Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          UT/Dg7OfAAIG9i7dpCvdAMIehMpWA+KbowcmRQHonjM=
Subject key identifier:   D6:F7:8C:D4:31:3D:CE:AE:51:3D:13:10:D6:60:FB:CB:A2:AE:C3:4F
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       019FAD51A56521A6FA01D2C3B8BBA45435CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          06B3
Signing time:             Wed 29 Jul 2026 10:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:36 +0000
Files and hashes:         1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: HfusEflmyPADjBcHzgJXeAK+ButAbW84UL/pv3twC4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:a5:65:21:a6:fa:01:d2:c3:b8:bb:a4:54:35:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: Jul 29 10:00:36 2026 GMT
            Not After : Jul 30 10:00:36 2026 GMT
        Subject: CN=d6f78cd4313dceae513d1310d660fbcba2aec34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:6a:8c:12:e1:2c:88:29:d8:a8:ef:9a:12:
                    38:e8:2a:33:9b:0c:3b:0b:68:ce:ed:34:92:27:4b:
                    92:7f:14:73:fd:42:cb:b5:ab:49:b4:a8:0b:b4:4e:
                    bd:59:c8:e8:55:d0:64:2f:4b:6c:16:73:78:b0:98:
                    bf:30:9f:f2:7f:17:d2:83:64:5b:e6:0b:9d:04:e7:
                    69:f0:93:a9:37:05:fc:0b:b4:2b:21:58:23:7c:aa:
                    1a:af:4e:8e:eb:43:d8:d1:60:1a:8e:b0:f8:76:86:
                    e4:77:c3:11:0c:1c:d6:e2:52:4d:68:b6:e3:d8:bf:
                    e6:ed:e8:40:64:67:e5:1b:5d:78:79:3d:7a:e6:fa:
                    27:0f:60:51:e8:e9:0a:e7:23:92:dd:c2:db:f6:b4:
                    ca:8e:f4:62:4f:38:5e:49:73:af:09:59:df:5d:04:
                    2f:29:e5:30:53:c3:aa:2a:8c:12:e8:d9:86:d3:46:
                    d8:2a:99:2b:39:12:8e:27:ab:37:d2:eb:24:d7:eb:
                    af:07:57:fe:29:92:4f:e8:e0:82:ee:b5:74:f5:4a:
                    f5:97:c2:34:0e:15:44:8c:73:b3:dc:09:ec:9e:26:
                    ae:16:15:80:39:49:af:20:14:63:f8:75:85:43:78:
                    3a:fb:e2:f5:d4:67:a7:c5:ea:3e:21:87:a4:dd:cf:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:8C:D4:31:3D:CE:AE:51:3D:13:10:D6:60:FB:CB:A2:AE:C3:4F
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:22:de:68:22:7f:c5:0f:ad:71:d4:5c:69:4b:df:6c:12:ae:
         1f:19:8c:f0:df:0d:47:82:cb:f8:26:01:d1:c9:8e:29:8f:21:
         ce:c1:43:7b:88:27:96:91:04:db:be:2c:b0:eb:11:e0:6d:e1:
         a0:a8:7d:d2:1d:38:4d:2a:9a:ba:f4:8e:f3:b6:de:ce:f0:95:
         0d:6c:6f:af:51:c2:94:52:51:b9:ae:21:47:8e:fe:36:2c:a3:
         80:0f:da:33:de:62:24:7a:79:9a:13:60:19:cd:be:12:3e:8b:
         ba:d8:1c:58:e6:57:5e:da:70:11:9f:f4:da:cd:ed:4d:ce:2b:
         f1:ea:e6:a0:98:b8:6c:0a:29:11:22:aa:c4:ce:3f:65:77:cd:
         ca:9e:2e:78:11:e0:7e:33:e3:31:35:d0:88:e7:9f:91:51:e7:
         b8:c2:57:14:c9:4b:31:10:0c:cb:54:cf:97:d0:cc:a0:9e:a4:
         ca:e0:97:13:9c:0b:68:5c:4c:e4:4a:f7:b9:f4:eb:4e:cf:40:
         09:e6:92:f3:f5:33:40:c2:11:b1:3f:30:30:5f:6a:2b:f6:06:
         4e:62:aa:de:0b:75:34:9b:e4:fb:61:36:18:16:75:6c:ba:5f:
         fd:56:6a:28:a6:55:bf:ad:52:9d:cf:d0:ff:98:0f:9c:42:7c:
         d2:a8:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:54:34 2026 by rpki-client