Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File:                     7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier:          V9qQUfdncCoDv+BjiUoPpleSSz2D3OXOp3RM710CU9Q=
Subject key identifier:   BD:A7:48:88:2E:5D:43:0F:43:46:A0:3E:04:CF:A0:87:16:65:16:EC
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer:       /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial:       019F8F4725D2FDD3C00250B6B5E065E92B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number:          0AFB
Signing time:             Thu 23 Jul 2026 14:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:32 +0000
Files and hashes:         1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
                          2: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
                          3: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: LqaFzb8E5QYXgxQf06vBLz5zIMSEJGgDNyB+F1N646A=)
                          4: RM00pEOnjdUoQZ1uOORIvICjLRc.roa (hash: 1q7noK5WwG38lLIIHMiI0dpQ1QOgidIvosSPHpVKMS8=)
                          5: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
                          6: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
                          7: n6Q7Dz0YljZRgjb4Ej38nYOG1kE.roa (hash: A8op5Re6jPP6C2oorXQWf6MTZbk9dP/pw1d5qjwWEks=)
                          8: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:25:d2:fd:d3:c0:02:50:b6:b5:e0:65:e9:2b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
        Validity
            Not Before: Jul 23 14:00:32 2026 GMT
            Not After : Jul 24 14:00:32 2026 GMT
        Subject: CN=bda748882e5d430f4346a03e04cfa087166516ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:bb:64:cd:1e:fe:a0:b7:7a:b2:cc:d5:f5:
                    dd:22:8d:d8:05:ec:d8:99:89:88:c2:01:dc:b9:e8:
                    9b:60:87:7f:f4:76:50:59:c7:3a:eb:d0:93:18:c1:
                    70:99:9c:38:5a:e9:16:8e:a1:74:e1:8e:4e:81:76:
                    b4:8a:4a:24:43:91:bc:ac:e7:36:d4:b6:83:b1:39:
                    f9:46:74:5e:89:92:63:a4:1b:57:05:b5:20:ba:30:
                    2b:09:32:c0:84:34:d8:f6:ce:ed:c0:2f:18:90:49:
                    f7:87:26:ba:58:f1:02:8a:a7:3d:ef:7a:cc:2e:ae:
                    4e:0e:94:24:85:15:66:fa:79:5f:ec:63:ea:56:26:
                    b3:11:78:00:f0:a6:f7:9b:6b:eb:a1:e3:09:0b:16:
                    25:ce:97:a8:56:9d:6b:de:eb:28:b3:5b:6e:10:0c:
                    93:15:03:9d:49:65:16:e1:15:14:b7:96:8c:54:3e:
                    67:05:8d:8d:af:24:d3:11:7f:b6:93:f4:e5:92:bf:
                    2e:d1:e7:c2:d2:29:b2:e2:3d:02:ec:b7:5e:0d:a8:
                    13:77:18:69:0b:5e:1a:ca:22:01:b3:b8:29:a2:9f:
                    b3:20:12:37:f6:06:95:b2:a5:00:8b:fc:ab:1a:55:
                    3b:6e:3b:a3:10:f0:0c:00:16:b9:70:e2:b3:2f:50:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:48:88:2E:5D:43:0F:43:46:A0:3E:04:CF:A0:87:16:65:16:EC
            X509v3 Authority Key Identifier:
                keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:ab:a4:79:05:ed:30:3b:97:6a:6c:41:19:40:87:76:14:
         fa:1b:c1:f0:b3:7d:8e:bf:87:ee:39:41:27:3f:81:ca:71:be:
         72:c5:31:38:b3:ba:6b:97:8b:8e:ba:e0:49:e5:e6:53:b9:19:
         3c:eb:fd:aa:c1:6e:7f:4f:81:30:3f:26:08:3e:cb:1f:ca:5d:
         dc:2a:22:73:9f:fd:87:05:65:94:36:df:a4:0e:32:7f:61:02:
         17:33:4f:1d:da:5f:e4:8a:93:71:9c:ae:44:64:53:f5:e9:aa:
         4d:17:d8:ce:d6:94:22:96:69:fe:bf:9f:46:fe:ac:13:2b:b0:
         a6:a2:b6:b5:3d:87:bb:26:e9:4c:ae:ba:cb:01:f4:ac:a4:d7:
         3b:34:64:36:5e:48:41:5f:b1:d3:8a:7c:d2:32:52:15:d7:fb:
         06:29:77:f0:6f:6f:2c:15:d5:32:d8:14:3a:18:b4:fd:94:3b:
         52:6c:ae:c4:58:8e:71:4c:44:e9:71:65:06:f9:79:62:b8:37:
         e9:c1:59:f3:ad:75:4b:1a:d5:d7:a1:23:bc:97:a4:e4:2a:b8:
         3d:93:28:16:f7:23:90:e3:30:44:f9:29:a9:61:63:70:f6:ad:
         bf:98:31:18:10:64:53:87:78:9d:2a:d7:b6:6f:7e:dd:71:5b:
         7e:a8:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:00 2026 by rpki-client