Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
File:                     7w79XeePk7yurRXhTABu270bWVU.mft (raw, json)
Hash identifier:          hssn/qWujk9Wdo7ED9SMgl8LPxb7jEwzZnBRCzcSDOs=
Subject key identifier:   1D:5C:33:93:E0:B9:BB:D8:E6:03:41:18:37:22:2F:E0:72:AC:64:3C
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Certificate issuer:       /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial:       019F916CEB60537009395C591F19FBF6C467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
Manifest number:          0F8D
Signing time:             Fri 24 Jul 2026 00:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:02 +0000
Files and hashes:         1: 4UtpBbuncICgv9efuHvxROM6-RY.roa (hash: YRGR60bkJx2AW9aNIbqOxesw3CP4UiCdMcSI2Vcci1o=)
                          2: 7w79XeePk7yurRXhTABu270bWVU.crl (hash: Wv//Wyvk87WzxsM1VWJTx0kCtnJlpdJZFO87jX6TftY=)
                          3: FiWAWUaA9PAq7EYCucRhI4X4OjA.roa (hash: LrZbMygKaTHugy/xr017bsHS1FYdSALcrqp7tkKb3CA=)
                          4: I9D94vAMORn9BnYQdtM7qbiXt58.roa (hash: tRnx+C50ZgRJmovpffXEPU717rWWK6T8adcAGLprF4I=)
                          5: XpfJYLgMV5bnMcp4kd3YDs5m9SU.roa (hash: 9r0UifMuNC3XdFhlQB/mM/buwTOdToirlzSEloh4Ke4=)
                          6: _8ru7yjHkHZFd4T9rzkqG6vyZHE.roa (hash: gyLIqrjpNcTOkIhbabjexHZ1iC6HjtvhbyC/VMu1ZaM=)
                          7: _vrnY4z9n3eCeCrITmxUO-Pj33Y.roa (hash: XGTJ40NaVW8qqI0RUTAw8+XnQAVER3fUng+XIPClp7g=)
                          8: b9Q4ikh7P1-VewBOlxjh6fowvZA.roa (hash: JZ6Vz7a38Av/sfq39iREbtu+EKiAMHTBIZnSyAMSJE4=)
                          9: ibrjFLT4gT8cQigEm0PqDSKjwjc.roa (hash: YCO1VcOyG1lW5Ct+ItZ8CVjLxVqoUm88/zL2+EIwN4U=)
                          10: p-JxEDOKcaUoOpRmGmrl0kQQiWE.roa (hash: 1axE32b50kyPXpAsj6U5h6FUdP+HsrAsrldiViVW8K0=)
                          11: wBSh6gDeV7XNH2X7PQXLFHCUg3I.roa (hash: 99JIPx6lgWoxYu0uMeoGJkCqNZKh/023eQvcqtBW/MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:eb:60:53:70:09:39:5c:59:1f:19:fb:f6:c4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
        Validity
            Not Before: Jul 24 00:01:02 2026 GMT
            Not After : Jul 25 00:01:02 2026 GMT
        Subject: CN=1d5c3393e0b9bbd8e603411837222fe072ac643c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:1c:0c:45:3f:16:6e:84:74:23:cb:ff:92:
                    64:81:c1:9d:df:44:67:aa:fe:5e:58:17:de:a9:5b:
                    39:51:a1:34:89:2b:4f:67:25:72:19:42:7e:b5:ba:
                    80:ce:5a:07:c4:03:5b:78:b4:9c:aa:75:fd:f9:73:
                    fc:e2:41:d1:a2:ab:3b:7a:99:b3:70:d1:a3:69:2f:
                    41:6c:86:40:79:21:b4:02:fd:05:4a:2a:51:10:ec:
                    23:b6:29:e5:6f:d7:94:4a:9b:88:fd:c2:e2:6b:29:
                    f2:81:f3:4d:3b:67:a6:7b:e7:06:20:9a:bc:9c:bd:
                    83:f6:07:41:3f:06:85:eb:ce:22:3c:64:1b:ec:e0:
                    55:b1:19:e4:98:fd:68:36:fe:6b:5e:33:d2:d4:a7:
                    37:9f:fd:0f:5c:e6:ab:82:47:91:92:06:ca:b9:30:
                    54:96:b2:dd:55:d7:e9:ea:c4:d2:06:c0:11:7c:fc:
                    5f:70:71:52:56:69:0a:9b:0b:96:c0:6c:e3:32:67:
                    c2:bd:94:15:75:dd:2a:29:ec:13:02:ee:0a:c6:6f:
                    e4:bb:e8:90:f5:ab:77:2a:db:18:00:a3:c3:22:28:
                    d1:7b:95:1b:fb:66:f5:8d:bc:ca:29:3d:70:59:53:
                    59:c6:f6:3e:47:5f:d1:09:c6:ce:bc:47:8a:f7:0e:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:33:93:E0:B9:BB:D8:E6:03:41:18:37:22:2F:E0:72:AC:64:3C
            X509v3 Authority Key Identifier:
                keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:f3:67:48:10:d2:12:fa:27:79:1d:b0:8d:95:38:f2:13:
         c6:c4:6c:b2:cd:be:1f:d9:09:a0:ce:4f:02:87:4b:a8:59:75:
         f2:0c:a5:88:1b:b5:4f:07:c7:a6:66:7d:51:d0:bc:5f:89:f7:
         ae:9e:99:da:eb:ee:d7:2c:8a:52:46:5e:30:d3:9b:03:25:4e:
         56:f8:78:57:e9:49:09:73:db:cd:bc:04:50:69:31:03:57:69:
         bf:c8:52:17:d5:5d:75:86:5b:ca:e1:4d:87:dd:71:9e:1a:12:
         c7:a4:49:31:c2:35:fb:cf:3f:29:f8:f8:d5:7a:73:41:83:a2:
         b8:ed:ea:63:28:f0:bb:d6:dd:64:b6:1b:88:5f:8a:ae:cc:43:
         c4:ec:bb:ed:46:3f:d5:a5:31:02:bb:fb:1d:35:12:c8:9b:44:
         23:e7:1e:70:94:cc:9c:cc:a9:c8:96:b4:99:b5:aa:3a:e6:01:
         50:a0:a3:3d:23:77:4b:13:5e:bf:e7:08:00:d2:86:63:87:5b:
         d0:88:c1:ab:b2:a8:31:e0:6f:77:08:73:61:1b:84:84:c5:c8:
         ea:50:1d:b3:96:dd:68:81:89:7f:77:35:e1:40:20:92:80:90:
         0e:73:ca:31:95:36:07:bf:4a:95:e2:69:e1:c3:64:db:67:c3:
         28:fa:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:09 2026 by rpki-client