Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
File:                     MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft (raw, json)
Hash identifier:          o9BcQmkVZ+L62IVopn5Gj0sKgpqV4/nJzS8+pGdUMTY=
Subject key identifier:   68:56:1B:1A:36:96:94:87:B9:2A:7C:24:4F:2A:C3:1D:28:00:5F:3D
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Certificate issuer:       /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial:       019F92ECE0118CAD63678A791BD174668CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
Manifest number:          017F
Signing time:             Fri 24 Jul 2026 07:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:25 +0000
Files and hashes:         1: 7Nec0zgnRC0mgd2UCiQb57qGoQo.roa (hash: QAq0HQWlQiRt1izpzv0A0gRL3ce2Gd+6X/bnw4KM3nA=)
                          2: EqD5liyFpdPq2XLyZyti6Tv-BNE.roa (hash: 45CS/GD+FH3aynJbkHhA0cCnbCPZTt1kF44EBED09Gk=)
                          3: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl (hash: UYJpGHv+Zb3BFrRD2QOF1t8JFkt+snBUnKjHvE/r36Q=)
                          4: ZUFhy3Q3TnBrOEV6oC_51srJdWY.roa (hash: 9diosIXqGs1+lYyW3HLA/DSBkni7soymXvUgQxb3AL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:e0:11:8c:ad:63:67:8a:79:1b:d1:74:66:8c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
        Validity
            Not Before: Jul 24 07:00:25 2026 GMT
            Not After : Jul 25 07:00:25 2026 GMT
        Subject: CN=68561b1a36969487b92a7c244f2ac31d28005f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:b3:9f:30:98:7b:fc:04:0a:95:9f:e5:1f:
                    4c:37:b9:2d:e1:6e:af:23:e3:9b:12:2d:bb:59:9f:
                    d7:79:01:17:23:a0:d6:6e:c5:18:98:53:2d:56:c0:
                    ab:a3:bd:fc:51:92:7d:34:08:cc:5d:c7:f9:5e:5b:
                    f7:a2:c1:4c:4d:92:e3:bc:ee:a1:4b:3d:04:e0:7b:
                    a2:52:81:c0:b9:0f:35:4f:14:89:e5:64:35:be:dd:
                    23:97:fb:e0:c5:c5:29:71:4a:af:a5:97:6b:69:9f:
                    03:33:61:11:d2:5f:82:66:74:2f:ea:13:c1:d0:c2:
                    13:06:47:a6:33:1f:94:3e:94:75:27:04:20:55:d0:
                    18:d2:26:a4:35:bd:21:1b:f2:46:9f:f2:34:ad:51:
                    23:14:6c:53:e9:37:e8:6a:40:50:86:21:93:3d:f7:
                    86:f8:72:a7:4c:70:45:c1:27:95:42:88:60:58:1e:
                    a6:1e:12:ef:84:f0:de:7e:14:fc:b0:bd:1d:b9:61:
                    f8:3d:27:7c:de:7a:6c:05:27:92:29:1e:73:41:f6:
                    58:2e:4d:ef:db:04:ef:9a:25:0b:32:ca:4a:c6:31:
                    b4:b9:54:79:4a:76:20:7e:28:6b:74:18:92:14:e8:
                    1b:fd:38:7c:f4:28:77:a3:2e:09:87:72:e0:06:89:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:56:1B:1A:36:96:94:87:B9:2A:7C:24:4F:2A:C3:1D:28:00:5F:3D
            X509v3 Authority Key Identifier:
                keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:c3:07:2c:f8:fe:18:72:ea:54:ba:c4:47:3d:3d:93:06:
         f4:d1:13:87:6c:53:19:76:b8:1f:35:0c:c5:ee:31:8c:bb:f9:
         90:d8:c2:d4:30:88:7d:ae:03:fa:48:90:37:5e:dc:59:95:92:
         a3:69:44:af:ec:5d:96:2f:da:d5:45:33:52:a7:5c:a0:e7:91:
         4f:e9:e3:ad:13:a6:6c:5f:bc:65:4f:8b:40:4c:42:77:b6:d6:
         cb:6e:6c:c9:15:f3:e1:cb:13:b8:ea:49:10:82:3e:4a:32:7c:
         3a:fa:77:27:cf:91:7a:9b:4e:02:95:37:08:da:3d:99:f7:3f:
         40:31:5b:93:8b:b8:ad:c5:1b:ca:b9:47:e1:b0:65:7a:75:97:
         0a:d8:60:30:57:0e:e2:a9:4a:28:84:9a:1e:ea:53:77:ac:fc:
         04:2a:9c:fd:53:58:50:8f:dd:80:4f:d2:b8:6f:f4:29:ab:c7:
         bf:e4:48:e3:22:69:1e:a4:b4:35:f6:05:29:51:bf:96:fa:3f:
         83:94:1b:2b:e9:65:85:73:1e:86:cf:fd:e2:4a:7e:0b:56:d8:
         c2:47:60:d9:2a:e7:2f:9d:96:51:9d:27:b1:d1:76:33:d0:f8:
         da:cf:9b:ac:cf:e0:2c:54:f9:a3:b0:9d:72:9b:6c:b8:84:24:
         b1:e4:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:09 2026 by rpki-client