Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File:                     rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier:          fx4BfCjGR0ZMioWWdHWAesTw66F7Fg7vxuiUMdkJcBE=
Subject key identifier:   91:42:22:F5:AB:99:B2:CA:F5:7D:9A:A3:F2:F8:EB:D0:23:F6:36:62
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer:       /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial:       019FAC08423FB1DD5F6CA4FBD0AADFFAD727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number:          0980
Signing time:             Wed 29 Jul 2026 04:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:49 +0000
Files and hashes:         1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
                          2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: 6o2jn22kwPvFkB1okDPGpwcKLN2zyr+ZpzdYzpUr/4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:42:3f:b1:dd:5f:6c:a4:fb:d0:aa:df:fa:d7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
        Validity
            Not Before: Jul 29 04:00:49 2026 GMT
            Not After : Jul 30 04:00:49 2026 GMT
        Subject: CN=914222f5ab99b2caf57d9aa3f2f8ebd023f63662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:e6:a5:80:fe:31:8f:fb:ce:4b:1f:c6:f3:
                    55:6f:7b:bf:fa:c7:99:3d:b7:71:67:2d:0e:44:d7:
                    cb:28:cf:d6:8b:54:86:8e:3b:6c:4b:76:ee:ad:ee:
                    65:59:ed:6d:3d:a1:71:d6:54:18:1d:78:7d:98:df:
                    36:b9:3d:fd:ae:40:c3:8d:37:91:7f:77:a6:da:44:
                    de:5a:ba:98:e1:b4:e3:7c:f1:28:f8:7d:4d:a9:da:
                    fb:d0:44:c9:64:03:ae:78:86:18:f9:ba:f3:dc:5e:
                    80:83:26:7b:3e:ee:1f:44:f0:5b:b5:cb:8b:ed:9e:
                    b0:ab:0b:5b:7d:b2:8c:c4:7d:23:5d:82:b7:9a:94:
                    6c:0a:46:52:5c:c6:ca:79:f9:03:21:ae:ee:70:a4:
                    1e:6e:ef:d1:1b:91:1c:e9:4b:85:9d:b1:ba:1f:f7:
                    3b:14:b9:e8:92:b8:cc:53:02:54:03:3a:94:bf:a4:
                    59:c4:2a:77:f4:8f:85:6e:a4:fa:de:54:5a:8d:92:
                    1b:89:88:fd:8d:78:3d:2e:b2:d7:bd:9d:8f:44:9c:
                    e4:87:be:2b:7a:4e:bf:22:50:fe:b1:a8:ca:65:fe:
                    9d:50:8c:e4:77:1b:00:10:56:a6:8d:52:91:89:d7:
                    72:ca:e7:4c:1b:5b:b2:25:b1:ab:c8:69:b3:ae:e2:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:22:F5:AB:99:B2:CA:F5:7D:9A:A3:F2:F8:EB:D0:23:F6:36:62
            X509v3 Authority Key Identifier:
                keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:4b:b7:d8:96:25:55:bd:e1:3f:14:9f:3b:39:1b:12:64:
         ff:4f:61:09:aa:9e:87:05:fc:db:82:ad:ea:0b:a1:38:f0:cf:
         03:9b:97:f0:97:ec:35:0b:8f:7a:2a:2b:71:a7:46:11:f5:5f:
         10:f9:d1:9c:2e:1d:35:80:e8:c3:02:44:f9:c8:26:d7:6c:77:
         05:7c:7a:cf:79:83:10:8c:14:98:e1:6e:cb:5b:23:aa:32:f4:
         26:7c:58:93:56:b6:13:ca:51:93:2c:ce:c2:ba:21:0f:9a:69:
         14:cc:90:54:5b:72:d5:aa:dc:cf:fc:7a:fb:80:00:85:86:18:
         3e:23:90:2e:da:ba:37:3f:6b:d2:c6:16:ce:87:7c:b5:fc:90:
         86:ab:e8:d4:3d:16:1f:7c:dc:b3:31:1f:1b:71:8e:36:af:5c:
         9a:f1:8f:6f:b6:6a:6b:63:9d:74:7e:03:00:b9:26:53:62:a8:
         bd:d9:36:e3:3f:6d:e9:f8:19:a2:86:3a:6c:5b:27:bc:fb:c7:
         d5:a1:94:de:c9:b8:50:a5:09:5f:26:25:60:30:43:9f:f7:58:
         b6:31:90:c6:0e:3a:d6:a7:74:11:14:38:78:ca:be:b8:52:0d:
         11:b9:e3:e6:2c:97:e6:42:dd:c3:1e:a4:db:e7:05:4e:76:6c:
         4a:e8:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:16 2026 by rpki-client