Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File:                     e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier:          gLWpbz0OZu5ycZqdW8T2MN16i1DhHVdQZuvaYCrpc4o=
Subject key identifier:   FD:CA:69:14:13:AF:45:59:0D:69:56:C2:46:88:15:C3:96:15:66:45
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer:       /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial:       019F8FEC98F92DDD1598E0CA2E8DC347BF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number:          0F2B
Signing time:             Thu 23 Jul 2026 17:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:15 +0000
Files and hashes:         1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
                          2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: 0UjYSCtvvDQcGqgJ73VTY9OeAxadLJ9vCnMEUZ6ddV4=)
                          3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:98:f9:2d:dd:15:98:e0:ca:2e:8d:c3:47:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
        Validity
            Not Before: Jul 23 17:01:15 2026 GMT
            Not After : Jul 24 17:01:15 2026 GMT
        Subject: CN=fdca691413af45590d6956c2468815c396156645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:b2:69:f7:a1:36:16:4e:2f:39:20:d0:a2:
                    fb:cf:af:6f:a6:69:67:4e:63:c8:69:49:a8:83:d3:
                    ce:cf:d2:0d:2c:32:ff:a8:aa:53:bc:5d:b9:b9:b2:
                    29:52:c8:70:ca:b0:57:b2:b2:79:7f:a0:0a:14:c8:
                    54:89:c1:c6:d4:2f:90:68:39:19:1b:27:27:a0:c6:
                    0b:58:1e:63:17:97:4b:ef:15:b3:89:e9:64:e6:6a:
                    3c:9e:df:36:c7:6f:2d:73:a7:25:12:b5:96:ab:3b:
                    fa:86:ef:19:bd:d7:cd:2f:b0:45:a4:9d:bc:2d:e6:
                    6a:12:24:66:d1:ed:ec:0b:f4:ec:18:47:3d:f0:8d:
                    cd:68:2c:fa:8c:f4:49:a0:57:cc:39:4e:18:d7:89:
                    d2:7b:1d:f1:fc:63:3b:66:5f:7f:fa:cc:d2:b0:0b:
                    0b:27:57:68:4a:c4:28:27:be:4f:e3:03:4b:66:c5:
                    3b:f3:00:da:e6:70:39:5d:e1:ff:0e:63:a9:b8:b5:
                    c4:b6:4d:f0:c8:4a:49:16:be:a9:12:63:21:2a:a8:
                    3a:87:d8:a3:09:02:14:a5:68:e4:8f:d9:e7:3a:fe:
                    80:46:79:cf:9e:eb:ac:73:24:d8:88:aa:55:29:9d:
                    db:50:5e:73:ef:9b:99:cf:7f:80:da:c8:0f:70:96:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:69:14:13:AF:45:59:0D:69:56:C2:46:88:15:C3:96:15:66:45
            X509v3 Authority Key Identifier:
                keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:d5:6f:9e:fb:08:e3:8f:5a:6a:5f:6c:a3:f2:c1:67:8c:70:
         75:d4:91:11:f0:9a:38:90:45:08:6d:a8:1f:9e:ac:c7:85:f3:
         8c:67:f9:a0:57:41:20:f4:5b:7b:46:c1:20:5f:16:e1:f5:4b:
         82:05:ad:03:59:46:b9:fa:cc:a3:1d:28:20:2b:90:b6:4b:04:
         a5:18:e8:35:7c:81:83:aa:b8:5e:01:bc:2a:c6:66:be:86:4e:
         cb:43:32:68:62:72:90:3b:24:ea:9a:cd:ab:df:45:97:ad:d5:
         60:d2:fb:00:dc:74:0c:1a:73:41:bb:e7:28:80:3f:39:5c:98:
         bc:33:b0:59:91:0a:f3:cb:8a:32:f8:e3:b2:53:93:03:b9:19:
         71:50:75:b9:5b:78:07:9b:74:15:84:4d:9d:cf:24:03:38:97:
         eb:5b:00:44:06:99:d3:86:89:f3:3d:34:d9:30:d8:91:44:34:
         8d:de:bc:b0:64:65:1c:90:18:84:00:06:c9:f8:5c:7f:b1:a0:
         52:42:7e:ce:95:66:b4:92:ce:53:c8:20:7d:f3:c7:d5:e8:45:
         d7:98:9c:62:38:8b:64:6a:02:29:0b:f0:59:9a:b7:6e:26:a6:
         d0:13:8e:ae:12:c1:37:cb:83:0b:64:a0:90:ef:c3:22:13:99:
         64:90:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:47 2026 by rpki-client