Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          3FQrZ6qc7UITyZtkIKpXa/R6+ui5nCXfymzrIHLdKrU=
Subject key identifier:   46:40:7E:B7:52:08:54:13:AE:E6:A6:90:4C:9B:74:80:75:4A:09:6E
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019F9248598E1A455632192DBC69D6644657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0911
Signing time:             Fri 24 Jul 2026 04:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:42 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: gn9XSgG7d0of1SKgWSYJtga5rzTFfgMu7yTY5khjXCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:59:8e:1a:45:56:32:19:2d:bc:69:d6:64:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Jul 24 04:00:42 2026 GMT
            Not After : Jul 25 04:00:42 2026 GMT
        Subject: CN=46407eb752085413aee6a6904c9b7480754a096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:6f:65:b3:52:26:d1:4b:73:bf:58:4a:ce:
                    ac:2d:8c:33:ee:fc:39:37:20:7c:7e:1f:b8:fb:45:
                    a7:1a:0c:b9:23:68:ab:73:34:41:53:dd:9a:c2:10:
                    3f:ea:8b:d2:39:42:0b:0c:f9:66:1a:40:41:f9:84:
                    20:a8:66:c6:01:7b:87:aa:37:a4:60:c2:b1:67:a4:
                    fc:d5:4c:ec:7f:9b:ff:d9:85:6f:fc:77:7b:9d:e8:
                    81:18:bc:85:6b:ef:ae:c0:35:4c:ef:79:27:ac:e5:
                    e0:59:11:8f:da:a4:e1:6e:5a:f7:5d:e8:9f:ba:22:
                    d9:cc:3e:e8:9f:8d:c6:ff:d1:4c:19:55:c6:d8:f4:
                    cb:71:1d:f9:57:3b:66:3d:0a:ce:73:0a:65:da:dc:
                    0a:e5:0f:a0:88:05:f3:11:88:62:91:39:4a:94:d6:
                    a2:d7:89:9f:46:3c:8c:3a:e7:3c:8b:69:f8:19:56:
                    c3:ae:8b:be:07:c1:a3:03:9d:0f:ca:5a:59:9b:7f:
                    56:de:ab:02:e1:5a:69:a3:b1:8f:06:3c:5f:cb:fe:
                    c2:8f:e3:78:10:3f:e2:61:0b:ab:df:22:4c:ee:ae:
                    dc:64:c7:20:03:05:4a:e3:8f:c4:b1:ff:72:ec:3b:
                    94:9e:20:57:db:c6:7e:fc:20:2f:56:46:71:12:7d:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:7E:B7:52:08:54:13:AE:E6:A6:90:4C:9B:74:80:75:4A:09:6E
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:16:55:8e:8e:e4:51:60:c3:dd:78:c9:0f:7c:f8:60:0e:
         b0:a2:9d:27:7d:99:e0:be:fe:d3:0c:d8:5a:67:a2:cf:2d:11:
         30:2a:81:5d:4a:9c:60:f5:69:5d:90:14:ce:f0:06:03:e1:8b:
         70:f6:46:f5:d5:7e:68:96:2e:da:91:af:2e:35:48:5e:ed:2a:
         de:d7:df:f9:0a:53:aa:17:38:98:dd:3a:a1:24:ed:dd:10:4d:
         88:43:d6:dc:52:3d:11:1d:65:21:27:ab:fc:c3:24:78:e0:33:
         1f:7a:7f:98:58:d5:d7:e9:c4:ce:b4:2b:90:db:60:ed:9e:6f:
         ab:98:8f:26:48:0a:9d:02:47:90:bd:a9:30:d0:8e:4d:e8:e0:
         02:ca:21:0e:6a:21:26:79:e4:62:3d:ce:7d:7c:5d:19:6d:aa:
         69:49:48:db:ad:37:09:b5:e2:35:bc:46:85:be:78:83:74:6c:
         26:d4:46:82:04:52:f3:88:b1:74:f3:09:65:3a:3a:c2:9c:11:
         96:39:b5:43:b8:5c:2d:c5:b2:d1:af:fb:db:b8:2e:c1:8d:56:
         00:6e:30:14:73:6b:89:7e:a0:6b:05:ce:59:37:57:99:94:8c:
         87:93:d4:16:0a:2e:55:ec:ec:2c:ea:3a:d2:12:32:a4:83:19:
         d9:d8:2f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:32 2026 by rpki-client