Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          rIjq6qeIedaQdTURzNgst6roOIrTdLZKmtkjiA10jGA=
Subject key identifier:   26:75:D6:BB:F8:5B:37:A7:1E:AE:87:EA:73:75:F4:73:5B:A3:C9:FC
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019FAB2C305B9F0F6F4E5F236B36B1FC5FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          1375
Signing time:             Wed 29 Jul 2026 00:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:27 +0000
Files and hashes:         1: 5eboZEmHhXz6o0PStVWCZPbL7rc.roa (hash: MeF/gO1mMkaKIeIHm4Kk6Ux2q6cjHQDMqps6ZDdVRPA=)
                          2: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: aaRelPODR4R08Fk2caxtrC9m1CSHRNMqGh3KhhhPjW8=)
                          3: TwmDMf1VMLreoF4Rd4wIb80esWU.roa (hash: 1cpZ3FzG/XofvcqHJYSa8ca7jhZ5IAlRDRIawwNVmVY=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:30:5b:9f:0f:6f:4e:5f:23:6b:36:b1:fc:5f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jul 29 00:00:27 2026 GMT
            Not After : Jul 30 00:00:27 2026 GMT
        Subject: CN=2675d6bbf85b37a71eae87ea7375f4735ba3c9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:5f:d1:bd:4e:89:42:c4:8e:b0:1d:ab:1c:
                    8d:c5:3f:ef:d7:5f:53:53:cd:f0:b3:73:e0:63:70:
                    dc:ac:3e:60:14:2c:b9:7f:b6:c4:f9:1b:b8:48:ba:
                    c5:e7:8a:13:b0:5a:6b:0e:8d:bd:36:5c:9c:10:e0:
                    44:df:8c:a8:37:80:06:8d:05:8c:8c:44:a2:ff:65:
                    06:a0:56:44:a7:4a:f8:9e:5e:86:9b:08:8e:06:91:
                    8c:04:4e:f4:e5:8f:f4:d8:7a:a6:3f:bb:a4:68:99:
                    e1:a8:26:99:7d:f0:c0:95:03:10:de:c8:1c:9c:c8:
                    1c:90:5d:ba:90:64:4c:b2:1c:ca:f6:94:a6:e9:62:
                    b3:2e:a5:07:74:aa:02:13:9c:8d:cf:90:30:aa:b3:
                    9e:2f:71:0c:dd:21:e9:be:c8:db:23:59:ab:e6:55:
                    96:0d:c2:c9:d8:c4:b4:bf:e4:10:49:e7:0b:f7:96:
                    f1:72:08:f1:bc:5a:f4:8b:f6:ac:6c:87:b2:90:41:
                    20:ce:58:9e:4c:c8:0b:9e:51:ce:1f:d7:97:4c:e6:
                    9d:10:f7:ab:63:68:9c:d1:40:58:44:1b:93:4b:3a:
                    26:ae:12:9a:cc:b0:77:e0:83:ea:a5:8b:5f:8f:3d:
                    2d:a7:5b:af:62:47:fd:fe:ca:73:3b:7e:98:37:22:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:D6:BB:F8:5B:37:A7:1E:AE:87:EA:73:75:F4:73:5B:A3:C9:FC
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:94:c0:a3:61:ff:fe:7d:35:36:e9:5e:50:a1:04:9b:3e:
         60:39:78:54:1d:c6:1e:f4:de:c8:72:57:57:9e:ac:95:b4:d2:
         05:e6:ac:52:16:16:0f:f3:ca:99:ec:27:90:dd:24:65:59:3b:
         35:44:84:88:fc:09:49:92:66:0f:25:64:71:d3:70:e0:42:0f:
         07:56:fa:b2:9f:49:a1:41:b7:11:3b:a7:4d:8c:e9:6c:4c:48:
         0d:2a:6f:b1:62:ff:96:a5:00:5e:73:3f:bf:8b:de:ed:fa:bd:
         b8:a7:7c:92:24:a9:26:7b:73:b0:f9:30:d5:f3:8c:75:85:e6:
         95:76:7c:b5:6c:75:87:7a:59:7a:66:dd:ae:f4:a9:98:f4:e0:
         55:9c:69:4d:aa:23:aa:c0:ab:9c:aa:79:f7:e4:76:a2:dd:34:
         bd:50:d8:ac:96:92:d8:f5:f1:a5:01:09:a5:61:55:c2:57:6f:
         19:74:22:c5:8a:95:41:bd:28:26:14:7a:f4:b4:13:bd:64:4a:
         27:5f:5a:2c:41:c6:b7:55:c9:3a:d6:f9:25:fe:db:99:39:1a:
         08:aa:c5:13:e1:2b:9b:a9:b0:e3:74:d6:0c:4e:9d:82:17:92:
         75:c5:66:37:2b:02:45:8f:b6:e6:b8:43:78:08:82:f9:e4:32:
         4d:d2:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----