Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
File:                     Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft (raw, json)
Hash identifier:          b42tB3KH+HXXEFZ4LjIM6xDE7/rOeQ4gNoxuo24oGA0=
Subject key identifier:   39:77:6B:35:5D:DF:4B:78:2D:8C:49:95:35:BC:AD:FA:93:EF:C7:D1
Authority key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Certificate issuer:       /CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Certificate serial:       019FAA889B548DA6A497A636EE5AE04AB59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:47 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:47 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:47 +0000
Files and hashes:         1: 5xGTfTQ4NQ6rMqpH3tDID_way78.roa (hash: F8H1Pp6BX6Q7UzR7IW00zFxASJYxtUwFmEz2td8WBTs=)
                          2: BWH36-bel5gTA_6A5H2Vs5lFhpM.roa (hash: w2VVqzjO7mvV0ab7JuRfyw+tb/CiyS8XdVuLVmyQYFc=)
                          3: Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl (hash: 4ySUo+8qirf1GeVa0hkBqYX8jpTQGRHh4kVC0gDrME0=)
                          4: TFrFCFoNGOrEr-0X10FQhSCvIIM.roa (hash: 7CgOjycwa7iUcHPLxP4Ia/ozXApop9buE9JwEyEF3YM=)
                          5: uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa (hash: TVOgxQIfQpHq2V2Hd2KnY6QeGGGPCyJ5eRO9EBWn8xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:9b:54:8d:a6:a4:97:a6:36:ee:5a:e0:4a:b5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
        Validity
            Not Before: Jul 28 21:01:47 2026 GMT
            Not After : Jul 29 21:01:47 2026 GMT
        Subject: CN=39776b355ddf4b782d8c499535bcadfa93efc7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:2c:53:2f:bc:d2:d1:d8:94:a4:02:91:80:
                    04:52:97:20:30:1f:a5:12:ae:03:ba:3e:14:7a:c4:
                    05:4a:f8:7c:4c:01:4b:1c:d4:c3:89:82:9b:db:29:
                    0c:fb:04:2e:8e:0d:82:79:dc:75:7a:6b:28:0c:4f:
                    03:bf:34:e2:5b:7b:1d:dd:0b:08:1c:00:d7:1a:1b:
                    ee:f8:81:e5:79:3e:13:77:3b:a0:9f:52:eb:9a:9c:
                    14:5f:bd:05:50:e0:53:a6:b2:43:8a:9e:31:22:63:
                    0d:e0:79:47:1d:13:14:ae:a8:c3:6e:c9:ec:00:f3:
                    8a:39:02:b7:93:bf:57:b1:f7:6b:4d:0a:6f:6f:a7:
                    c7:08:da:07:0d:12:12:03:a8:2a:8b:be:03:32:7f:
                    73:48:60:00:7d:7c:36:7f:1c:85:58:4a:bc:c5:5c:
                    2d:2e:72:c9:3e:43:80:d0:75:21:35:5b:f0:32:33:
                    44:c6:52:4f:ac:fb:87:b3:f8:69:33:0f:34:49:b2:
                    78:6c:9b:7d:26:2b:2f:97:21:0a:43:2c:ae:66:69:
                    56:91:c7:a8:1a:31:a5:41:27:00:63:66:e3:09:d6:
                    db:44:e2:47:a7:b3:c0:86:ca:10:91:45:6a:d2:b9:
                    dc:2c:93:cf:73:7e:c4:6c:ec:dd:73:6e:5a:c0:f7:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:77:6B:35:5D:DF:4B:78:2D:8C:49:95:35:BC:AD:FA:93:EF:C7:D1
            X509v3 Authority Key Identifier:
                keyid:17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:1a:92:8d:70:9c:85:c6:5a:27:0c:9a:24:52:b8:89:e7:
         c3:6f:36:80:1f:de:9d:38:dc:93:96:ee:ed:f7:90:db:a2:be:
         f0:b2:8c:16:ad:ec:88:ba:d7:ba:2f:59:b1:ec:75:e7:e7:c4:
         3e:72:30:f6:47:5e:5b:c9:6f:05:f5:b9:e5:6e:72:61:08:48:
         57:a3:37:6c:36:a8:f3:c7:ec:ca:d6:df:64:b1:ef:9c:da:3c:
         c2:77:b8:e8:bd:d1:9e:39:7a:3d:dd:4b:c4:a5:12:3f:15:48:
         f5:ba:d6:95:2d:4c:18:37:11:2b:8f:d7:3d:dd:87:6e:72:4a:
         0b:9b:97:7a:c7:b8:12:21:ad:c6:ca:5e:7c:46:02:9b:ce:73:
         91:ee:c6:6f:fd:a2:9d:e4:0f:b3:25:15:92:38:ad:93:be:c7:
         09:97:64:33:38:43:e3:74:05:d9:32:3d:0b:c4:38:f8:48:28:
         be:5f:7b:f9:ab:63:57:3c:ce:df:d3:d9:15:13:36:fe:5c:05:
         c6:b7:a6:80:94:21:d3:f5:2b:2d:f8:cf:a0:0f:d0:d1:29:88:
         b0:a9:61:34:9a:45:5c:31:a1:ca:c2:28:c4:6e:64:75:01:2a:
         90:fa:8c:2a:76:58:16:5c:8f:68:de:99:b5:03:12:3a:ed:96:
         16:f6:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:03 2026 by rpki-client