Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          /hbHtjhiwQaVE0Vx9l/vS8P4bc+WQ1Wxl5Pm47EJhx4=
Subject key identifier:   8D:29:9B:33:68:E9:73:80:4D:1F:24:A9:6A:69:DA:95:16:B8:C3:98
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019FAC07D31AACA4944EEA2AC0F27E8A1AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          19FA
Signing time:             Wed 29 Jul 2026 04:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:21 +0000
Files and hashes:         1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
                          2: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
                          3: GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa (hash: YXF5F3qEn+V3ifxgp0F6hZNsJB3RMIymnp6Om4JHbgY=)
                          4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: w6f31thgSmRz+adDo/wET7wjWhJKma6/9j6pa7L6+Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:d3:1a:ac:a4:94:4e:ea:2a:c0:f2:7e:8a:1a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Jul 29 04:00:21 2026 GMT
            Not After : Jul 30 04:00:21 2026 GMT
        Subject: CN=8d299b3368e973804d1f24a96a69da9516b8c398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:67:7f:01:2c:2a:c9:e9:59:e5:7b:37:6b:
                    ad:57:ed:22:e9:dd:18:1f:07:e8:67:4e:2e:b6:c3:
                    e0:3d:d9:fe:a4:29:c7:e0:06:f4:5d:6e:dc:fa:63:
                    f2:77:54:be:27:e0:0e:d8:c7:f1:4b:77:28:b6:47:
                    5f:72:06:32:02:eb:5d:38:4b:a7:e2:42:c1:63:d5:
                    0f:19:0e:11:87:c8:85:bd:c1:7d:f2:12:09:b8:25:
                    7a:6a:05:4b:53:2d:f7:71:85:03:d5:8b:cc:f6:c3:
                    ec:0e:13:0c:a5:ea:43:05:f1:cb:cd:d2:3f:81:f1:
                    87:16:79:0d:88:af:f6:b4:33:58:0e:d6:64:a5:f7:
                    9e:39:d0:51:be:6f:56:05:ea:56:47:5d:c1:ba:68:
                    79:93:99:f8:db:c1:87:22:f7:6e:da:20:67:06:dc:
                    b2:99:6b:0d:d8:47:fb:13:02:e5:e4:33:bf:8a:f7:
                    02:8d:62:99:32:fd:f8:b0:e1:de:75:d1:3d:cf:9d:
                    8c:f7:8e:a0:84:12:e8:05:0a:a9:a3:87:26:42:72:
                    f0:64:7d:63:7b:5c:41:47:51:1c:19:0f:0b:7b:82:
                    08:b8:c9:99:09:49:52:6b:d4:37:17:6f:7c:2d:5d:
                    3d:07:3b:48:88:62:db:95:73:e3:be:3c:e4:4e:d2:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:9B:33:68:E9:73:80:4D:1F:24:A9:6A:69:DA:95:16:B8:C3:98
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:67:ce:87:8c:b3:c6:93:d0:60:ce:3a:a2:f0:fc:92:7c:8a:
         30:14:e1:e0:46:eb:bc:c0:27:5d:08:0f:14:55:c5:07:f0:b1:
         4d:25:cd:59:0d:98:5b:92:03:84:1e:57:ca:20:0f:7b:9a:09:
         26:15:90:a8:b9:5c:1b:cf:4c:1d:e2:74:e7:88:89:43:88:32:
         cd:92:70:c0:21:f8:33:e4:ba:2d:2e:dc:44:5e:a3:f2:63:47:
         75:e9:21:94:2d:5d:d9:95:24:91:34:4d:32:af:bc:5f:3b:56:
         59:b8:28:46:23:dd:d3:cc:4c:c6:44:01:ac:20:3c:a5:cc:0a:
         11:d2:aa:fa:50:fb:2b:a2:04:7f:ab:b2:3d:35:b8:f8:1d:25:
         4e:58:16:10:ec:2a:5a:d6:3b:d8:1e:65:ed:48:e0:99:f7:f0:
         e1:a1:5c:ba:5a:3f:7c:9b:ed:7d:b2:46:2d:1c:d4:11:ca:3a:
         d6:0b:c9:78:25:c5:2c:54:e2:39:98:4d:00:61:16:5c:77:b3:
         e8:fc:37:4d:ea:b5:00:71:19:02:f6:c9:af:e4:f1:4e:85:00:
         9a:78:01:0f:59:33:df:cf:1d:8b:a5:2b:72:47:a4:0d:89:25:
         1e:ae:07:0d:29:03:62:aa:14:ec:a2:e9:d9:56:ae:5c:32:59:
         bf:6c:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:57 2026 by rpki-client