85:72:9d:8f:82:2c:11:18:0f:82:cd:a5:51:bb:9e:
                    07:80:cf:ca:a8:75:b0:e8:a3:f2:a1:7a:80:c5:75:
                    3f:98:f1:24:2d:77:1b:58:71:82:47:e4:65:d4:ab:
                    2b:81:79:ff:41:10:20:a6:53:0b:a4:62:b1:9a:e6:
                    bf:d7:71:49:30:e7:50:65:84:a5:97:df:c1:7a:9c:
                    39:08:1b:97:7b:7a:65:66:b1:50:fb:a6:e3:1b:7f:
                    32:66:bb:5d:30:33:df:27:89:08:ef:24:19:15:a6:
                    ce:92:d2:c6:0a:34:8d:fd:8f:76:ad:56:8b:0f:49:
                    1a:4d:04:72:78:62:b9:58:34:09:3f:36:21:78:e2:
                    84:1d:c9:d1:83:f7:47:24:ea:f3:e0:91:05:49:f7:
                    14:26:78:bd:2e:00:01:10:b8:15:7a:3e:99:a8:37:
                    bf:5b:38:35:ba:93:af:5b:02:ea:f7:55:c9:10:f8:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:9B:75:61:79:34:98:B0:4C:08:1B:C3:2F:01:3A:9B:D0:47:ED
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:c5:77:83:70:1a:9e:bb:ab:bc:bd:45:73:bb:4a:b1:81:
         2a:73:7d:82:db:ac:ca:7b:46:ad:89:3b:fc:09:06:4a:35:37:
         3e:9a:c4:03:3d:26:0f:1b:36:e7:32:b7:4c:18:b8:ff:e6:87:
         52:aa:0b:19:19:28:f3:34:ed:a1:8c:0c:4e:d3:ae:8d:b4:46:
         3e:57:66:34:32:02:4b:dc:b4:ef:63:cb:3a:6c:d3:e7:32:24:
         aa:03:d3:a9:74:01:e0:8e:e5:2f:65:08:e0:7b:c9:d8:34:62:
         29:ac:d7:23:d6:fc:f1:2f:a1:e2:98:57:5e:14:d5:ff:65:bb:
         0d:a6:0c:5d:d6:bb:c6:13:4c:3b:e6:ab:31:09:c6:c0:d9:29:
         81:09:e7:8f:ac:d5:c1:eb:cb:8f:43:55:ac:76:fe:de:95:39:
         94:a3:c2:3e:f7:58:75:4c:b0:ae:38:5f:1e:28:72:07:b4:b2:
         1a:b6:0a:63:f5:e3:91:cc:ba:97:85:86:1c:a4:71:43:72:b8:
         ff:2f:ca:b2:90:e2:7d:61:79:12:46:fb:92:60:26:8a:c8:db:
         1c:c9:9b:20:dd:9b:17:ec:aa:8f:0e:f8:0c:43:9b:70:d5:20:
         09:14:ac:45:54:89:31:83:ff:1a:b7:91:68:a7:b6:25:06:dc:
         05:de:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:55 2026 by rpki-client