Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          4qKkRdecH5H4JGEA98dSN7PXTPsIJyjjplAmI8Q2w9I=
Subject key identifier:   79:33:C5:41:B3:15:39:25:A9:C1:78:87:B0:4A:31:9D:2E:3F:4D:D4
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       019FAAF5814405EEC4D0B4366B00F0BDEB6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          198D
Signing time:             Tue 28 Jul 2026 23:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:43 +0000
Files and hashes:         1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
                          2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
                          3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
                          4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
                          5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
                          6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
                          7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
                          8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: WBoUu3c5BqiurnFtsEMHdWvZqbamcLhXWQKnT9FFjbI=)
                          9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:81:44:05:ee:c4:d0:b4:36:6b:00:f0:bd:eb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Jul 28 23:00:43 2026 GMT
            Not After : Jul 29 23:00:43 2026 GMT
        Subject: CN=7933c541b3153925a9c17887b04a319d2e3f4dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:26:93:c0:3d:05:5f:e8:57:33:c4:f5:6f:f4:
                    5c:a8:79:0b:f0:53:12:18:bb:48:b2:dc:f2:47:73:
                    dc:9e:99:5f:ad:48:f2:c7:be:fe:51:97:74:8e:97:
                    9a:63:fe:c6:c1:5c:58:92:94:4f:90:94:7f:6d:2f:
                    e4:9a:a8:b9:07:d7:9c:f3:94:93:c5:01:0a:ad:c3:
                    c8:eb:8c:60:f4:7d:d8:83:7b:c7:cb:47:71:48:75:
                    35:4c:2f:cc:26:20:c6:82:d8:86:44:22:33:ba:b5:
                    6d:1b:88:74:89:1a:3b:47:06:e0:5b:3b:37:f4:e4:
                    95:89:d2:bf:5a:19:53:fe:76:63:70:15:4f:55:7c:
                    fe:cb:c2:f6:af:57:d3:9d:8d:8b:74:a2:df:c0:4d:
                    fd:92:a3:a2:79:9d:a9:36:be:1b:eb:d3:78:00:50:
                    b7:18:c9:b2:51:51:0b:27:32:e5:41:ec:3b:d7:51:
                    55:22:91:78:7f:8d:6d:8e:73:a6:01:c3:dd:99:fc:
                    29:4e:32:9d:21:06:f9:db:e4:47:9b:81:b2:9a:28:
                    99:aa:7b:3e:bf:c8:09:2d:cd:82:41:8e:da:84:07:
                    e9:05:1a:98:7c:d3:3d:2a:34:14:f2:2e:12:d1:a2:
                    26:19:28:e3:ef:2f:11:de:51:a7:2d:57:74:3b:ed:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:C5:41:B3:15:39:25:A9:C1:78:87:B0:4A:31:9D:2E:3F:4D:D4
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:10:74:78:8b:11:e3:52:31:c0:6c:bb:b7:f2:f3:3c:a3:eb:
         63:26:91:e0:30:23:c0:ff:2f:09:b0:47:c8:b0:bb:f2:e6:82:
         fa:17:ba:1b:aa:c3:09:82:3f:a6:2c:75:31:f2:b0:d6:92:08:
         e4:7e:5c:ab:8e:7e:18:d1:c7:6a:ed:00:5e:a3:a9:91:e0:2b:
         ac:38:b3:d7:25:7c:66:db:a1:b1:92:df:ff:a2:95:d2:91:c1:
         1f:0f:ea:5e:ea:e0:ac:5d:7e:1b:fa:02:b8:1b:ff:1f:92:52:
         0b:00:53:10:d4:d4:b2:7f:82:a0:af:5d:a8:08:ac:fe:f1:94:
         4c:47:9c:bf:3b:dc:b0:c8:9c:d7:6e:0b:2b:9c:99:72:36:3a:
         92:bd:c8:b9:6e:8c:0c:11:d0:0f:8d:6e:92:7f:12:bb:ae:00:
         ea:ac:89:68:19:41:a4:3d:57:08:a2:c3:bd:41:b6:4c:d7:4d:
         b8:c3:60:35:7d:bf:88:2d:d2:39:17:67:ae:0b:a0:79:9f:43:
         b7:af:7e:0a:40:8c:ea:51:55:2a:88:40:2b:ae:d1:d2:a2:a4:
         aa:eb:d2:a4:62:47:39:cc:c9:0b:a5:c4:63:51:40:3f:82:cd:
         18:cf:3b:ab:ad:70:d6:59:0b:d2:db:03:fb:e2:f7:49:d8:27:
         56:55:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:01 2026 by rpki-client