Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File:                     I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier:          TwrSCB6SlQtM038YEw0H2yDOBYLdzPBuaKf9Rb8ccZY=
Subject key identifier:   60:70:51:E2:DE:A2:31:11:54:79:B7:40:05:10:30:1A:AC:8F:EA:8F
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       019FA8D0699FE6AE2F2FA6ADD84A03E9F979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number:          1793
Signing time:             Tue 28 Jul 2026 13:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:58 +0000
Files and hashes:         1: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
                          2: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
                          3: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
                          4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: Qid8ml62BxwMiKRIsqMGQJRFDqnVD+/aY+MHLrPGExU=)
                          5: InZzXVL8KHJoCW3P7j1vC_LCtX0.roa (hash: UZuietxe/VlvBF04H5Qn/Q3JuczTSHQbjD8HNRbl0Y4=)
                          6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
                          7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
                          8: ew5GxWmNdi8APxJ7DnyuV397vVY.roa (hash: scbuflEbcOaCfZ8YsAmmUBvMpXLhScUEwCDFhgE24W8=)
                          9: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
                          10: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
                          11: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
                          12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
                          13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
                          14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:69:9f:e6:ae:2f:2f:a6:ad:d8:4a:03:e9:f9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Jul 28 13:00:58 2026 GMT
            Not After : Jul 29 13:00:58 2026 GMT
        Subject: CN=607051e2dea231115479b7400510301aac8fea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:99:3d:38:8f:88:64:49:05:bc:7c:99:92:
                    71:81:a0:e0:86:8d:2a:aa:7f:6e:7a:6a:7d:93:ae:
                    26:24:8b:17:50:c8:26:ea:09:47:d6:08:f8:32:db:
                    30:02:68:ec:60:c5:e8:47:db:7f:ef:eb:18:33:2f:
                    4b:12:f3:72:20:b4:4e:14:7f:f5:ab:61:87:43:be:
                    a5:df:e2:fa:9c:04:87:fd:74:dd:c4:2f:17:7f:89:
                    41:ed:a1:e0:3f:b8:e3:58:ec:3b:39:e5:eb:43:cd:
                    c0:08:dd:c4:07:fd:21:1a:2d:ec:53:fe:bc:3a:84:
                    f7:19:a2:da:af:be:00:11:36:7a:4e:46:1a:a9:c7:
                    57:08:e2:ca:49:f3:c6:11:dd:c6:19:4e:82:78:32:
                    c9:90:3b:e6:fd:ec:22:ea:7b:5e:f5:01:db:79:1e:
                    1b:f4:a2:53:7f:f0:79:08:2f:69:55:e5:10:88:89:
                    ba:ab:45:b6:13:bf:43:00:37:80:77:7d:86:19:09:
                    ba:85:7d:f6:75:9e:72:7c:c5:8e:78:30:7c:8f:83:
                    5e:40:c8:69:c2:41:82:19:3a:f1:c4:ae:cb:3d:c9:
                    38:5a:3a:f4:66:77:2d:e2:9b:75:87:4e:a9:ac:8b:
                    be:44:80:7b:b4:66:30:65:40:4c:18:4c:3f:e6:f5:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:51:E2:DE:A2:31:11:54:79:B7:40:05:10:30:1A:AC:8F:EA:8F
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:57:0e:92:56:70:54:08:3d:64:03:78:c8:8d:f9:c6:bf:
         28:21:9d:62:cb:aa:6d:59:31:4d:8b:6d:55:d5:bd:61:43:b1:
         e2:82:96:a0:d6:dc:f1:53:a6:b7:3e:6a:85:2c:d3:b4:91:10:
         3e:5c:bf:9f:90:57:de:5c:d7:89:67:df:5e:d0:7d:fe:42:57:
         9d:07:68:ee:2c:26:c9:f5:5b:f7:c8:80:28:e6:4c:3a:ce:ea:
         8e:bd:54:32:9b:1c:49:42:c6:82:21:00:09:ef:d3:ad:d5:2a:
         fa:9b:db:9e:ca:1f:80:e7:fe:03:33:c7:c3:ad:22:ad:e4:0e:
         a7:85:92:21:59:85:f0:01:92:28:0e:a9:76:36:53:88:d0:3e:
         70:b6:13:2f:7b:d0:d5:30:32:25:44:ce:1c:bd:da:94:5d:e7:
         16:dc:72:a4:ab:8f:9a:e5:94:ce:ca:e5:c3:d6:5f:1f:5e:58:
         82:9f:25:98:d2:1b:da:c5:ff:5a:c4:b3:0c:3e:e8:8e:f3:0b:
         15:5c:52:b5:88:3d:47:b4:88:4f:08:b7:28:d7:e7:d8:03:df:
         96:fc:9a:ce:1c:de:4e:e4:8d:5f:84:1a:45:fd:ff:c2:72:e0:
         20:e4:c8:e9:b1:68:c9:ba:68:13:ea:15:18:1b:80:30:3c:11:
         19:0f:28:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:14 2026 by rpki-client