Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File:                     7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier:          XEW3gaiI4ENauBGOshdP3dWjVYvawtTZztZ/0lcjRgQ=
Subject key identifier:   CC:95:35:FE:C6:94:DE:2C:E3:5B:F4:76:61:C2:98:A8:30:A2:52:42
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer:       /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial:       019F92B61A88E90C906604DA9B36CFB1E4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number:          17B0
Signing time:             Fri 24 Jul 2026 06:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:35 +0000
Files and hashes:         1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
                          2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
                          3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: 6LcVdX9BlYJLfbOwwG0SMiuN1UJBt8/BScP3QHrbYKA=)
                          4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:1a:88:e9:0c:90:66:04:da:9b:36:cf:b1:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
        Validity
            Not Before: Jul 24 06:00:35 2026 GMT
            Not After : Jul 25 06:00:35 2026 GMT
        Subject: CN=cc9535fec694de2ce35bf47661c298a830a25242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:e4:da:2b:c4:ea:ed:3d:37:40:b2:99:df:
                    ae:af:20:f9:d4:ff:d1:d8:ca:3a:74:63:9c:00:af:
                    02:b5:ab:1c:0f:35:6b:ae:e7:ad:84:21:9f:df:cc:
                    b8:b6:a0:a7:c6:82:92:79:88:ee:20:0e:a9:93:66:
                    bd:c1:60:c7:1d:54:fa:78:8e:3f:b0:7e:b6:69:9c:
                    4f:89:4b:2b:37:fb:15:44:04:bf:05:aa:b8:cf:f3:
                    c0:76:5e:0c:30:27:1b:5e:7f:8c:7a:5c:3c:6f:b8:
                    ea:9e:dd:5c:f5:f7:25:49:2d:08:f1:f1:99:29:cb:
                    54:34:a6:d8:65:fb:59:bd:b4:b1:b3:c2:b1:3d:37:
                    09:e3:69:87:23:e9:1a:81:67:0b:73:b5:36:35:37:
                    d1:32:4d:8a:04:07:81:76:cc:9e:f2:5d:55:55:8d:
                    bb:b2:1a:5f:45:c8:2d:2d:df:db:2c:16:8b:ce:59:
                    53:a1:b3:b0:f4:95:9b:6f:ac:d1:d3:bd:47:75:80:
                    9c:51:d3:97:fc:95:24:9e:be:a7:35:57:2d:fd:3d:
                    bc:66:0a:03:59:84:c0:0a:89:f9:7b:73:b7:9f:62:
                    37:52:9f:5a:5c:be:ff:c7:c2:08:74:81:6e:c9:f3:
                    6e:da:b6:3c:a4:e0:a4:26:39:12:34:27:f0:f7:5c:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:95:35:FE:C6:94:DE:2C:E3:5B:F4:76:61:C2:98:A8:30:A2:52:42
            X509v3 Authority Key Identifier:
                keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:af:87:b6:cc:14:64:2c:ea:4f:cd:25:fe:53:d5:a0:b9:
         74:9d:e8:b6:c3:3b:16:8d:bb:53:ce:fa:50:b3:d4:ee:83:4f:
         74:47:a4:f1:d2:64:68:07:88:df:d6:db:68:1c:80:e2:af:cf:
         cd:e5:43:5a:51:95:fb:6d:ba:a0:58:c5:fd:41:d7:f2:3f:6b:
         c2:26:8a:33:27:a4:94:5b:5d:c8:60:2b:bf:31:cb:1e:d8:55:
         72:aa:58:d9:85:1a:0e:e3:ff:0f:7a:dc:23:b3:e1:f8:21:36:
         b1:37:40:ec:61:19:90:2c:40:3f:6b:3f:ae:7e:f0:ab:74:15:
         42:0f:40:49:03:7a:db:da:d4:a9:08:2e:24:67:09:79:a2:28:
         38:99:60:be:a2:cb:62:98:3d:84:25:ec:cc:92:1c:83:f6:d9:
         fa:11:3e:1f:be:50:c8:e0:ab:ef:cf:f5:14:84:54:a2:56:5b:
         af:af:bf:95:2d:38:56:cb:2c:25:65:40:4a:2d:dc:d2:72:93:
         3a:31:0e:6a:f7:23:9a:2e:07:e5:da:0e:b2:42:cd:27:cd:8c:
         8e:5b:32:2a:62:bf:f1:23:3c:1e:a4:9f:22:30:3f:e1:29:8f:
         1c:5f:b7:68:3b:6a:33:bc:4f:8d:58:0a:96:fd:3d:17:fc:f7:
         af:f4:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:13 2026 by rpki-client