Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          Y5m+9178NGJKdvweUCypUNA6IfeJItapL5z+QHlSP6I=
Subject key identifier:   B4:DD:7D:3D:D1:E4:F1:31:64:B1:D7:8E:D6:92:73:3E:5E:9A:65:32
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       019FAB2CB34E21F2C453F9AC94060B8E548C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          1456
Signing time:             Wed 29 Jul 2026 00:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:01 +0000
Files and hashes:         1: L5BGhmd0saN8xecQNe9wiYjTs78.roa (hash: SbX44mvpZzphunBDxZ1gsi9c+uRL89kA1JQ3kMK3eJg=)
                          2: cgfGejDrVLaUqLSIzCYonqY6EL8.roa (hash: Mq/JUvCV9dSTx3b4h/eSywAPXcHk8+Plfex5qUmVasE=)
                          3: jhWbeo3zbogtegwkjldlY2v1Cmo.roa (hash: jMRPW06nsrBs6eYuP8nzo2cpYTotCTqzqowlQklFSC0=)
                          4: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: rR1ZwQHmwkXZ1/a2VjqzHQLDm4V0pPweGRMagJSMEmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:b3:4e:21:f2:c4:53:f9:ac:94:06:0b:8e:54:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Jul 29 00:01:01 2026 GMT
            Not After : Jul 30 00:01:01 2026 GMT
        Subject: CN=b4dd7d3dd1e4f13164b1d78ed692733e5e9a6532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:d4:f6:68:83:0f:98:b7:b4:ad:90:b5:85:
                    71:69:0e:11:01:39:9b:a9:6c:9a:94:f9:e7:a3:da:
                    25:1f:52:17:6c:bf:49:ce:bc:21:a5:28:ae:43:64:
                    6e:86:59:8c:8f:7c:cf:b5:93:3e:4a:78:47:a2:d4:
                    d5:3b:11:68:ad:e7:3e:1b:c4:23:13:22:80:e2:d1:
                    df:ae:b8:8c:91:0f:e5:ad:2f:9a:6a:ac:fd:73:02:
                    8e:ec:db:e8:a7:04:85:b5:f7:39:30:e6:4a:da:29:
                    c9:a7:3a:db:94:af:1f:28:0d:c7:e9:f8:19:2c:0d:
                    36:49:d0:b3:23:4d:ee:a0:a1:e1:0f:24:af:99:65:
                    85:36:49:82:42:e6:ac:cd:3d:99:b9:54:de:3a:e0:
                    2a:28:27:63:fd:98:e8:9d:50:a1:70:85:bf:d9:a6:
                    f4:28:1b:e7:87:54:92:27:cc:ad:0d:0f:20:17:50:
                    d6:4a:77:10:09:9f:3a:f4:62:27:31:c3:f6:32:c1:
                    c9:ab:cf:cd:6e:71:e0:62:4c:8f:ee:cb:b7:10:ab:
                    5d:04:8f:2a:ad:66:44:62:2e:ce:3f:80:ce:44:9a:
                    2e:de:30:e2:31:2a:8f:5c:eb:08:aa:3c:f9:67:f7:
                    6b:3f:e3:f4:81:b2:dc:e5:65:56:df:b7:23:2a:6b:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DD:7D:3D:D1:E4:F1:31:64:B1:D7:8E:D6:92:73:3E:5E:9A:65:32
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:32:4e:6a:0d:aa:f8:bd:8c:76:3a:52:9a:ba:cd:bd:3c:67:
         c4:8c:37:8a:be:66:5c:58:4a:0f:10:3b:eb:40:f1:31:ba:96:
         9a:42:28:d4:32:c8:5c:86:65:3a:07:e4:04:10:bc:47:f7:d3:
         9f:6e:ad:1c:a1:87:d9:4f:49:d6:43:be:9c:ee:52:5f:d0:3c:
         58:15:13:be:72:47:29:37:fe:5c:df:25:56:d3:03:b6:31:a7:
         a8:73:5d:6d:e2:f6:06:03:d4:0f:8e:83:75:a0:b5:c1:5f:89:
         42:0b:85:dd:bb:39:0f:1a:72:51:dc:9d:be:db:6c:5d:ce:78:
         19:32:11:25:e4:62:96:86:33:1d:e6:b6:a2:14:c6:bf:9d:ed:
         c2:7a:bf:36:e1:5b:2c:ce:4f:52:68:d4:d4:af:4d:6c:da:6e:
         c1:7b:9c:64:40:4a:4e:d9:5e:77:f3:21:a4:fa:59:38:70:3a:
         60:f7:c7:df:b4:78:74:67:23:70:25:76:59:ce:fc:7c:34:a3:
         3e:21:98:a4:6c:15:7b:e7:64:eb:71:55:4f:3f:e2:6f:57:0b:
         f7:f3:45:ea:5e:3e:ef:32:c3:d3:5e:a5:fb:c3:22:13:ee:18:
         fc:c1:56:d0:07:1b:07:60:5a:18:78:13:11:0a:16:49:37:b3:
         ad:93:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:16 2026 by rpki-client