Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
File:                     b69IsCuX3C0xIlCqI0CDuMG7noE.mft (raw, json)
Hash identifier:          AHB7HZcHGcmoLsH+fv6NGT/6zK4U6dIJ5TNC6On/9Gk=
Subject key identifier:   C3:A2:13:C5:57:20:13:0E:F0:B7:42:5D:20:19:B4:4C:65:4E:AC:24
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Certificate issuer:       /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial:       019FAC3F55C03C9955C9F68D5DEA0F6CF37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
Manifest number:          0704
Signing time:             Wed 29 Jul 2026 05:00:59 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:59 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:59 +0000
Files and hashes:         1: 6Zutd3yonlJj4XwS7GMHxtEUVvc.roa (hash: l/tcenYOtzjDB6YyDN5UG1nnDU+B/4axZA1MsfwOZMc=)
                          2: 8xv1vaPkjizBV3NIK5wM8RsMA5s.roa (hash: TrXOTC7yyYjoWyoOQWLsGTnU2ndoGtykVNAIqNcdiEs=)
                          3: QW4p8Do_WlAhjY2txysFyPdrUZQ.roa (hash: nzmVTodbSFyYYzKzh3sISWCNfa/t5dMgpNM+0hwiTik=)
                          4: S2Wkhkw9phzNQaRw-wCUFUlveyk.roa (hash: AbDku5gvFqIibLX9hoTuqDLW+74l1bM0t1WcrCt9V/E=)
                          5: b69IsCuX3C0xIlCqI0CDuMG7noE.crl (hash: kwwZj6ifph8JBjF9NbtTbrUmLMkxzv4N9mTrIDw6tUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:55:c0:3c:99:55:c9:f6:8d:5d:ea:0f:6c:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
        Validity
            Not Before: Jul 29 05:00:59 2026 GMT
            Not After : Jul 30 05:00:59 2026 GMT
        Subject: CN=c3a213c55720130ef0b7425d2019b44c654eac24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:59:09:54:06:dc:bd:96:ee:05:50:4f:37:
                    65:17:8a:0b:f5:1a:57:ad:c2:94:bf:3a:cb:da:64:
                    28:9b:f5:cc:93:fd:09:02:8a:43:69:d2:5d:e9:13:
                    80:b5:7f:68:88:d4:88:1a:0e:d0:7d:c3:1e:b0:bc:
                    5a:7c:bd:10:5a:3f:7f:7d:a5:24:e8:ac:0e:b0:f4:
                    a5:fa:3f:57:bf:f7:ab:4d:fd:ca:ad:b5:0c:3e:a5:
                    ba:4a:e2:1b:54:58:dd:5d:70:9e:99:dc:ff:e2:a9:
                    66:3f:d9:20:f9:3f:85:87:ab:9e:02:2b:39:65:f6:
                    73:e1:b7:40:e7:b4:5e:22:a3:6f:ce:77:34:17:bd:
                    a7:c8:65:df:c5:6c:e9:47:a9:cb:14:30:bd:b2:10:
                    43:a7:6a:d3:48:5a:1a:9a:0f:55:86:65:95:17:84:
                    0d:b8:26:ee:5a:82:17:49:ba:74:ff:9a:ab:28:b9:
                    1a:43:b5:7a:07:09:47:0b:64:97:5d:9e:41:7d:c0:
                    42:03:10:e9:7f:03:ae:32:f9:62:f6:db:53:de:a2:
                    f9:f6:e1:b2:d1:aa:a9:32:8b:0a:28:41:c1:9c:2e:
                    96:df:a4:e4:76:4d:ac:c8:65:8b:6d:c4:b5:72:a0:
                    e7:0a:05:30:72:93:d4:94:f6:89:4a:7d:bf:e8:36:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:13:C5:57:20:13:0E:F0:B7:42:5D:20:19:B4:4C:65:4E:AC:24
            X509v3 Authority Key Identifier:
                keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:28:d4:e3:b0:4f:99:b3:b2:69:c2:00:f6:ad:cf:81:03:
         c2:d2:79:e1:95:62:bc:65:0d:a6:8a:ed:8d:e3:1b:07:68:78:
         af:0f:ca:59:b3:24:99:85:fd:17:43:23:69:03:cc:c5:8f:fc:
         41:e4:cc:29:ac:1c:ce:a3:57:48:b0:ca:57:72:53:2e:64:15:
         a8:6d:38:b3:4a:76:46:dc:ca:02:1a:87:0d:49:9c:c7:1c:54:
         8b:ff:ca:2a:db:f0:ab:a4:69:b0:7a:20:b5:52:d8:77:f0:1b:
         2f:4b:b0:00:b5:78:2c:a5:aa:ac:92:e5:11:f3:ea:a6:19:48:
         17:2f:ab:96:49:6a:58:72:3d:6b:41:71:aa:fe:e0:7d:3c:21:
         80:61:16:31:85:15:ae:dc:80:85:c3:da:c1:7f:3f:52:1f:dd:
         1d:18:32:c5:de:29:7d:b8:a9:de:92:45:64:0a:58:73:24:5e:
         02:9a:f0:f0:0c:11:34:03:eb:7e:6c:a4:ec:d1:91:87:36:81:
         60:a2:d4:ab:e0:39:6d:6b:a0:8a:45:24:b9:82:d9:dc:97:0d:
         7c:40:73:70:d3:bf:ac:38:b9:91:39:8c:d8:af:1a:05:02:9c:
         52:af:4b:18:67:91:af:07:e1:c8:c6:49:14:e5:5f:4d:e0:37:
         de:a3:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:49 2026 by rpki-client