Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          RWwR/sz9ai9fRNPz8Bp299J4puFI/MkwA7cvQCIm4VE=
Subject key identifier:   53:6C:4D:11:2C:FC:FF:8F:4F:0B:3D:25:78:4C:66:7B:0D:5F:87:DF
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       019FA8CFD82FDC4832C569F755F90826C35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          136A
Signing time:             Tue 28 Jul 2026 13:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:21 +0000
Files and hashes:         1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
                          2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: whYhHzufcp9gyOt0n4St2kvtATT3piH+tQtIiXyqUKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:d8:2f:dc:48:32:c5:69:f7:55:f9:08:26:c3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Jul 28 13:00:21 2026 GMT
            Not After : Jul 29 13:00:21 2026 GMT
        Subject: CN=536c4d112cfcff8f4f0b3d25784c667b0d5f87df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:d7:9a:47:28:72:3c:18:32:df:60:ad:f4:
                    1f:33:cd:54:89:74:ab:a3:5c:12:e6:50:cf:e1:90:
                    73:57:97:3a:40:8a:5d:d6:0d:b5:bb:ca:3f:61:94:
                    39:5c:ac:0e:38:c1:6a:1c:75:5e:ee:85:22:89:d4:
                    19:f6:0d:ab:52:36:87:cf:d8:6f:e3:02:42:e2:55:
                    69:1f:49:fb:9f:30:ef:43:c0:35:5f:f6:35:83:8f:
                    14:63:4c:d2:f6:47:30:c2:14:6e:b6:fe:e7:2e:df:
                    26:e6:d5:bf:a8:07:73:36:9d:8e:0c:26:7e:13:01:
                    db:73:d5:ee:b2:a3:50:33:1e:91:e9:1e:5e:05:6b:
                    f8:90:14:53:10:d6:45:15:99:c7:0e:8c:05:6d:af:
                    23:5c:92:3f:3e:30:6b:5e:14:f7:bd:18:66:f2:f3:
                    a3:22:83:eb:57:b6:f4:18:e2:c0:a6:df:92:3b:16:
                    76:82:1c:1c:54:25:74:28:0a:e6:81:a9:0a:3b:ae:
                    2f:3c:52:80:ff:e3:00:9e:b3:0c:dd:e2:f2:db:d3:
                    9a:38:64:f8:26:7c:aa:d7:e8:4e:90:d6:e9:72:16:
                    0c:d4:44:49:63:da:20:69:18:1e:65:09:e0:a9:fb:
                    3e:01:71:2c:a6:fa:8d:fb:1c:9f:4c:27:a4:90:18:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6C:4D:11:2C:FC:FF:8F:4F:0B:3D:25:78:4C:66:7B:0D:5F:87:DF
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:45:be:8d:19:29:bc:33:af:c5:d5:41:ab:66:b5:b9:9e:74:
         50:c1:43:a5:c4:94:c7:c0:8c:81:c2:67:a3:b1:0e:bb:ec:76:
         e7:66:14:72:1f:b3:52:d9:db:7b:f1:a2:00:d0:0e:5a:cc:c6:
         73:d8:b8:19:d4:46:b8:19:6c:14:31:71:4c:d4:7f:49:e9:46:
         34:26:f1:c2:7a:e8:41:2c:19:90:cf:f1:3c:4b:f0:5a:2b:d8:
         e1:32:2f:29:e8:f8:5d:18:7c:24:c6:46:e4:0d:6d:25:4c:45:
         26:94:9d:19:40:90:76:ae:f3:c4:10:44:c9:04:f2:61:dd:af:
         f5:55:c9:20:51:8c:b6:fd:2e:17:ce:19:3f:3b:1c:62:25:ab:
         b1:60:98:4a:9b:14:df:50:83:0e:5c:75:08:d5:e9:7a:0b:36:
         a7:e1:f0:8a:39:9e:78:73:88:8a:75:57:d8:8c:38:b4:93:c3:
         42:01:f3:7a:a7:c3:6d:2b:8d:12:ad:e2:f7:1a:87:36:fc:fe:
         c5:19:11:c7:15:41:a0:39:b5:35:88:03:d7:d3:d0:ed:a4:de:
         a1:6c:67:8e:00:af:84:d1:63:6b:6f:1d:e8:60:fe:8d:9f:7a:
         3c:75:c3:ec:7e:63:78:78:89:ef:50:f8:25:c6:56:67:a5:5d:
         ff:5c:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:49 2026 by rpki-client