Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File:                     dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier:          4WzZfGCCy8gMtHnDahFxNveX4aB//SrQKUdIMk0XNkA=
Subject key identifier:   0B:68:83:3F:0C:58:B4:79:A7:31:E4:D0:32:2D:07:A9:70:76:DF:9E
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer:       /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial:       019F92B600B7D48A598C4D9F8E76C93EAADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 06:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:28 +0000
Files and hashes:         1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
                          2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: JJZWs/skav/5FweycP2ejbzs7Ro9jfx5zXfXe9FsNx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:00:b7:d4:8a:59:8c:4d:9f:8e:76:c9:3e:aa:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
        Validity
            Not Before: Jul 24 06:00:28 2026 GMT
            Not After : Jul 25 06:00:28 2026 GMT
        Subject: CN=0b68833f0c58b479a731e4d0322d07a97076df9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:a4:ef:60:d5:bc:0e:c3:11:86:65:bf:e8:
                    ee:24:4b:5d:65:85:43:f2:b7:81:af:a6:26:e6:cb:
                    af:be:be:c2:c4:7b:c5:28:c8:19:73:6b:04:c9:ef:
                    29:6c:d6:64:8f:4a:2d:df:79:62:fe:b3:4f:5a:d7:
                    3e:40:0b:a3:17:04:a7:2d:d7:01:2a:77:58:39:c3:
                    4c:0d:0c:f9:f9:1f:23:ad:c2:57:77:cb:c2:b6:d4:
                    5b:46:1f:f5:e1:1c:9c:0e:69:62:05:f6:b0:cd:ca:
                    d4:3c:36:48:17:93:f9:50:f3:9d:26:d3:43:9a:c3:
                    3d:51:e5:84:d8:64:67:35:8e:de:55:e3:d8:b0:c4:
                    81:93:7a:d7:c6:aa:7c:f1:42:b3:0a:49:c7:47:40:
                    15:f2:e8:46:74:ca:58:7d:e5:6a:99:ba:61:3d:98:
                    96:90:d9:af:2d:e1:ff:5e:04:45:dd:47:da:80:d1:
                    8b:5b:57:3f:5a:1a:5c:4e:cb:23:d5:f5:1b:1b:0b:
                    09:d2:77:38:f6:41:9f:3f:7a:ca:63:4d:27:4a:10:
                    91:5e:36:c3:a4:a7:23:19:ee:c3:4e:3d:ea:71:ac:
                    b5:b2:74:b5:17:59:d0:79:db:ad:87:81:ec:c1:3e:
                    4e:97:cc:68:da:e1:87:80:6a:d3:27:7e:bf:fb:79:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:68:83:3F:0C:58:B4:79:A7:31:E4:D0:32:2D:07:A9:70:76:DF:9E
            X509v3 Authority Key Identifier:
                keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:97:3a:24:cb:74:be:06:3f:31:bb:d7:2d:30:ba:0f:6e:
         e6:69:47:e8:09:e4:42:25:2e:f8:aa:9e:1c:eb:f4:5d:2c:47:
         43:d9:3d:71:df:73:76:d4:06:65:e4:38:bf:fe:96:de:52:de:
         b1:db:37:c5:ba:93:cb:e1:52:dc:e2:9c:9c:0a:7a:c0:67:73:
         03:67:94:41:a9:57:da:01:36:a0:9a:16:ff:aa:1d:3d:07:22:
         e4:fd:db:4b:bd:66:43:b3:5c:b2:0f:0b:28:92:12:c5:9d:11:
         82:30:6e:5d:a7:2b:ef:4b:4d:d8:fc:66:8f:41:b0:77:c7:26:
         70:03:c5:56:de:3f:c7:a8:f0:1b:39:03:06:74:36:c8:8f:00:
         5e:58:d5:de:f7:2f:a3:00:29:df:6e:b7:c0:1d:ee:c5:0b:d5:
         50:3b:25:aa:96:23:2e:00:56:e3:6c:b3:5b:c7:33:13:fb:7b:
         c9:58:fd:a3:a1:35:6b:48:20:eb:03:00:4b:09:61:e6:e3:94:
         a1:e4:8a:36:ec:c9:c1:79:d6:ed:43:77:09:f1:57:92:2c:92:
         f6:04:cc:ea:7b:08:b8:05:95:33:29:6e:11:19:4a:42:9e:d9:
         fa:9c:9f:a0:ae:28:1f:ab:5f:56:94:76:8c:75:3a:f8:76:a8:
         27:60:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:45 2026 by rpki-client