Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
File:                     fdq9ZIcR0M5WmJiW77c6DmXpczk.mft (raw, json)
Hash identifier:          syxAZl/AonARWpPmt5+gezrRjgHSF0xlb9lZm65u66I=
Subject key identifier:   DC:84:81:CB:0F:AF:3B:97:AC:18:39:5F:C7:73:58:FE:8E:E1:70:D8
Authority key identifier: 7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
Certificate issuer:       /CN=7ddabd648711d0ce56989896efb73a0e65e97339
Certificate serial:       019FAC7652C1DEA16E2406943890A295897F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
Manifest number:          48
Signing time:             Wed 29 Jul 2026 06:01:03 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:03 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:03 +0000
Files and hashes:         1: K60hVPLSPVtUpielhkzPMTSO0aM.roa (hash: G37NAr4nS+/pnxGye8gLOv9acyLCoKW6Bim3ph2z7sw=)
                          2: fdq9ZIcR0M5WmJiW77c6DmXpczk.crl (hash: DyRKYWzQXmqOO0so0g4mY++HZt9oRZ7m4G7jnlqpmWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:52:c1:de:a1:6e:24:06:94:38:90:a2:95:89:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddabd648711d0ce56989896efb73a0e65e97339
        Validity
            Not Before: Jul 29 06:01:03 2026 GMT
            Not After : Jul 30 06:01:03 2026 GMT
        Subject: CN=dc8481cb0faf3b97ac18395fc77358fe8ee170d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:29:ff:2c:6f:aa:da:6d:a6:be:82:92:c7:
                    5a:f2:c1:5e:88:e9:b2:3e:2b:73:46:2e:11:89:a8:
                    08:37:97:b1:a2:14:cd:c4:6c:6c:dd:f0:3b:9a:ca:
                    c0:11:54:b8:21:b4:30:35:37:3b:d1:3c:ca:a7:30:
                    ba:45:1b:36:44:e6:f7:c8:83:65:c9:63:7a:33:bd:
                    2c:9c:31:b5:56:0c:62:ad:52:52:84:32:9a:62:eb:
                    0a:60:4a:d5:22:b8:fb:a6:3c:89:30:a6:ea:19:15:
                    5e:bf:fa:ce:c3:dc:1e:5d:f7:1e:31:8b:48:f7:4a:
                    2c:e6:ea:35:a9:48:f9:9c:1f:f4:5c:b7:38:2e:58:
                    54:fc:85:df:5e:9c:a9:d0:13:e2:91:de:0d:b1:e0:
                    15:06:55:70:c9:5c:15:4a:9d:5b:4c:c8:68:83:94:
                    62:db:31:c2:78:ef:c5:41:16:13:8a:bd:f8:ed:ea:
                    46:eb:8a:10:5d:c4:e1:4a:63:d2:b3:9a:62:42:8c:
                    4e:1a:e5:61:4c:b1:35:66:9a:12:08:8c:7a:3f:61:
                    25:f3:4b:4d:70:7d:e9:9e:49:e6:31:ce:9f:55:af:
                    79:76:48:dc:90:48:aa:e4:df:45:d8:19:76:03:09:
                    4a:ea:64:93:50:18:d9:de:31:7a:ea:1e:f7:3d:2b:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:81:CB:0F:AF:3B:97:AC:18:39:5F:C7:73:58:FE:8E:E1:70:D8
            X509v3 Authority Key Identifier:
                keyid:7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:8d:88:f1:7c:25:9a:6c:09:f2:61:4b:eb:bb:f4:c7:80:
         0b:19:85:e9:ce:17:ed:dc:7d:97:0b:9e:8b:ae:5b:c4:5e:0f:
         13:82:e3:75:bd:21:76:d9:73:3f:5c:81:5f:37:2d:a3:97:74:
         a4:c9:aa:fa:32:09:4a:33:7c:5b:6c:ce:a2:6b:d2:39:6e:b2:
         6e:a7:e0:fd:82:3b:64:fd:4c:9a:11:db:fb:62:7a:b4:ed:f3:
         8a:63:d6:ec:55:17:b7:98:0c:6f:fa:e7:d7:2b:bc:35:0f:bd:
         62:43:b8:07:e2:04:ef:69:37:b4:8a:38:11:98:ee:ff:60:10:
         da:82:63:d2:30:20:c6:b9:fb:d4:f3:08:08:21:dc:e9:2c:8b:
         e6:af:cc:1b:7f:8a:ca:31:c9:e5:b0:aa:d7:a3:79:3e:fd:89:
         a6:04:b9:94:7a:73:68:33:14:23:b2:ad:39:f1:76:4a:d9:8b:
         6f:81:9c:3f:85:e2:0d:09:42:af:f8:d9:82:1a:b8:c9:39:18:
         6e:b5:f6:13:d6:41:4b:0b:50:77:16:01:25:a3:22:1e:44:e1:
         e2:2a:13:9b:3f:84:71:60:be:79:ad:dd:28:23:74:ec:21:83:
         d0:8e:26:93:29:0f:01:83:b4:01:72:7f:69:8b:93:36:12:95:
         9e:4b:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:05 2026 by rpki-client