Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.mft
File:                     ed9kD6cZfyvaNs3Na7AC8Rih-bU.mft (raw, json)
Hash identifier:          sjiXDrDdU+RSPakHfOqV7+m6rdStEs5vICw7HxSPgc4=
Subject key identifier:   51:3A:CB:9E:A0:5D:D6:E6:82:EF:79:F7:E6:D8:4E:40:A5:B9:00:45
Authority key identifier: 79:DF:64:0F:A7:19:7F:2B:DA:36:CD:CD:6B:B0:02:F1:18:A1:F9:B5
Certificate issuer:       /CN=79df640fa7197f2bda36cdcd6bb002f118a1f9b5
Certificate serial:       019F935B3ED7940D7C7EC1F8F6CEAD383EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9kD6cZfyvaNs3Na7AC8Rih-bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:58 +0000
Files and hashes:         1: SMEpFUx1Ia1bmQYy_jLGjX9qLeM.roa (hash: 4tNwPRdbIQsRn+L0rU7kJqeUM9vgVw2CbqlLZSq0/38=)
                          2: ed9kD6cZfyvaNs3Na7AC8Rih-bU.crl (hash: /WJFB0++/Ud9lUjvaVlEPdjxw2EkfVaB7eOFGsxM27s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed9kD6cZfyvaNs3Na7AC8Rih-bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:3e:d7:94:0d:7c:7e:c1:f8:f6:ce:ad:38:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df640fa7197f2bda36cdcd6bb002f118a1f9b5
        Validity
            Not Before: Jul 24 09:00:58 2026 GMT
            Not After : Jul 25 09:00:58 2026 GMT
        Subject: CN=513acb9ea05dd6e682ef79f7e6d84e40a5b90045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:2f:b0:85:93:2b:73:c9:45:98:ac:7d:05:
                    39:3f:ae:f9:a3:a9:83:da:d1:d5:29:4b:85:06:d6:
                    ca:a6:ce:de:40:f8:7a:e0:16:1f:e2:b8:ae:0c:51:
                    32:d7:ff:85:83:0b:fd:c8:65:58:9c:65:c4:51:56:
                    51:77:d9:2f:25:e6:a7:67:ac:c8:1a:d5:f0:5d:a4:
                    b4:31:d8:51:9b:1f:c0:90:83:41:4c:d3:2c:8b:d7:
                    61:7b:5e:a4:73:60:8d:bd:2b:d6:5c:60:b5:a7:08:
                    a9:ab:03:e4:72:0a:cb:06:50:20:9b:0d:82:e3:db:
                    a3:33:26:3d:f3:5b:c2:20:16:fb:14:ee:32:bd:c2:
                    15:87:82:27:a6:df:1c:d4:9e:04:73:88:76:e0:8b:
                    84:1a:5c:4b:2a:5d:ca:da:67:2f:e8:a8:2e:c9:1f:
                    ef:5c:a6:61:23:85:f5:68:5a:da:a9:66:18:c0:67:
                    7b:9e:72:37:fa:b0:97:60:2a:c1:14:e9:77:e1:a0:
                    85:ea:08:b8:8d:03:9f:cb:e2:5e:6d:1f:e6:1d:7c:
                    84:ec:62:43:27:87:fd:ce:26:70:02:9d:ca:7f:31:
                    1e:20:d7:3d:91:bc:4c:27:02:65:6c:8e:05:eb:c7:
                    1a:1a:15:3e:28:a7:7a:73:42:59:a7:bb:de:aa:34:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3A:CB:9E:A0:5D:D6:E6:82:EF:79:F7:E6:D8:4E:40:A5:B9:00:45
            X509v3 Authority Key Identifier:
                keyid:79:DF:64:0F:A7:19:7F:2B:DA:36:CD:CD:6B:B0:02:F1:18:A1:F9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9kD6cZfyvaNs3Na7AC8Rih-bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:65:c1:11:72:de:c0:dc:0a:21:63:e9:9c:4d:dc:02:b5:08:
         99:79:6c:a9:7b:2a:99:af:f7:d4:75:67:53:61:04:1d:83:e9:
         a9:57:d6:17:1c:fd:f9:b7:ee:ae:df:8e:3a:e0:64:d3:21:02:
         58:3d:47:1d:2a:54:b2:ad:f3:68:1d:6c:c2:6a:5f:a9:19:14:
         64:3c:e6:46:a3:ff:a7:89:88:44:49:1b:fa:3f:1e:ca:8b:0f:
         aa:b7:21:cb:d1:52:6b:99:50:0f:dc:a2:ea:36:37:2d:f4:4e:
         8d:75:a6:0c:8b:61:ac:c8:f8:9e:1d:ef:4e:64:60:42:6d:02:
         e8:68:f9:42:ca:4e:a9:a9:e2:80:34:37:18:8d:86:07:60:88:
         82:86:38:da:81:38:68:cc:ce:ce:df:6a:c7:bd:59:5c:f2:c7:
         e7:8a:d5:b8:1b:e8:38:9f:e7:b7:17:8b:ab:2f:99:c8:00:55:
         1f:74:a1:6e:8e:3c:c2:30:c6:55:f1:c4:c7:4d:ae:14:b1:ae:
         07:79:fb:39:fb:05:d1:ef:f1:90:29:a1:4f:20:27:37:1e:4e:
         d5:e5:4e:bb:73:05:ce:9d:57:7b:b1:9f:53:9c:bc:87:78:b7:
         36:56:c8:b6:06:8a:fb:38:b7:9b:ce:c5:61:3e:fa:2b:6a:33:
         e6:32:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:07 2026 by rpki-client