Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File:                     dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier:          3uYr5QdVhj2Wtt9e3aNOWVk9IyzFh8R7xcSObZvOvAE=
Subject key identifier:   FA:84:60:F5:AF:9E:93:35:14:B4:80:53:B4:28:0C:6E:E8:4E:3C:8B
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       019FA97508092160A07FFB21A2EB45AA9792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number:          17FB
Signing time:             Tue 28 Jul 2026 16:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:46 +0000
Files and hashes:         1: QJLzAcYEPZtusCbKyGwUQTxHEC8.roa (hash: s6kRRpAzDax5R6PcyME5uOuvdqUfyGUTl0Dg3M3bEJY=)
                          2: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: vblB2bow3j1VqH49Tzyl/XrQ2n48WAktv8P6y3nYORc=)
                          3: ujwOpmvI7_mtFn1fgbJBHjBrEAQ.asa (hash: 5KjvP6td+WHS3IxTZC55ymoYHpGObpqQTR6nNfLeSvo=)
                          4: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:08:09:21:60:a0:7f:fb:21:a2:eb:45:aa:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: Jul 28 16:00:46 2026 GMT
            Not After : Jul 29 16:00:46 2026 GMT
        Subject: CN=fa8460f5af9e933514b48053b4280c6ee84e3c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6f:f7:04:3c:5e:f1:f0:7d:74:77:87:07:36:
                    0f:5c:f3:5f:00:b9:a9:ec:20:0d:18:5d:ea:6a:a7:
                    5a:d8:83:8b:49:5c:7f:b1:8b:c0:44:36:c4:b9:9b:
                    4e:fa:49:80:1c:c6:3b:52:a9:3b:5a:ba:d2:f7:9a:
                    33:17:8f:b8:5e:37:a7:0f:88:08:47:1b:39:ee:a3:
                    43:c9:d5:93:43:b0:6d:5d:ed:80:08:9e:f8:8d:20:
                    08:98:eb:23:21:5a:b2:76:a3:6c:21:63:1a:10:29:
                    be:bd:19:0a:cc:bc:11:c9:6e:34:46:66:35:f4:c0:
                    df:c6:5c:d3:11:33:20:12:68:cf:01:1e:8a:dc:77:
                    ee:2e:f5:00:35:27:63:16:7f:80:59:60:94:50:70:
                    de:b0:0d:c6:7a:20:af:91:bd:67:80:be:bc:6c:5c:
                    a7:e3:e2:8f:5c:30:96:4b:71:10:16:73:e0:e3:87:
                    cf:6f:37:06:05:f3:c7:fa:8f:8b:2e:0e:19:8a:27:
                    92:1d:ae:0f:38:4d:31:33:56:6d:da:5f:32:13:68:
                    26:c0:0a:f5:2c:6c:ff:dd:03:43:62:47:fc:18:45:
                    f3:32:2e:fa:30:18:7a:83:18:84:33:b4:0c:96:ca:
                    94:d4:e5:41:cf:6a:d1:11:02:e6:74:bf:f4:5e:c1:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:84:60:F5:AF:9E:93:35:14:B4:80:53:B4:28:0C:6E:E8:4E:3C:8B
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:7a:24:55:47:51:24:46:5b:0f:1d:a9:b4:b4:a4:4e:a5:
         33:fb:c6:22:1f:8b:e6:41:5f:a3:7f:4d:d8:79:14:fe:8b:5e:
         fa:9e:66:4b:7b:9b:63:c2:67:b2:2f:ce:bd:4a:9c:27:a6:16:
         8e:1c:91:f9:0c:07:c5:23:55:6b:00:2c:fe:ba:42:eb:85:02:
         96:18:70:65:52:49:15:7c:ef:44:72:57:d4:f9:00:e7:01:18:
         c0:31:c2:94:60:d8:15:03:5b:60:b6:f4:c9:7d:a7:0f:b3:11:
         c9:ab:b1:a1:d3:93:8e:ab:0f:43:c6:a7:2a:31:ce:be:1f:a4:
         61:89:92:f4:01:dc:49:c2:7d:75:21:98:2d:25:d0:d2:ad:63:
         ad:bc:20:fb:02:ca:f7:b4:b2:e7:56:84:79:d4:e4:97:cd:6d:
         3b:82:fc:cf:7c:08:24:bc:c6:85:88:f4:b1:e6:c3:77:41:51:
         78:9e:03:a7:ab:30:44:4f:55:56:f7:31:89:76:9c:fe:be:7e:
         19:d5:56:7a:90:60:86:fd:89:02:dd:6f:6c:23:bc:5e:fd:8c:
         f1:c1:f4:3f:42:c9:3b:a2:23:b1:0d:1a:dc:92:61:02:0e:4c:
         ca:ad:5d:c0:c7:b8:a7:78:f9:b8:d5:89:3d:c1:41:65:42:99:
         7d:1c:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:32 2026 by rpki-client