Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          tMtMkhmYxL5qmV7k/VuFs3H6326mzCmMIWBNuUkP2S4=
Subject key identifier:   7D:F3:41:F7:30:E2:99:2B:49:EF:36:E6:29:30:52:EE:B2:F2:12:0E
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019FAC76E5D139EA9087D79B19AD4A8B8DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          098D
Signing time:             Wed 29 Jul 2026 06:01:40 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:40 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:40 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: F6+HmQxe3jFxnPGjGhNtciB9dlMgNmPezTqy2eZLOPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:e5:d1:39:ea:90:87:d7:9b:19:ad:4a:8b:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Jul 29 06:01:40 2026 GMT
            Not After : Jul 30 06:01:40 2026 GMT
        Subject: CN=7df341f730e2992b49ef36e6293052eeb2f2120e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:dc:ff:b8:1e:c2:65:91:9e:fa:42:70:07:
                    00:dc:f7:98:3e:56:03:02:76:78:97:18:9c:6c:4e:
                    d9:e9:08:87:2e:8d:19:93:09:5f:53:6e:35:a6:c5:
                    b7:2a:cb:5c:42:d4:5e:a0:37:ca:e8:c6:16:01:df:
                    eb:fc:04:e7:cf:27:68:5f:91:53:20:05:70:b3:fd:
                    ae:ac:fb:bf:d3:0e:45:cd:03:74:27:d1:d4:1e:41:
                    c4:09:7a:8d:e2:10:b8:30:c1:8d:b3:d8:05:a8:dd:
                    95:eb:ef:aa:7f:34:41:d1:46:fc:d6:33:56:d3:b8:
                    e0:c2:d2:4f:a7:ce:27:ca:0c:2f:eb:14:7e:24:41:
                    ac:71:42:a3:f8:55:06:3b:52:ba:d2:e9:eb:26:ab:
                    cd:17:ce:9e:9e:6e:91:60:4e:ac:c8:81:04:84:c5:
                    0b:dc:a0:57:ef:dc:0e:f5:a7:f7:71:47:06:d0:95:
                    01:23:b8:5e:d7:a6:aa:19:c8:c2:bc:04:5c:0e:c0:
                    1a:a8:39:5a:d3:da:3b:d4:1b:53:eb:54:71:c0:42:
                    d4:36:7d:f3:fd:33:cb:64:c4:e2:d6:45:3e:72:fa:
                    b6:7d:2b:fe:da:d0:24:ca:9f:59:a0:78:8a:2f:1a:
                    3e:1a:01:40:1c:ac:df:4f:7a:6b:0e:3c:8f:ea:26:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F3:41:F7:30:E2:99:2B:49:EF:36:E6:29:30:52:EE:B2:F2:12:0E
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:fa:4c:55:f7:83:99:51:de:ef:74:e8:64:9d:38:ea:e4:
         2c:7c:c7:d6:47:8d:09:e5:af:d0:c9:1f:10:4a:88:3f:97:e4:
         f1:2c:78:bf:d7:3a:1a:12:16:d9:43:47:f2:41:be:7b:96:77:
         e1:7e:f3:77:09:84:15:01:fb:c9:f3:c7:ed:3a:9d:5e:4b:76:
         3a:52:97:c6:3a:48:40:18:db:f4:9a:ca:89:13:ec:aa:0c:30:
         9f:8d:67:e3:2b:c3:ca:70:ba:89:03:f3:b8:32:7c:1b:fc:24:
         47:c1:e1:a3:60:2c:09:27:04:8b:5b:ee:6f:ed:bb:c0:07:7e:
         8f:b1:a9:7b:e1:a6:80:01:9a:4c:44:6f:c7:37:55:8f:2b:10:
         42:7b:fd:60:de:ff:ce:80:49:4b:fd:b6:f6:c7:44:12:93:e7:
         ff:74:ea:59:0d:00:1e:f3:5a:a3:4a:6d:9b:5a:a8:00:c0:3b:
         42:f5:62:74:f4:2b:ce:6f:46:2a:c8:95:b2:d1:6d:83:00:a8:
         1f:b9:f2:50:f9:03:c3:f5:01:22:f7:2b:40:f8:bd:83:3f:13:
         da:27:ff:41:fa:99:74:39:3d:6f:6a:cf:fa:4c:62:9a:53:13:
         7f:66:75:c6:d6:f6:7a:8d:60:12:f8:0d:59:48:72:e6:23:b7:
         8d:9a:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:30 2026 by rpki-client