Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
File:                     7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft (raw, json)
Hash identifier:          s98N8ZWChy3NB9cbsSRPxykJg/4CZnuLzVtcN/OaSns=
Subject key identifier:   30:9D:83:C6:A9:EB:76:49:F3:F6:6D:42:C7:80:90:BB:FF:A8:03:99
Authority key identifier: EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29
Certificate issuer:       /CN=ee0ca3308be345b3988c05a2161b165358718329
Certificate serial:       019FAB6346E1D94B15895D82E8122ED43FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
Manifest number:          99
Signing time:             Wed 29 Jul 2026 01:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:37 +0000
Files and hashes:         1: 27qwpEcmCN_n8WXHk92y3bElVec.roa (hash: AGxJBrf7HxUPwaiyEy6FYLKvwl8PQU6C90kD79ZmrRQ=)
                          2: 7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl (hash: GdK9L8nF/PTMbY8TJ7S5uz+bB1iQ6BDHYiSUu8AJ2ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:46:e1:d9:4b:15:89:5d:82:e8:12:2e:d4:3f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0ca3308be345b3988c05a2161b165358718329
        Validity
            Not Before: Jul 29 01:00:37 2026 GMT
            Not After : Jul 30 01:00:37 2026 GMT
        Subject: CN=309d83c6a9eb7649f3f66d42c78090bbffa80399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4f:5e:c3:b3:58:c5:23:2d:04:54:f7:80:c1:
                    36:b4:86:77:22:7e:9b:76:3e:07:9d:e3:6e:22:3a:
                    4e:45:9d:fc:a9:02:c7:97:9b:b1:77:2a:8d:f5:bb:
                    6b:70:bd:72:00:c7:74:c7:95:71:03:0b:bc:71:b1:
                    b9:a5:c3:15:32:ec:00:d6:9a:ed:a2:c5:32:2f:fb:
                    19:84:35:a3:07:3b:28:e1:54:1e:83:61:39:d3:95:
                    25:5f:d4:89:8e:9e:5d:23:87:07:ce:23:7c:c5:54:
                    fc:d1:1e:84:10:59:81:cf:33:0f:d9:e5:c6:5c:01:
                    19:f9:cc:45:cd:b4:dc:6d:03:f2:15:0b:d1:b0:61:
                    b4:b1:c3:a2:7a:7c:70:ab:c1:2e:2a:70:c5:1f:88:
                    0b:04:43:83:c0:de:62:27:1e:38:55:74:32:06:9a:
                    5e:6d:fc:95:72:4b:e3:4c:cd:36:00:fc:b7:78:20:
                    50:90:01:ab:93:65:6b:1a:f6:17:a9:5a:7e:9b:2d:
                    5c:bc:38:ed:77:e9:d1:29:ba:95:de:41:9c:08:b8:
                    ca:0c:a9:8d:50:ef:16:d1:03:58:56:cc:45:18:c6:
                    dd:ac:c0:48:9c:e3:08:56:1a:b2:96:9b:6d:93:88:
                    07:7f:19:f8:f5:b5:52:8f:33:5b:22:d4:c9:c6:41:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:83:C6:A9:EB:76:49:F3:F6:6D:42:C7:80:90:BB:FF:A8:03:99
            X509v3 Authority Key Identifier:
                keyid:EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:3f:9b:be:7b:43:13:00:c2:0f:43:24:5c:a0:d8:e3:39:
         79:60:37:69:8a:b5:c7:fc:2a:ed:e2:ed:20:0b:9f:1d:89:6c:
         74:13:f1:75:50:6e:bb:12:f9:53:67:86:71:37:8c:81:a5:7a:
         b1:ec:c4:fb:67:a4:39:a1:34:d2:5c:d4:ef:42:6b:a8:53:22:
         97:63:d7:37:5a:f1:57:b1:a4:5e:e9:2c:e1:c1:8d:cc:30:1e:
         88:36:e8:ba:3f:44:71:11:20:ab:39:d0:56:97:e9:ce:e4:85:
         87:22:b0:d6:68:ed:6a:4c:08:99:8e:65:a2:cc:75:11:e0:2a:
         a2:4a:43:9a:ae:a6:64:06:59:2d:51:9c:e7:cd:6f:fd:b4:6c:
         dc:67:a1:57:7f:60:b3:69:d4:9c:17:8f:31:5b:35:e6:1e:e2:
         6b:ca:c7:94:d2:be:19:04:e4:7b:da:7a:cf:f8:fb:bd:0f:59:
         11:2e:34:12:8a:fc:ca:97:e3:04:be:35:96:91:35:e0:4d:b2:
         a2:e3:66:b6:53:db:79:27:4e:64:0e:36:f9:b7:ef:65:3d:14:
         e6:9d:46:10:7b:f8:1a:cb:4f:1d:07:d8:b5:7a:f7:b5:81:45:
         88:be:91:d8:65:1b:3c:5b:30:bb:e3:08:6c:dd:96:c9:13:42:
         e2:43:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:36 2026 by rpki-client