Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          USiAwFeEXI+toj8HgC3YpvO08ZVzujd8IpRDifLuukY=
Subject key identifier:   77:B2:7D:A2:68:52:40:ED:2C:2F:F1:5C:2B:52:16:DF:09:BE:CF:F4
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019F8FEC534B4ECFB23E39533A73DBAC0F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 17:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:57 +0000
Files and hashes:         1: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (hash: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY=)
                          2: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (hash: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw=)
                          3: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: KRZwop7HFyXLyhVsCe5KQ0It+hUYGk6isOMp9cSDftk=)
                          4: uZerU1VFymarw95eI6TPiaIDHis.roa (hash: C1hv+0PjM/vZjHfsuivW+vQVr2csnV+QB+NjMqb8++s=)
                          5: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (hash: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:53:4b:4e:cf:b2:3e:39:53:3a:73:db:ac:0f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Jul 23 17:00:57 2026 GMT
            Not After : Jul 24 17:00:57 2026 GMT
        Subject: CN=77b27da2685240ed2c2ff15c2b5216df09becff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:2e:98:ca:db:b4:e4:f4:c4:13:5a:49:fb:
                    af:92:a0:e4:93:e9:14:f4:1e:61:18:e1:cc:1a:54:
                    ec:9f:a8:3e:6b:c0:2f:af:ef:07:8e:7c:19:53:0e:
                    e5:f3:ee:e6:9c:9a:42:17:6f:37:7b:6b:96:47:6d:
                    3b:60:1d:82:d5:b1:14:08:19:d4:28:32:1d:c6:90:
                    38:6a:11:7d:27:3e:1a:d3:76:12:df:9d:d1:f3:8a:
                    dc:87:f9:75:20:39:56:af:01:39:23:99:09:3c:c4:
                    e7:05:49:2c:22:15:e1:5c:85:2a:23:e8:02:5b:1e:
                    d7:79:41:3d:ec:07:d2:fa:c5:35:17:9b:55:e1:c1:
                    d4:f6:50:cc:ef:f1:fa:0a:42:9d:99:75:e9:9c:b6:
                    d7:76:a8:77:10:f5:3f:52:af:b3:1e:1b:41:af:4d:
                    86:f2:80:4e:11:6d:8e:4c:31:58:93:67:7a:53:10:
                    d8:14:a0:31:62:7a:1b:7c:1c:95:36:aa:fb:46:b4:
                    6f:ba:32:73:fc:bf:b9:0d:73:ab:ab:be:26:35:e9:
                    bb:92:15:d4:bd:b0:4c:55:bf:f6:6b:83:c9:71:e1:
                    15:8b:cb:95:7f:5d:81:49:d8:72:ec:77:1b:64:bc:
                    75:c7:4e:3c:1b:17:76:09:d5:86:77:6a:9b:95:6f:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:7D:A2:68:52:40:ED:2C:2F:F1:5C:2B:52:16:DF:09:BE:CF:F4
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:29:37:56:fd:ce:3f:6b:9e:d9:6d:b4:f1:26:da:62:47:
         bd:87:86:05:21:bc:f4:be:16:86:87:3f:72:bd:01:21:6e:c4:
         54:bc:e3:92:58:9a:2a:5f:21:20:a1:41:e1:9f:c2:de:ee:6d:
         08:3d:d4:a7:2e:63:8f:03:47:89:46:5a:3c:1d:df:20:ee:28:
         92:af:43:24:b9:a9:f2:c0:f4:84:c2:16:da:07:da:65:66:b0:
         e8:1d:ef:f6:b5:22:34:4d:24:91:1b:8b:90:c7:07:42:2f:ce:
         c2:48:94:35:9f:d9:c7:f2:9d:a8:23:3f:1e:21:a0:05:cb:75:
         47:c6:bf:93:e6:26:6b:fe:76:0a:d4:1a:ef:34:45:ac:f1:8d:
         2d:8d:cb:c2:2f:7d:63:49:55:11:28:07:d0:c9:4a:10:93:99:
         ff:0d:f6:13:cd:ac:04:de:67:10:bc:5a:92:76:90:7f:f2:08:
         35:19:f5:52:fa:26:1f:13:fb:98:6e:de:b0:4a:2a:1e:c7:16:
         dd:f4:95:74:ae:39:26:5a:82:ac:42:19:78:3e:6d:ba:10:e2:
         7b:62:fe:5d:3c:e5:9d:b4:03:b3:55:2e:cb:f4:1e:b1:01:45:
         33:6d:6e:de:1a:49:8d:b4:79:60:1f:62:96:ab:4d:30:12:50:
         09:3e:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:49 2026 by rpki-client