Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          xOOsDiq/vRIRzyjbWXTbxNPcA0ABuUOBcsebfpn/CJo=
Subject key identifier:   BD:DA:54:78:58:03:63:B3:1E:19:AD:2D:5D:89:CC:B2:A4:5B:42:4D
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       019FABD1AD76FF58862F3755551A48FDFA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          19E6
Signing time:             Wed 29 Jul 2026 03:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:13 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: JHJDZgYgXe1Gf59UIH9XdcRiPGrWLaxD8GDL9OMrwOM=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:ad:76:ff:58:86:2f:37:55:55:1a:48:fd:fa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Jul 29 03:01:13 2026 GMT
            Not After : Jul 30 03:01:13 2026 GMT
        Subject: CN=bdda5478580363b31e19ad2d5d89ccb2a45b424d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:e3:94:0d:f1:58:41:8f:c2:0b:b8:c8:ab:
                    3e:18:84:18:f5:23:21:bc:7e:49:6f:96:bd:c9:ab:
                    b0:f6:34:61:ea:3d:32:14:cd:51:92:8a:57:6b:38:
                    3e:de:e8:dd:4d:8e:b0:3f:5a:a7:49:ae:b7:8a:f0:
                    ea:a6:c3:cc:cf:3a:a3:03:45:b1:ec:fd:e8:9e:a6:
                    37:3e:d6:3c:32:a4:00:97:df:e1:51:71:68:ff:70:
                    7a:0b:a1:a3:a9:6b:2f:63:0e:f6:31:d0:e4:7a:18:
                    aa:e0:7b:8b:8e:44:07:f0:38:ca:7f:ac:ed:d5:de:
                    53:63:83:a7:1a:72:0b:4f:dd:43:da:af:c2:58:2e:
                    1f:05:3c:9d:2a:e2:fe:90:58:d0:bd:aa:3c:7d:ce:
                    bd:07:6a:7a:91:a0:81:f7:9b:7d:60:5c:c7:23:93:
                    61:53:4c:01:09:7a:9f:59:0e:e5:2d:d9:36:fd:bf:
                    4c:7c:13:9b:42:04:8a:54:27:c1:e7:96:e0:55:4a:
                    6c:58:b7:6c:09:ca:5c:e3:5d:42:e9:de:d9:1e:e2:
                    a8:86:9d:b5:43:4e:91:62:37:0a:20:fa:a1:2d:29:
                    09:ff:e1:87:4c:26:d7:a1:c6:89:91:6a:81:07:16:
                    2d:1d:a9:74:25:1e:b5:0f:07:4a:3b:6c:95:26:f1:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:54:78:58:03:63:B3:1E:19:AD:2D:5D:89:CC:B2:A4:5B:42:4D
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:75:bf:6f:f3:64:6f:0c:48:cf:a5:4c:da:62:95:34:74:05:
         b2:fb:18:65:4b:a1:e5:ab:b1:02:08:96:e7:03:cd:d2:14:a9:
         1e:e2:0e:f9:a2:73:37:1a:1d:63:26:56:b8:36:c9:22:14:08:
         c9:7b:af:49:7d:5f:93:8f:ac:6a:9f:46:ed:1e:54:2f:cc:33:
         50:cd:03:d7:fa:10:79:92:28:94:1b:04:6f:85:27:7f:a2:f8:
         73:fd:c0:3a:3e:0b:fb:70:16:42:f5:f1:cd:b0:73:be:b2:32:
         aa:9c:f6:2d:9b:56:fb:c0:af:2d:a2:fa:a8:fa:ef:d6:72:72:
         27:b6:2d:11:4f:7b:5a:8f:c1:18:f7:46:31:47:7b:21:20:e2:
         e4:c1:4b:1c:29:ab:06:67:46:0c:c4:37:42:05:6a:90:02:04:
         88:6c:5e:26:de:8e:86:de:e5:ed:ac:3f:6d:49:73:00:36:77:
         cb:d1:ff:5b:c9:33:1f:24:35:1d:2c:2c:1c:5e:ef:79:89:f0:
         7c:90:63:96:e7:b9:90:d9:52:9e:c7:cd:a3:65:ce:2b:ea:fc:
         5e:5e:73:3e:dc:35:a7:9d:52:1c:41:c1:ed:c5:30:90:81:46:
         ba:e5:b3:aa:24:cc:48:17:46:2c:e4:f6:25:0f:82:f3:fc:3f:
         2f:7a:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:27 2026 by rpki-client