Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          RX2KnDa5dC4v7ZkIPUa6IibKvJ3Q/gLgCd35rAvSETI=
Subject key identifier:   F4:7F:E5:4D:FA:26:EA:9B:23:C4:A8:7B:DA:6C:B1:74:18:CB:3A:2E
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019FA90790C235E06CF6D3F3944D78BE7AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          0AC7
Signing time:             Tue 28 Jul 2026 14:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:13 +0000
Files and hashes:         1: 1tT6-zSUf6pEClW_lKEL7VHiKiE.roa (hash: X43xYghLS0syhIw7JXoh8hzfwP6Xl71o8J3+Q4661gM=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: o8konWsxBVsglnPRkFH1ygkOfek9/lSF/fYxYYke1HU=)
                          3: DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa (hash: 6F6Qg6kxedLXKk4s17Vv0in/fOumsyERMHRreHir8U4=)
                          4: dIlVX31KigJ6uzmopk-08_s9BaI.roa (hash: qfVMhGQ1p1bTL3qJOPoO+zrwFToB6+GUrIK7ZBJ8Guo=)
                          5: pRYI-6UQ3yoFuethzPMKeOEwBNs.roa (hash: 9Jr2qQjo4i1NAgsOB4ab/Qa+eaYNGkm+we9jGg2Kgcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:90:c2:35:e0:6c:f6:d3:f3:94:4d:78:be:7a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Jul 28 14:01:13 2026 GMT
            Not After : Jul 29 14:01:13 2026 GMT
        Subject: CN=f47fe54dfa26ea9b23c4a87bda6cb17418cb3a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:ba:9c:70:f8:0f:e8:77:9a:06:99:e6:a7:
                    f5:53:80:ba:39:0f:23:c7:b0:f6:91:8c:6b:4b:22:
                    60:da:5d:04:a1:c5:47:d8:e0:a9:d6:b6:9f:4f:2d:
                    d0:d7:87:45:1b:f7:44:d9:16:19:57:08:53:50:f8:
                    a7:8e:27:ca:5b:c2:43:97:b5:a6:0b:65:ae:a5:3f:
                    fb:72:77:9a:d1:2a:29:80:e1:88:94:8e:5c:c6:80:
                    be:a8:23:db:fd:c0:77:22:ca:5d:cf:e4:de:68:5c:
                    95:7f:5b:7d:07:61:03:ab:5d:fe:58:04:f1:ca:01:
                    94:12:85:f3:58:1a:7d:3b:ed:ac:c3:5e:e1:1b:8a:
                    75:3b:47:f8:ad:ea:a4:ac:ba:af:af:41:0c:36:d2:
                    2f:60:33:1c:28:4d:f2:f7:ee:d1:8a:29:08:74:fb:
                    23:36:42:41:84:0e:ed:0b:40:6a:d0:47:10:30:de:
                    83:57:be:54:cc:ec:e7:13:4e:ce:87:47:86:8d:b3:
                    28:73:42:41:71:b4:47:90:07:7f:4d:b2:3a:17:37:
                    c9:fa:35:ed:71:fe:79:62:f3:da:26:a5:20:2c:c3:
                    68:8a:d9:f1:7f:ee:2d:18:19:51:2a:03:50:90:66:
                    df:db:3c:bd:89:71:05:f1:c7:be:95:80:12:13:5c:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:E5:4D:FA:26:EA:9B:23:C4:A8:7B:DA:6C:B1:74:18:CB:3A:2E
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:58:16:9a:95:1b:4c:95:c4:fd:5b:b6:46:12:c6:06:39:31:
         01:d3:f5:f6:af:f3:99:8a:90:d5:a7:58:17:fe:a0:b8:cd:10:
         cc:6f:72:b2:86:30:a9:a6:9f:57:76:63:f6:08:2a:47:89:07:
         73:dc:5d:f7:65:9b:d5:46:51:d3:47:15:4f:9c:9e:07:d0:c7:
         d4:b3:9a:e5:f3:a2:fa:7c:0c:f5:85:c6:af:9d:5c:d2:56:15:
         84:ea:81:8f:85:b2:b4:4d:05:97:e6:1d:35:d8:f9:56:c7:6e:
         a6:be:2d:b4:ad:20:67:7e:09:be:cc:5c:ec:5b:22:2f:0c:39:
         33:1d:c2:14:70:c1:3b:bb:07:45:9b:1f:98:17:b7:07:68:d5:
         2c:36:b5:8f:16:3e:1c:d4:2b:5d:62:16:29:9e:96:2c:d1:39:
         ce:29:9a:36:f6:82:3f:9b:58:9c:56:b0:9a:06:08:93:46:7a:
         c4:dc:24:ab:91:d2:4b:60:55:a8:4e:d2:be:e1:46:44:db:eb:
         20:1b:b2:ac:99:58:04:8d:60:2e:2f:db:51:b9:97:24:19:aa:
         3f:1f:b9:59:41:b4:cc:07:69:2a:1e:80:31:ec:46:25:67:47:
         45:0c:7a:64:57:a4:b5:4d:65:e2:04:f2:81:1f:33:68:af:59:
         04:81:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:49 2026 by rpki-client