Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File:                     cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier:          tOblY8Gor4x3+sGDNxN5J6gpNop10pw6XLeQ0xBeEi0=
Subject key identifier:   6A:E5:9E:48:E3:EA:F0:99:32:AF:6C:AC:BA:8D:CB:B7:FF:16:11:BC
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer:       /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial:       019FADF643A67A503733B2D870B3E5E91637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number:          0DF0
Signing time:             Wed 29 Jul 2026 13:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 13:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 13:00:25 +0000
Files and hashes:         1: 16srEBoxiiP_SLONARpHEy8GOoo.roa (hash: +6A67bqXKJfVetajXvC/jcqmg3rLZdsfP1x5JHp+/TM=)
                          2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: ZXPen33ZrHh5sRaOTS+9Fe67wby3E10f0+xMgWYGKmw=)
                          3: fERV_JWJtZ06djuribfR-EanimI.roa (hash: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=)
                          4: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (hash: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:f6:43:a6:7a:50:37:33:b2:d8:70:b3:e5:e9:16:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
        Validity
            Not Before: Jul 29 13:00:25 2026 GMT
            Not After : Jul 30 13:00:25 2026 GMT
        Subject: CN=6ae59e48e3eaf09932af6cacba8dcbb7ff1611bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:64:40:17:50:78:7a:cc:1e:a6:ed:5a:cf:
                    f0:20:9a:45:69:e4:2d:0b:5a:a6:69:3e:64:9f:fc:
                    37:74:48:6e:97:25:1f:a6:d3:a3:e4:50:fd:63:fe:
                    d8:1e:1e:49:f2:9d:2f:93:fa:5e:1e:d6:80:45:3b:
                    0f:64:35:28:0f:da:c0:05:cc:37:d8:79:47:43:4b:
                    13:7f:01:75:fb:9f:9d:67:ab:42:0e:05:55:a4:20:
                    7f:e0:24:a3:fd:4b:2d:de:b0:4b:22:08:f1:4f:27:
                    a1:01:89:67:e8:60:0b:3d:58:9c:a9:1b:68:9e:ca:
                    b6:d2:69:93:fe:98:df:51:e6:b5:81:e8:54:e0:56:
                    3f:14:9f:9e:79:c4:85:fd:ec:ac:7a:14:d6:2f:60:
                    28:8d:f3:82:78:86:b6:fe:45:fd:03:0d:06:a7:d0:
                    99:26:72:c1:c5:9e:dd:34:b5:16:14:28:21:a2:30:
                    0f:94:85:26:db:e0:2d:a4:1f:49:43:a8:16:f8:81:
                    b8:b0:68:ca:55:27:2b:83:03:b9:85:6d:89:6e:6a:
                    87:df:54:b3:84:27:24:fc:8c:33:a9:95:01:4e:72:
                    73:23:b5:f8:57:18:e6:96:b0:de:e1:2b:f9:0c:b3:
                    e5:b2:9f:40:fa:27:e1:17:06:c3:04:99:4b:ce:30:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:9E:48:E3:EA:F0:99:32:AF:6C:AC:BA:8D:CB:B7:FF:16:11:BC
            X509v3 Authority Key Identifier:
                keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:d2:69:5b:12:cd:63:95:bc:43:1c:d0:35:92:d3:35:78:
         a1:e6:bf:1b:ef:62:49:c9:e2:c8:e7:1d:3b:67:4d:1c:c0:0c:
         7e:1c:a4:4e:de:35:0b:81:ef:b1:8a:17:a1:2a:f6:75:8a:e1:
         0c:32:1e:bb:fb:73:f9:cd:8a:9c:3d:0d:4a:28:4b:d4:e2:a1:
         93:df:82:8b:84:5b:49:e1:38:9a:90:55:b8:78:71:79:a5:fe:
         d4:45:b0:26:5a:c5:15:a2:fd:0f:6c:33:25:87:0e:6a:6a:52:
         d4:f3:64:a7:26:69:92:f3:c0:a5:0f:83:9c:60:48:9e:6b:af:
         84:e3:58:4f:ef:47:75:d8:d5:30:02:ba:56:91:3c:06:c7:74:
         30:d1:55:b1:90:9b:f0:ac:ed:ed:b8:72:07:aa:6c:76:31:71:
         c6:dd:97:35:b5:c4:4c:cb:34:2e:0e:fe:3a:7e:f3:33:0f:2a:
         d4:e8:1b:12:45:8f:5b:40:19:02:0e:cf:99:19:f8:01:bf:41:
         5a:25:97:e9:8c:74:b6:0f:6b:7b:0e:c4:03:a0:0e:4a:15:f4:
         91:20:d1:b8:fd:b1:c6:95:80:e2:c5:d5:ff:21:2c:3f:f0:3c:
         94:ed:bb:97:e8:d1:10:34:9c:7d:c3:7d:f8:f8:14:c5:4d:ae:
         b0:aa:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:37:04 2026 by rpki-client