Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File:                     RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier:          QhOM9XJ4LpZZOLJfGRjMRFdYQpJZIkd9c3mu5zJgO2A=
Subject key identifier:   66:0B:71:1F:ED:8D:8E:2F:B6:BA:F5:F1:72:F6:5E:EF:89:0D:32:95
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       019FA86250FA9524BEE2AFCB549045175FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number:          0182
Signing time:             Tue 28 Jul 2026 11:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:43 +0000
Files and hashes:         1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
                          2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: C5rgUpG7PMoaUJk+5sN/EiiQFcXGxkNNmlZoehYhJDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:50:fa:95:24:be:e2:af:cb:54:90:45:17:5f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: Jul 28 11:00:43 2026 GMT
            Not After : Jul 29 11:00:43 2026 GMT
        Subject: CN=660b711fed8d8e2fb6baf5f172f65eef890d3295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:3e:d1:75:32:04:b1:40:48:fa:f5:21:4d:
                    0b:f9:16:58:73:17:d3:23:31:df:99:87:d0:f1:9c:
                    46:c2:83:76:15:26:e9:38:90:ac:b1:ce:22:98:f2:
                    51:4e:6e:c4:dd:ae:49:80:4d:40:20:c5:31:fe:fa:
                    6d:60:c4:ef:83:d4:09:4f:25:0e:09:29:65:af:49:
                    83:3a:23:94:7c:77:5f:c2:f7:6c:a8:52:e3:c0:ce:
                    fe:c8:7e:f5:68:b7:7f:f7:50:3a:fb:6c:e5:a7:e9:
                    fa:4d:f1:e6:0a:55:e7:ff:f9:89:6f:53:ee:72:b2:
                    fe:d1:44:02:f5:cd:b2:6e:f6:2b:e3:43:f0:70:d7:
                    c0:33:a6:9b:e1:d6:89:fe:61:96:41:ad:28:d2:e7:
                    cb:25:62:90:a7:4e:eb:58:b7:e0:90:b4:12:14:34:
                    14:d6:44:82:83:5c:62:77:75:c9:07:a6:76:ab:50:
                    19:8e:da:91:c2:ed:fa:a8:c3:41:01:a4:15:64:44:
                    00:3c:d1:d0:07:0f:10:54:fd:95:e8:47:78:a3:03:
                    62:fd:8b:cc:bb:21:d0:04:6a:d8:68:82:4c:21:63:
                    36:ea:1b:68:25:12:06:fd:55:4b:6d:f1:11:ca:e4:
                    0c:c6:d0:1c:1e:ec:84:49:26:4a:97:5f:b2:7b:85:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:71:1F:ED:8D:8E:2F:B6:BA:F5:F1:72:F6:5E:EF:89:0D:32:95
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:00:f1:bd:a7:92:2e:5b:65:45:c0:1d:1d:a0:5d:2b:40:
         34:19:4a:ce:66:68:1d:2f:d8:df:3d:cc:39:27:e5:d5:70:92:
         e0:29:25:3d:28:60:b1:35:08:78:01:c4:ab:49:03:92:32:b8:
         22:a7:c4:53:67:08:8d:d4:23:21:10:b3:ae:f5:73:94:ec:cd:
         41:b9:fc:8f:3d:af:55:69:5c:36:6a:36:5d:ee:92:7e:1c:44:
         3b:47:07:c1:22:72:72:27:bd:a8:a2:66:bd:1b:88:4f:d9:1e:
         b6:ed:c6:2b:d9:ff:ce:0f:1f:30:03:09:45:1c:66:65:e3:d7:
         da:b8:0b:e4:6e:79:31:35:63:6b:7d:ef:0a:cf:e9:fe:96:0c:
         95:60:9c:61:51:10:b6:f7:91:c1:1a:a8:83:7f:f1:4d:b5:16:
         f3:a1:30:18:d4:92:c9:62:2e:d8:bb:cd:c0:87:3b:2a:e6:55:
         8b:99:df:14:40:4c:46:51:f7:9e:c0:f9:f6:c5:de:82:e7:3b:
         e9:30:57:c7:69:9e:cd:4a:1e:a2:d2:2f:fe:67:11:89:c7:73:
         96:24:54:48:18:f6:3e:a2:1c:b2:47:f8:ad:b5:67:c2:3e:b8:
         fc:b4:07:d7:ae:c8:98:69:bc:47:8e:b2:56:04:52:1a:3b:f0:
         2b:60:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:29 2026 by rpki-client