Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          mVJmTpgl37Z/viLiL3OyhaRNjNG00E8rdmCyUrQtH1Y=
Subject key identifier:   1B:E7:E7:05:25:60:A8:C6:AC:BA:DD:9B:3F:1A:B7:75:03:FF:BA:19
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       019FAC3F6199D21A611222AA85AFE9DF78EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          06FC
Signing time:             Wed 29 Jul 2026 05:01:02 +0000
Manifest this update:     Wed 29 Jul 2026 05:01:02 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:02 +0000
Files and hashes:         1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
                          2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
                          3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
                          4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: PA7pQqfAOYnpAotyY9UxLpd32InokGYVI9RnTprdO+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:61:99:d2:1a:61:12:22:aa:85:af:e9:df:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Jul 29 05:01:02 2026 GMT
            Not After : Jul 30 05:01:02 2026 GMT
        Subject: CN=1be7e7052560a8c6acbadd9b3f1ab77503ffba19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:d6:41:97:1d:7c:31:68:c1:b4:73:41:cd:
                    00:bd:d4:c8:8c:c3:7c:fe:79:45:4a:ea:c6:a9:cc:
                    23:a9:15:1d:68:9d:f8:bb:48:2d:c1:37:b8:34:a4:
                    03:38:33:4a:11:62:a7:99:58:4c:a3:15:76:36:34:
                    c1:37:04:d7:57:17:63:f0:58:6c:86:68:a8:fb:ef:
                    11:0d:44:0b:38:7c:19:a6:b7:7e:62:61:64:d3:aa:
                    de:5e:52:14:c2:f6:26:fc:20:06:a7:d3:a5:ad:dc:
                    b6:fc:58:93:f6:8c:5b:03:66:1a:31:89:12:fb:61:
                    b6:f9:72:a9:92:ad:5e:6c:68:2f:0d:2b:54:9c:15:
                    57:9e:7b:a1:77:ce:e2:cd:8b:5e:f7:79:77:4d:2d:
                    7e:56:39:f6:98:e3:7d:8d:7f:80:63:2c:01:b2:be:
                    1e:63:e3:a8:31:2a:71:7b:33:54:a9:32:33:4f:0e:
                    41:d6:82:76:d2:90:8d:74:f1:98:a5:66:04:ee:44:
                    4d:36:d6:9a:a7:b8:a7:6b:81:4c:1b:5c:90:a8:51:
                    92:3e:50:74:16:65:c6:3c:a9:ff:0e:8b:7f:e4:12:
                    18:8a:2f:ee:f4:b0:96:c8:29:ec:f1:85:3e:1d:04:
                    aa:2f:7d:6c:4a:f3:67:d8:08:cc:16:97:a5:c3:56:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E7:E7:05:25:60:A8:C6:AC:BA:DD:9B:3F:1A:B7:75:03:FF:BA:19
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:df:17:0f:92:59:47:83:7a:85:98:15:1f:6a:f9:4e:2e:
         50:bd:19:3c:9d:d5:18:96:f9:44:dd:e4:ff:dd:1c:aa:b1:ce:
         fc:32:ac:a8:1f:90:aa:65:f6:0c:9c:69:b9:cc:4e:a8:36:d6:
         71:d1:a1:f9:ae:c7:99:85:a9:a1:60:28:e7:63:b9:37:40:f5:
         2d:86:76:80:3c:9b:30:5f:48:91:7e:27:9c:fa:3f:31:b4:c0:
         1c:50:4e:e7:93:41:40:af:39:ce:85:9d:64:f3:d7:79:e3:8c:
         3d:35:81:46:c8:a2:de:85:e6:2c:59:19:58:7e:5f:25:db:46:
         fd:74:f8:d8:41:e0:5f:0d:61:e0:f3:db:23:8b:ca:5d:11:2c:
         70:d3:31:95:3d:af:b3:d6:d6:c2:b9:cf:6a:9c:64:d6:04:5a:
         d9:7e:b5:ff:99:22:48:7f:88:27:79:e5:e4:8f:4d:fe:6c:1d:
         f0:91:15:9c:a8:c8:2d:f7:41:16:d2:ae:d4:a6:9a:29:de:22:
         cf:57:2f:f2:e2:75:9a:8d:96:b4:2a:1d:fb:52:39:0e:ed:04:
         9b:26:4b:83:9b:53:f6:5a:64:35:82:cd:cb:f3:d3:cb:f5:25:
         b3:a4:51:9f:71:52:46:d8:fc:5d:39:fd:b8:15:c3:d3:2d:65:
         2d:b0:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:04 2026 by rpki-client