Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          YzCvD84Ruqg/HZDbv3RhiiqXvd/6p2pt9cCJZEjjCEg=
Subject key identifier:   B4:92:3A:E5:5A:4B:9A:25:7E:42:8C:92:28:08:AD:4C:60:84:90:27
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019FA8D03898C12D6961F89C8E19AF2BF865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          1927
Signing time:             Tue 28 Jul 2026 13:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:45 +0000
Files and hashes:         1: 6sfcsooGMCFXO1kWatFbvvr1zLA.roa (hash: QdFq68T0MyS7t2slIEEx1ooDTbclHUWKKj4eUylZI2c=)
                          2: NpiHnYFexffpXlY55BYzjfAHv4w.roa (hash: KMdyac6MZ5qBRRQr/k2XUi4yNROOCzI2aVOuefuG2aA=)
                          3: WrWzBEncYcxkc-a46XxrWRG30y4.roa (hash: 3BGfxi0WT8XUNNL8UKXsVqPQk7yH3Dfp1aLhOELVb1Q=)
                          4: XXFvo0LwN5fFxfFhs7wIa9afeec.roa (hash: SfaEqekBPYoxq/TIPc/MEtTssLDFzyVZM05mRJ5aA7A=)
                          5: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: aa3Jih23lBUUabu0xUB2batBI2OduCC035TDKTDJ9KU=)
                          6: vjwSSPjssAJWg17wdB8nOax9NPg.roa (hash: +Skus1QTMfLkZcv6BWomJpA4+khM7/pNQ8k90KcyWes=)
                          7: ywS_DWFhfGT_5zoyX1YZLjOr-0I.roa (hash: NiPKJPuTp/RkYFR2X2m2JVeorjDmkEEV8OJgWiusFQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:38:98:c1:2d:69:61:f8:9c:8e:19:af:2b:f8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Jul 28 13:00:45 2026 GMT
            Not After : Jul 29 13:00:45 2026 GMT
        Subject: CN=b4923ae55a4b9a257e428c922808ad4c60849027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:4d:07:00:c4:cf:8c:24:0f:27:0a:fc:7b:
                    ff:22:f3:e6:63:71:39:d3:6e:17:d8:02:40:61:2d:
                    e0:4e:3f:87:db:66:c7:19:28:74:0f:1c:21:da:c2:
                    70:58:07:ff:99:73:2e:86:18:42:42:06:52:27:2f:
                    63:e4:ce:f6:98:f3:cd:f9:a4:d8:63:ba:ed:f3:8f:
                    f1:cf:90:74:94:1e:17:d6:f9:cb:47:5d:dd:59:41:
                    91:c7:57:d0:d1:32:14:c8:7a:a5:a1:a1:5b:6b:e8:
                    e7:e8:9f:bd:17:da:3b:99:3c:6f:d0:b0:3f:b8:0f:
                    53:10:6d:38:94:06:e3:2e:e6:2e:86:bd:c6:04:64:
                    b5:c2:a3:ef:9b:3e:7f:aa:3e:2a:62:52:56:c4:4c:
                    c1:b0:c2:0b:e9:f4:e0:6b:2d:ac:b4:4b:39:72:16:
                    8a:81:de:d5:44:95:25:b1:b3:af:0c:22:4e:6b:22:
                    89:bb:01:25:5e:2c:6d:3d:c6:26:55:b1:5c:a9:d8:
                    00:ea:02:3e:00:90:33:16:db:46:9c:3c:6c:7d:63:
                    fc:57:7a:8f:39:ae:21:2b:72:2d:92:c9:f3:ba:36:
                    aa:07:43:2b:7c:55:e7:58:bd:65:38:39:f6:4c:67:
                    d4:4d:18:f3:4b:f8:ab:70:cb:df:6f:7c:f3:af:16:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:92:3A:E5:5A:4B:9A:25:7E:42:8C:92:28:08:AD:4C:60:84:90:27
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:20:eb:57:95:d3:7e:25:39:4e:59:ba:78:33:3f:01:70:c0:
         2f:c2:38:ea:01:80:ae:4f:3e:ce:65:4b:8d:91:be:9a:90:3f:
         35:be:7d:8c:ee:42:22:09:7a:40:e2:dc:c6:f6:cb:03:5b:70:
         cb:b9:be:a8:a4:14:d0:23:14:24:06:1b:d5:95:e1:6e:bd:e8:
         36:36:30:a2:69:a0:99:b4:65:33:9a:1d:64:3e:97:11:3e:5f:
         dd:9c:dc:77:6d:33:cd:b1:54:60:ac:f9:20:96:1d:88:e0:f4:
         2a:98:a2:1b:e9:08:f8:2c:c2:d8:05:a6:b8:24:60:e3:76:81:
         47:20:69:77:9f:1d:33:2c:7a:70:57:15:62:af:a1:01:dc:70:
         33:bc:4c:55:8c:c4:5e:be:c1:c5:51:77:77:35:65:f7:dd:21:
         6c:d4:4f:1e:8b:d8:d7:5b:0c:09:b7:ee:fb:44:fb:06:86:58:
         ab:92:58:f9:bd:15:ad:d4:20:30:d9:64:58:6f:72:d9:16:53:
         53:39:f7:4a:53:f4:d8:8d:c5:bb:4e:97:30:52:8b:2a:85:00:
         40:e8:f3:01:ad:17:fd:f8:4d:51:83:fd:6d:ae:2b:70:fd:a6:
         f7:59:de:01:fd:0a:6c:26:5a:fa:2e:f6:e6:0d:67:50:bb:db:
         04:56:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:44 2026 by rpki-client