Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          FPx/vjrp/DCXG2yKr0WweZWW7Dm3ztnesgtDx+wgCi0=
Subject key identifier:   6C:D5:14:5A:C0:66:AE:85:1A:36:F2:0F:39:98:80:00:FE:D4:69:63
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019FA9E3419F700C28819CA5FABDF003BE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          1734
Signing time:             Tue 28 Jul 2026 18:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:10 +0000
Files and hashes:         1: 0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa (hash: VhKxH0518mejo08ToVhYHPgDOHhInMaaDygZ1dTqm3Y=)
                          2: HYc8PMbOFsRAWOME7rl0Q65YY00.roa (hash: 52xFMZrAWpFOsty+L7I8JPsQwCx7ytoOFt1BHFVVDH0=)
                          3: RQbysAt1GgspnWOfwyBwad4EPWw.roa (hash: vfkA0hp4PretiDOgOmfw6YA3bRwSiVq26snYswjOLco=)
                          4: TEEO5INFoFOS-MGXLrvKsA4z6og.roa (hash: T0NYFqzX6is45agO0ikp5meW9VU+vzUTgYc02wqqV0s=)
                          5: kNrttXxRkvGtSS-ZxC6SB63f7PI.roa (hash: ejrGju4Fa38mlMegmP+17sgwP0nRgaGrfvKHwJ3IgXI=)
                          6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: u2FapoTNmzQhSg3XIebkqix350i6usHZ0vW6wMt5bMA=)
                          7: p4r6oFVf_7adlAVGWXJxKf8EppM.roa (hash: owCMZC+EfEJsGbITAZGEtQMox//iXNzQga5JAwM4WlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:41:9f:70:0c:28:81:9c:a5:fa:bd:f0:03:be:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Jul 28 18:01:10 2026 GMT
            Not After : Jul 29 18:01:10 2026 GMT
        Subject: CN=6cd5145ac066ae851a36f20f39988000fed46963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:11:ef:3d:21:f5:bc:0c:68:08:a1:ab:da:
                    73:fc:2d:df:01:f0:cb:38:e6:e9:c7:a8:63:28:b4:
                    a1:8f:5a:be:f0:df:ea:3f:d5:07:b0:03:bd:32:38:
                    f4:a6:52:fc:bf:bb:84:44:9b:c2:92:f2:5c:38:35:
                    db:c3:dd:fa:49:3d:da:35:a6:34:4c:38:c6:20:7d:
                    fc:2a:f5:0f:4b:70:8f:c9:6f:68:dc:5e:d2:02:ce:
                    7a:18:8a:69:67:4c:8b:94:e5:ad:7f:ed:2a:e0:22:
                    1e:9a:d5:75:09:6a:f7:6b:e4:c6:fb:b8:72:f7:09:
                    9b:d6:bf:59:bc:81:a8:3d:01:24:fb:eb:c0:7d:5f:
                    8e:9a:3b:fe:f3:54:22:d0:ed:0c:77:62:69:09:7e:
                    3e:47:ae:24:31:81:74:00:3f:99:74:ae:af:2b:a4:
                    58:85:1d:76:f0:0e:96:0e:55:f2:7e:9f:14:30:ba:
                    62:50:ed:19:9e:0b:2b:cc:9b:f0:a0:23:c8:09:e8:
                    93:b0:92:45:75:51:07:9c:25:1a:6a:5a:2e:c5:7f:
                    b0:05:72:de:14:fb:59:8c:8e:0d:5e:6a:d1:89:45:
                    ed:0e:8d:3f:0a:68:00:6e:ee:48:01:38:a2:92:d5:
                    80:aa:ad:8e:24:bb:b4:5c:00:69:81:09:1e:50:2e:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D5:14:5A:C0:66:AE:85:1A:36:F2:0F:39:98:80:00:FE:D4:69:63
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:ec:7d:61:45:62:7b:cd:e3:82:c5:76:52:51:a5:10:4a:
         18:ac:6f:0e:74:2b:84:3e:5e:c6:09:b9:fb:7b:63:ef:75:5e:
         e2:cf:6a:60:e3:a3:b6:c6:12:d6:e8:cc:a3:71:8a:f5:1f:64:
         87:51:fb:f6:55:e1:70:db:4d:0c:9f:27:c4:64:c5:d9:ff:f8:
         5b:73:82:94:6e:9d:a4:0d:aa:27:ec:d0:c6:7b:05:d3:96:1b:
         db:cc:87:08:e1:f6:eb:ae:a8:ea:47:68:ba:e0:ec:be:2a:83:
         64:8d:a2:a9:3e:23:2d:f4:39:ac:93:2d:d1:1a:1f:7c:34:9b:
         40:27:86:a7:c2:c0:88:ef:41:f9:e4:e2:bf:82:38:2e:6d:c0:
         52:59:ac:4b:2d:64:f2:d9:16:17:62:46:90:d4:05:37:ed:fe:
         3b:a9:1c:05:10:a4:e1:2e:19:bb:20:a0:fa:5a:ac:0b:6f:f9:
         ec:08:6f:4b:10:33:f0:f0:48:fe:64:3d:29:2c:83:ba:9a:5f:
         35:75:0b:d5:a1:7c:61:90:86:07:5f:c4:52:df:a2:56:dd:b9:
         54:f7:14:41:45:a3:57:90:4f:cd:ad:45:e4:ab:8a:a3:33:8f:
         56:83:15:57:18:ca:e4:b4:0b:f6:9a:d4:34:1c:f4:61:be:40:
         b4:eb:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:37 2026 by rpki-client