Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          e1UC8vShiKT5+SEMzZXEX0qqPKz/Cesh15xzTUo4dE8=
Subject key identifier:   E6:2E:F3:20:A8:92:B2:A1:53:15:7B:64:D7:85:0C:36:6E:93:43:BA
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       019F95809C7541EB7BBCC1F76E57FC460A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 19:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:01 +0000
Files and hashes:         1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: o99YUZyJf1UrHcM10juMMgOAeCE6zZ0/417whoJMvF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:9c:75:41:eb:7b:bc:c1:f7:6e:57:fc:46:0a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Jul 24 19:01:01 2026 GMT
            Not After : Jul 25 19:01:01 2026 GMT
        Subject: CN=e62ef320a892b2a153157b64d7850c366e9343ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:5e:23:a1:41:ae:13:c9:99:75:8c:cd:d6:
                    aa:c6:a5:0f:c2:ab:6e:bb:54:51:12:c6:ac:d2:07:
                    07:49:91:a3:f9:35:cf:f9:1d:2f:ad:ba:33:0e:bf:
                    e9:c7:bc:d4:17:7b:2e:36:56:75:10:76:b2:5d:89:
                    a9:c7:eb:dd:94:27:04:53:c3:c4:d2:6a:6b:54:ac:
                    f6:dc:f3:33:7e:e5:66:68:da:86:00:02:20:fb:68:
                    db:51:46:0e:e6:2f:99:70:cd:47:72:87:61:8c:2c:
                    8f:fc:52:70:52:11:9b:de:51:d3:54:84:9a:42:83:
                    a3:bb:e6:e5:30:7f:19:5a:a0:64:04:e0:eb:b6:dc:
                    25:b8:88:9d:1d:de:8f:c3:f3:81:f2:92:4b:21:f6:
                    a0:27:66:30:52:c3:ed:75:20:98:20:2a:4b:f6:13:
                    f1:e9:a9:23:04:73:19:09:c3:ea:48:da:f5:6f:dd:
                    ae:94:1b:48:0b:29:57:18:0c:16:e5:fa:9d:74:9b:
                    f3:84:e5:97:fe:de:f3:ac:d9:f3:61:8e:2d:39:3b:
                    57:0c:e2:1c:ac:2c:5e:82:7f:62:05:1b:70:32:12:
                    e0:30:76:4a:c0:c6:7c:15:df:68:7d:ba:e6:56:2a:
                    dc:62:c1:04:12:02:9b:0d:d9:57:46:34:38:37:e3:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2E:F3:20:A8:92:B2:A1:53:15:7B:64:D7:85:0C:36:6E:93:43:BA
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:42:2e:30:b4:ac:17:43:63:da:f1:8a:9c:ac:f7:4e:f3:
         25:95:91:89:0c:45:8b:5d:0c:f0:84:73:4b:c9:94:f5:ab:c5:
         71:d1:ca:97:3d:cb:c8:10:e5:fa:ae:cb:61:9c:1f:17:17:df:
         4e:dc:a2:2a:c4:03:c2:a1:dd:8c:95:d7:9a:ee:fc:d0:fc:52:
         9a:86:9b:0f:97:40:d4:16:73:36:b7:2b:fb:73:ab:11:d2:44:
         f8:fa:37:83:72:81:b6:37:5e:83:cd:db:1c:a3:f5:93:a2:ed:
         8f:76:47:62:aa:97:fe:2f:5b:ae:f5:96:71:40:3a:25:77:3f:
         63:99:04:7e:69:83:a0:fd:3a:bd:9c:90:8c:bf:1f:4b:b4:c0:
         7e:5c:af:90:a0:05:d0:93:6c:ee:b8:71:51:5a:22:62:35:e8:
         4a:6d:cd:31:b9:b7:fa:4f:8d:92:ba:db:4e:1c:cb:03:41:2c:
         42:e8:61:f0:a1:91:6d:70:ef:90:03:50:4f:b4:27:4d:55:94:
         02:0c:47:7e:72:e5:0e:44:f6:f9:87:b5:81:f7:ce:d2:96:e7:
         7d:33:4c:64:d7:17:6e:fa:80:70:68:85:da:25:5a:af:c2:5f:
         d2:2b:58:54:14:9e:14:fd:b6:14:a0:96:1f:7f:bc:9c:dd:f2:
         84:cf:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:34 2026 by rpki-client