Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          Q0kB+dpiBvtMKKUG0Zf1ye3GX2W8dOFwi4q0RAEMD4A=
Subject key identifier:   CB:B5:D7:0B:3B:75:BC:AA:1D:51:95:5B:47:1D:94:4E:16:44:7C:77
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       019F916DA51F708E0079C75A83923A455CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          1459
Signing time:             Fri 24 Jul 2026 00:01:49 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:49 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:49 +0000
Files and hashes:         1: 41LKwPw-LLlX1iRyv05q0eGVxQA.roa (hash: /hldaDmFUq5ScLzS5Do9OQvpCy6tJ6Mldta+rPoVSBs=)
                          2: QdmtMonnxjCquFhjrcUo8qpZ9bk.roa (hash: wbBSWKojB7pH/vu01mc7MlC/g/OxHu6eJE6dc+J3abI=)
                          3: _IvJfFzGHlNib8r-PrbygGaf9ME.roa (hash: ujiDP9ug2z8JoHMVWVWd8NY4OblKHkwk6gW1+3Pknes=)
                          4: kwUHvF8K5DKPpyHMUkx411cQrSQ.roa (hash: BqDwnwYRUU7AFepo3iOTkaJL9CkTmsePW0u1PWVooCE=)
                          5: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: DtO1izQAozVcxofZkSpbODfcb+bdcurvybXdBtFNUSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:a5:1f:70:8e:00:79:c7:5a:83:92:3a:45:5c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Jul 24 00:01:49 2026 GMT
            Not After : Jul 25 00:01:49 2026 GMT
        Subject: CN=cbb5d70b3b75bcaa1d51955b471d944e16447c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:29:29:08:4d:08:b6:e8:ca:47:49:35:ee:
                    cd:24:74:de:c3:fd:52:d7:9d:0e:99:26:8b:f7:cb:
                    37:81:77:79:47:67:81:5a:1f:69:10:0a:cf:32:24:
                    df:81:4a:5f:e0:4e:5a:3e:a9:99:c8:6d:7b:7a:f3:
                    47:bd:fd:3e:79:56:eb:69:99:5d:f8:79:7e:84:03:
                    ff:9b:a9:1d:05:bf:f7:39:77:f5:2f:ba:54:74:4d:
                    73:10:03:ad:6f:65:e8:23:28:90:2a:ba:f0:e5:d3:
                    7d:35:52:38:8c:62:b2:45:72:7f:0a:20:5e:70:dd:
                    6c:5c:73:e0:a1:dd:ef:46:5e:71:36:bc:af:ff:33:
                    26:f7:49:20:51:e0:28:77:10:78:29:18:aa:54:1c:
                    bd:7b:a2:d9:0a:7f:50:7c:85:f3:a2:19:3e:fd:bf:
                    d3:f8:6c:f2:a0:fb:a8:9b:ef:c0:43:18:49:02:04:
                    7a:b0:aa:da:4d:56:b3:c2:0d:96:86:ab:a3:f6:cb:
                    01:33:03:55:7d:af:90:0f:ec:77:9d:33:c2:6b:91:
                    b7:06:b9:fb:b6:b7:6a:2a:c1:b6:bb:f4:29:9c:92:
                    1d:8a:f6:68:4a:28:42:27:0e:69:41:3e:e6:47:ca:
                    a1:d3:4d:4e:49:2e:26:5f:08:9c:cd:06:99:b1:06:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:D7:0B:3B:75:BC:AA:1D:51:95:5B:47:1D:94:4E:16:44:7C:77
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:81:45:a2:68:90:ad:6b:76:51:c5:86:22:a7:09:60:1c:f0:
         3e:c6:18:0e:76:74:5c:1a:c3:43:5a:1f:6e:25:ca:b0:f0:49:
         10:73:66:1d:9c:73:b0:8a:9e:76:e9:ea:45:0c:21:b3:db:5a:
         39:84:d4:43:83:27:49:05:42:b7:56:a2:5c:03:fc:c6:ce:d6:
         2c:1d:25:b8:12:57:03:5a:3e:24:a8:4c:97:ba:96:c6:b4:05:
         73:ec:7c:7c:9e:5b:6f:eb:bd:a8:89:e1:87:76:24:05:9d:a3:
         51:74:61:bd:44:1f:b4:d7:73:40:9d:be:8d:db:7c:dd:50:23:
         cc:f9:1d:9e:ab:d2:bc:96:f4:35:d6:cc:b8:1e:f9:60:8c:51:
         13:e9:97:28:1e:00:44:09:77:d0:51:09:d7:3b:5f:c6:ef:05:
         60:88:56:0e:ad:83:b2:0f:2a:af:5d:88:e4:ec:91:fb:9d:39:
         db:f2:ca:be:c1:24:69:59:bb:96:02:34:ab:f1:69:9a:a6:0e:
         68:e3:4b:94:b3:86:0f:be:5d:76:37:da:c1:47:62:fa:6a:5a:
         68:2c:7a:7c:a2:52:a4:82:94:47:ad:34:ba:14:11:67:fd:be:
         97:53:97:f2:f5:d8:b6:bb:86:b9:a5:14:23:87:b6:1b:50:97:
         41:56:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:49 2026 by rpki-client