Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          kSz52emUnjv6iK12Jc3hsVLBBRURHwDLH/Q8lnHb/+M=
Subject key identifier:   87:45:7B:19:8B:C8:4E:E8:8E:1B:A0:3B:D9:EF:29:A4:DC:16:2B:D5
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       019FAC3ED7CECD68C323E95126D01F209EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 05:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:27 +0000
Files and hashes:         1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: 0jgKtgwmn1eABlD3UtXF6tGjBTjGnJqt/7Xk9e9wTAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:d7:ce:cd:68:c3:23:e9:51:26:d0:1f:20:9e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Jul 29 05:00:27 2026 GMT
            Not After : Jul 30 05:00:27 2026 GMT
        Subject: CN=87457b198bc84ee88e1ba03bd9ef29a4dc162bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:b6:e6:a4:b2:63:d9:7c:90:de:7e:fd:f6:
                    71:b3:ac:a6:d9:82:12:4c:e6:8a:f3:67:e0:c1:d7:
                    b4:c8:ab:87:df:06:d6:11:ac:dc:e4:21:b0:c1:1c:
                    91:e5:0b:28:39:9b:76:67:ac:ff:5a:b7:7b:03:92:
                    6c:51:93:d1:bc:e9:0b:c1:b4:34:e4:45:b1:ce:04:
                    d1:35:12:e3:70:65:c2:36:fa:aa:d0:aa:06:70:e0:
                    78:60:2f:a7:22:3a:d7:7f:07:ba:31:ea:96:c4:02:
                    91:a5:2c:0b:5c:93:09:06:6a:e5:26:59:35:59:6d:
                    d2:38:7f:1c:5f:d5:9e:ff:c2:83:c7:5d:27:9a:c8:
                    ae:98:0a:95:ba:fc:6b:cd:cf:0c:65:b8:f0:17:bb:
                    83:f5:3d:3e:c4:68:c8:b3:b6:00:33:f7:54:0c:c8:
                    bf:81:43:07:9a:76:7c:9e:e4:4c:d7:d3:05:91:99:
                    38:90:5e:c3:65:f1:45:f2:ea:27:48:3a:92:ce:13:
                    b1:b6:87:16:08:64:5e:bf:9b:2c:66:5a:0f:68:ad:
                    69:48:e7:28:52:85:03:4c:e2:93:f1:f0:3f:c5:ac:
                    36:39:7d:c6:9f:3d:6b:64:e7:10:3e:4c:05:b6:1f:
                    43:6f:e8:60:27:71:8c:48:57:6d:f2:88:72:e3:12:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:7B:19:8B:C8:4E:E8:8E:1B:A0:3B:D9:EF:29:A4:DC:16:2B:D5
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:75:bb:e4:82:28:bb:26:2d:20:d7:b2:e7:99:fa:b6:fb:a4:
         f4:00:57:c1:71:4c:fe:92:2e:3d:96:93:4c:1e:fc:00:7e:c5:
         14:c7:7f:f9:21:87:77:42:65:02:57:60:67:e6:8f:87:1b:e9:
         77:c9:cd:70:3e:7a:39:ed:4a:52:0e:31:32:74:7c:0c:c2:24:
         df:65:05:cf:f3:8a:35:4a:ef:03:b8:1a:78:33:04:78:60:ed:
         4e:c6:c0:2b:81:92:1c:02:43:4f:c3:b9:28:37:27:af:53:52:
         bd:00:cb:eb:53:cb:d8:ba:86:89:9a:7c:4b:61:2a:87:33:60:
         07:36:6c:91:0a:7e:99:12:b0:1e:4d:fa:e8:d8:ba:a3:2a:93:
         c9:ed:39:22:ce:8d:7d:35:85:bf:e3:e1:ad:d1:0c:61:ca:48:
         db:de:6e:8b:1d:47:56:be:19:1d:7b:d4:c1:a4:d3:1f:bf:3d:
         db:46:40:4f:d8:88:e1:e1:88:73:3b:dc:9b:87:90:54:82:4e:
         7d:94:83:58:3f:3c:4b:c6:51:90:5b:f5:b2:6e:94:12:89:61:
         06:32:57:af:48:31:56:2f:7f:23:09:ab:dc:35:7d:58:54:26:
         43:25:3a:87:fa:2c:65:17:17:df:f9:3f:8f:42:52:11:c5:fd:
         b5:67:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:52 2026 by rpki-client