Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
File:                     mNzlp5yzGxSLLmNpBacEIvtlxmA.mft (raw, json)
Hash identifier:          QNMjNUQDMxm8wXCPlykKj+AKMbLd0rO9gPAtNzA73+g=
Subject key identifier:   16:2C:58:0B:AA:36:45:2E:21:64:FB:BD:08:33:22:A1:2B:23:27:90
Authority key identifier: 98:DC:E5:A7:9C:B3:1B:14:8B:2E:63:69:05:A7:04:22:FB:65:C6:60
Certificate issuer:       /CN=98dce5a79cb31b148b2e636905a70422fb65c660
Certificate serial:       019FAF08D405B1DC044D83BC7BE01E9FB805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
Manifest number:          013C
Signing time:             Wed 29 Jul 2026 18:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 18:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 18:00:19 +0000
Files and hashes:         1: HXp2yl8CcctEYFf-SbEVW8usejY.roa (hash: ICCLYm8ogyONUQBR09bvk3yeGyG9hrCQ2LhYQ/hIOY8=)
                          2: hYHxC4B0dRHOWGyjfwEVbtTIcWs.roa (hash: 1Ci3i823J9C8tKoo39S7ESNqkRjK60YmjMYLCng8d1g=)
                          3: iFoLL08Y0RSZXmxN-OjujZRiXWo.roa (hash: OvbS7GRntI/C8IuP2kjijRom3YriGFk8ZqDEFtaH/hE=)
                          4: mNzlp5yzGxSLLmNpBacEIvtlxmA.crl (hash: 8aqd/PtQaNULTIkdrHadwpdmvFe/hh/kQtjl0g32mB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:af:08:d4:05:b1:dc:04:4d:83:bc:7b:e0:1e:9f:b8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98dce5a79cb31b148b2e636905a70422fb65c660
        Validity
            Not Before: Jul 29 18:00:19 2026 GMT
            Not After : Jul 30 18:00:19 2026 GMT
        Subject: CN=162c580baa36452e2164fbbd083322a12b232790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:54:39:58:e2:3f:fa:b5:eb:1e:81:3a:49:
                    00:49:f9:a6:38:e3:d7:a8:53:d3:23:b0:32:a0:b0:
                    fa:9f:62:c3:f6:f7:29:e4:2c:f5:1c:d6:16:a9:74:
                    1b:2b:7a:46:ae:75:29:bb:7d:71:82:fc:41:5d:10:
                    58:ba:82:57:ab:b2:12:2f:dc:7f:0b:2d:a4:9b:e8:
                    77:12:41:0a:d1:34:49:ca:a3:d0:ee:6b:4f:ca:b7:
                    10:57:97:0f:86:2a:8f:4a:c5:e2:eb:e4:e3:64:a8:
                    d0:07:37:40:e5:dd:cc:cd:be:45:c7:9f:9e:66:06:
                    97:88:05:b7:b9:66:db:78:d4:f7:6e:f5:55:3d:0e:
                    b4:bd:38:4a:ba:10:4d:6a:c5:88:f4:41:98:6c:7a:
                    83:41:e1:6d:c8:5f:95:31:bf:b1:d5:3f:5a:38:00:
                    ab:87:df:1d:c1:52:17:d4:35:45:17:45:e2:63:fe:
                    bd:a5:2f:3a:ef:3b:6f:60:d7:91:72:44:d2:06:56:
                    72:96:c3:1d:58:23:6c:61:2f:75:bc:a2:c0:30:1b:
                    1b:b6:a3:22:2f:1e:0a:b0:69:0c:f9:75:04:79:20:
                    3f:99:f9:0e:98:44:93:21:2b:fe:43:33:a8:a0:5d:
                    30:24:a9:91:a5:f4:16:f4:87:84:0d:1d:39:cd:46:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:58:0B:AA:36:45:2E:21:64:FB:BD:08:33:22:A1:2B:23:27:90
            X509v3 Authority Key Identifier:
                keyid:98:DC:E5:A7:9C:B3:1B:14:8B:2E:63:69:05:A7:04:22:FB:65:C6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:16:2a:bf:5c:e5:90:98:c8:5b:56:9b:3e:93:6f:e6:b9:
         7b:48:ec:3a:cc:62:ea:97:f1:b9:b9:7e:39:0b:f6:e3:b8:41:
         7a:f6:2a:5e:db:73:23:fd:f1:08:1b:8c:6b:1c:14:20:42:ec:
         ed:1d:a3:03:3d:60:6d:3d:33:68:35:07:f8:a7:19:61:96:4f:
         7d:40:e2:c6:2b:8b:45:cd:2a:42:12:25:12:40:47:d9:e0:f1:
         55:11:8c:f9:23:af:2f:b6:d0:e0:81:f0:56:05:6f:e1:e0:8f:
         15:b9:a8:cc:ab:1b:1a:24:6f:54:cd:66:bc:68:55:92:02:ee:
         be:2f:eb:6c:6f:dd:1b:24:d5:7e:36:6a:51:ee:0c:b3:22:c5:
         03:90:84:ef:fc:15:fc:dd:8c:b8:58:a9:09:97:bf:c0:34:50:
         da:1d:71:8c:17:0b:dd:82:6c:a8:d2:9f:19:63:99:5b:23:2f:
         09:8d:48:0c:87:bb:35:53:7f:28:ae:d4:9a:86:87:2d:07:de:
         f3:28:ee:9b:34:66:d2:6a:94:3b:e5:36:14:2f:69:c1:01:9a:
         ec:53:84:94:ff:6f:ed:0f:4f:18:e7:ec:e3:ce:d7:e0:5a:6b:
         ab:54:bd:04:d9:db:81:6e:44:88:27:38:16:85:b7:b8:7e:86:
         02:0c:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:02:59 2026 by rpki-client