Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          lW9rMvczCvCQHp8Ero25dH0bAUJhTmFL3xIbnfTg6VE=
Subject key identifier:   18:34:8F:2F:EA:5E:E9:B6:9C:DC:4D:27:F4:96:2D:C8:C2:32:1F:71
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       019FA9AC6C6B31B8A1DC29E9E9835F7B4117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          1458
Signing time:             Tue 28 Jul 2026 17:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:16 +0000
Files and hashes:         1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
                          2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: 5+r1BXZbSAlHepPw03RTb2KOnyOjfpDUJLOEHtH31fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:6c:6b:31:b8:a1:dc:29:e9:e9:83:5f:7b:41:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Jul 28 17:01:16 2026 GMT
            Not After : Jul 29 17:01:16 2026 GMT
        Subject: CN=18348f2fea5ee9b69cdc4d27f4962dc8c2321f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:d6:bf:14:ce:39:30:9e:27:4c:20:56:62:
                    c6:3b:a7:53:5b:49:97:23:8c:bc:dd:e9:9e:76:61:
                    a2:fb:a8:2f:88:c0:fc:63:8e:5a:5e:e6:00:37:c5:
                    bc:68:fd:2f:3b:2f:db:2b:04:83:4e:27:4a:9a:da:
                    69:5e:7b:e8:86:53:df:59:d1:d9:da:1c:25:b8:ff:
                    63:f8:5b:ef:db:d0:b4:ed:8d:6d:e2:a7:40:2e:c2:
                    da:6a:20:7e:95:06:4c:58:7e:a2:48:81:e0:5a:5a:
                    dd:8d:f3:e3:c5:4f:5c:ee:b0:22:03:63:34:37:17:
                    c8:69:fc:55:15:75:d4:f8:ac:6a:b0:bc:ca:45:fa:
                    83:7b:9c:83:54:d0:4a:1d:d9:c6:95:0c:41:8f:6d:
                    7b:bb:c3:f8:b2:b5:df:6f:cf:6d:f7:7b:77:18:c0:
                    32:df:a3:92:01:08:e7:02:08:50:cc:d9:4c:1a:39:
                    85:b1:91:36:0e:22:d1:8b:ee:18:ef:15:33:f5:4c:
                    c0:a7:ac:89:df:4c:8d:8d:24:cb:12:ad:c7:8e:c1:
                    6f:08:76:81:c9:bf:ab:1b:6f:f4:ef:97:95:22:70:
                    d3:27:57:8f:b2:1e:f5:59:44:e1:1c:72:ce:de:78:
                    11:86:39:72:15:2f:b4:a1:ef:64:6b:01:ac:d4:9d:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:8F:2F:EA:5E:E9:B6:9C:DC:4D:27:F4:96:2D:C8:C2:32:1F:71
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b3:5c:5c:d7:6b:76:c7:13:76:e7:14:84:ea:22:61:ec:cb:
         54:5d:8a:77:4a:19:b9:96:a0:d3:de:70:5f:15:e0:77:99:79:
         5c:bc:e0:d9:a3:77:60:4b:cc:be:18:8f:37:14:46:6d:cf:14:
         5d:06:65:99:3b:0c:50:93:62:7f:d9:73:18:e8:e2:80:21:14:
         1b:e8:c8:53:70:69:d7:84:dd:1c:0f:07:7d:d1:92:bd:d4:7b:
         a1:d4:98:90:a5:21:e5:a5:e3:d0:48:bd:00:c4:bb:1f:6d:34:
         83:96:de:6e:bb:e9:8c:44:d1:e5:70:7e:46:62:cc:ea:a6:5b:
         f5:eb:f0:9e:f1:73:01:6c:bb:77:17:ba:f3:77:8e:35:ba:c6:
         60:f5:ee:a4:76:28:5f:d0:25:89:60:23:0e:8f:73:f4:ed:57:
         1c:1b:92:31:28:28:0d:35:8f:2a:d0:5c:42:14:79:af:8d:00:
         13:7d:0d:0c:f9:65:d1:c0:20:52:d2:93:3c:f6:72:f6:71:a9:
         7a:1a:9f:5d:c3:af:90:a9:64:a2:fe:87:eb:2f:a0:a3:be:02:
         7b:0a:bb:14:50:e2:7f:54:5b:ef:be:7f:6b:e0:bf:61:e4:4c:
         43:d0:5b:20:73:19:c5:8e:a7:41:80:a9:56:3a:d7:15:33:12:
         2d:e4:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:46 2026 by rpki-client