Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          MSZtj33ko6AkJp7yWt2oRfEcA8R6t/+0Szl/e/qM65Y=
Subject key identifier:   20:88:1E:32:4E:E5:57:B9:B5:75:27:C2:3E:A4:66:F6:AD:8F:31:38
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       019FAB635F57BB62D91576C507231695F76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 01:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:44 +0000
Files and hashes:         1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: eNpvrvz4RZdyZjrCFsPJwGkSMDLpxdyA8ZB32bGT3bE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:5f:57:bb:62:d9:15:76:c5:07:23:16:95:f7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: Jul 29 01:00:44 2026 GMT
            Not After : Jul 30 01:00:44 2026 GMT
        Subject: CN=20881e324ee557b9b57527c23ea466f6ad8f3138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:6d:af:38:72:7e:56:08:ba:f9:bf:b9:ab:
                    46:5e:d9:e1:1c:5e:84:9f:02:e3:6c:ac:87:1e:9b:
                    0d:18:6d:c4:f0:34:d3:02:a8:34:c4:c8:3d:00:48:
                    12:97:ba:5d:c3:1f:07:a0:6e:80:8d:12:63:9c:bf:
                    88:34:49:d6:85:9e:55:d7:1c:68:c0:d6:21:2d:0e:
                    c9:cc:99:bb:7e:cf:99:a8:a0:20:51:be:ad:28:42:
                    bc:f1:67:21:7e:67:47:0d:d2:a8:af:58:6e:da:a0:
                    c9:5b:7d:05:6f:27:44:66:fb:0e:84:bd:ce:8b:3e:
                    7e:ff:ee:d6:4f:00:bb:7d:ae:7c:cf:f5:e2:76:bc:
                    fa:89:d8:af:2a:c4:0c:aa:3d:cf:08:10:e6:65:22:
                    4d:1d:b4:16:eb:b9:9e:46:60:9e:75:f2:77:9d:12:
                    d0:40:ae:92:9d:bc:e9:26:87:1f:05:79:95:06:3c:
                    39:29:51:3f:56:4d:a1:ad:c3:05:27:a7:29:90:46:
                    e0:5f:98:48:98:0b:b0:da:35:6a:f0:67:21:1c:6b:
                    40:42:31:c9:5c:98:0a:08:a4:9a:ab:4c:ad:f3:d2:
                    d2:4a:77:45:e2:dc:28:5e:2e:1d:13:e3:6e:79:2a:
                    13:4e:12:68:08:e3:f8:ee:9e:d3:2d:51:13:c9:3e:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:88:1E:32:4E:E5:57:B9:B5:75:27:C2:3E:A4:66:F6:AD:8F:31:38
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1f:43:78:b1:74:7e:fd:72:e3:e6:6b:fc:51:a7:76:b3:5e:
         e1:1c:aa:19:71:ba:56:c4:59:73:60:0e:df:97:ea:c7:5e:95:
         ef:75:3c:3e:ab:10:c1:dd:58:78:d4:ab:4b:23:4f:94:5c:31:
         61:e3:62:ee:ca:39:99:fb:b6:a0:0d:5b:01:07:62:14:1d:0d:
         fb:5e:68:89:51:6f:ec:87:0e:c3:56:b6:58:01:08:95:50:c0:
         ce:23:bf:28:f1:45:a7:13:66:2c:b9:b8:4a:e7:97:51:81:47:
         5f:eb:80:4d:e9:e8:7c:1d:99:e9:b8:41:83:a3:ed:59:b0:fe:
         dd:fd:83:24:f0:3b:c6:5d:76:8f:bd:77:76:3d:a1:3f:99:94:
         a0:35:33:c4:92:60:94:14:b7:dc:12:ad:7a:e2:ed:f5:af:64:
         5c:d9:74:bb:a9:e6:a1:73:4e:e4:2d:6b:d5:45:bf:55:9e:90:
         60:8d:94:77:29:b3:5c:ba:db:e2:93:d5:66:e9:aa:ae:e2:8b:
         ad:29:3b:d4:2b:c2:bc:b0:71:e3:63:43:02:30:12:6f:ed:fe:
         e8:37:40:8c:1e:f2:98:e8:82:d8:45:87:ec:73:3a:65:bd:75:
         d2:25:e8:5f:2f:7a:e7:42:5b:3f:f6:87:4b:a0:e1:ac:2f:d1:
         b1:db:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:54:43 2026 by rpki-client