Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File:                     mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier:          eiPUpvAztQZiuRAeKkP7IjWg3kwOS/tEKRAfDynoJNc=
Subject key identifier:   9D:62:E7:6F:2A:6F:BD:BD:B9:A3:C4:34:1B:E4:E4:0A:C0:42:3D:BC
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer:       /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial:       019FAB2CC34706CFC65ABC9E348E48DB8E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number:          0179
Signing time:             Wed 29 Jul 2026 00:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:05 +0000
Files and hashes:         1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
                          2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: Ot403/zAed49hH+kGS4eGZIcDVJpggJdqMYmhMn6Ku0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:c3:47:06:cf:c6:5a:bc:9e:34:8e:48:db:8e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
        Validity
            Not Before: Jul 29 00:01:05 2026 GMT
            Not After : Jul 30 00:01:05 2026 GMT
        Subject: CN=9d62e76f2a6fbdbdb9a3c4341be4e40ac0423dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:9a:56:68:f3:90:f9:b6:e6:86:0c:5c:fe:
                    e2:8e:a2:19:96:4e:12:74:30:8d:d8:4f:34:52:e1:
                    6c:9c:60:c3:28:59:8a:09:d8:c8:bf:43:d8:db:f4:
                    e0:78:dd:55:10:ba:3e:e8:3b:e1:b9:a9:b0:0a:58:
                    51:53:95:89:56:0c:1e:ec:db:58:09:a7:12:9a:fb:
                    fa:7f:73:6c:4b:46:f3:c0:27:3d:8f:9c:cf:de:78:
                    5b:a7:b0:c3:d5:44:48:89:2d:a9:2b:19:88:6a:cd:
                    0a:3a:4b:f5:3a:b3:11:d0:d4:0d:1e:b8:c8:d6:ed:
                    88:06:07:25:19:f2:b4:62:d2:83:64:8b:da:a4:d7:
                    92:cd:24:d0:a6:f6:23:06:51:c5:96:18:1a:2f:b1:
                    47:37:8a:ed:f5:4c:49:77:88:59:77:a7:af:ba:f9:
                    b7:09:8d:27:03:7a:b3:07:4c:9d:b8:87:ea:9b:ab:
                    67:eb:bf:16:09:88:36:37:8a:b7:43:af:be:eb:8a:
                    65:5a:f2:1f:06:25:4c:fc:5b:07:b5:48:03:32:34:
                    ff:78:38:4b:ce:fc:9c:34:1e:46:9d:66:73:cb:0e:
                    81:15:c9:44:5b:3b:cf:55:44:32:84:9e:a9:c2:ed:
                    d6:5a:b8:c3:e6:aa:60:73:99:b6:95:ba:ff:74:73:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:62:E7:6F:2A:6F:BD:BD:B9:A3:C4:34:1B:E4:E4:0A:C0:42:3D:BC
            X509v3 Authority Key Identifier:
                keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:32:0a:c7:b6:f6:d4:e3:b0:78:05:f1:1f:01:b3:fd:d6:29:
         39:41:1f:7f:19:10:42:fc:e2:a9:28:77:17:6d:50:fd:bb:60:
         e2:cb:ed:81:d6:2b:fa:5b:39:4c:72:51:2f:b3:7f:8e:3a:d7:
         f9:da:a4:2a:5d:b5:c2:92:57:48:81:36:95:18:3b:6a:82:da:
         a0:bf:37:c0:6a:f9:90:ea:b2:84:48:98:03:ba:5d:82:bf:06:
         0a:2c:5a:d2:c4:f3:a7:60:91:7c:f3:de:bc:4a:a6:07:92:f4:
         e0:35:59:07:2e:da:fe:1e:1d:9e:7b:51:e3:4d:ca:b8:3c:31:
         65:80:80:13:80:67:76:b2:b7:61:72:65:a3:ec:f5:e8:2d:e4:
         e1:04:4d:4b:b5:ed:c7:dd:9e:16:da:72:ee:5b:a0:d1:9a:b6:
         92:61:68:7a:53:e2:dc:26:eb:79:d0:c7:84:19:85:57:98:d0:
         b9:79:65:51:98:5f:14:d4:40:da:18:28:1d:4d:87:cf:74:1c:
         2d:b8:6c:42:4d:b0:2d:99:81:9a:a4:45:80:e1:50:f0:ac:d1:
         b2:e6:9c:a3:e3:07:ed:b8:a5:45:a0:69:7c:fa:5f:5a:fe:4c:
         9c:ac:c7:45:6a:16:52:5e:40:61:70:6c:11:5a:90:e0:bb:1f:
         6c:20:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:46 2026 by rpki-client