Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File:                     fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier:          KM8HeydWL1oZHn/7PnLixPlo1PCLSzoUUm5sHBdrFJg=
Subject key identifier:   6E:43:3A:DA:BF:22:FC:91:AA:31:6D:F0:88:2F:6C:BD:52:DD:31:93
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer:       /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial:       019F939201C99A9FA648A0A3BBA048C00DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number:          19C3
Signing time:             Fri 24 Jul 2026 10:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:47 +0000
Files and hashes:         1: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
                          2: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: Ta7EA505v62+ctrEvjMV6R5pVdrlxwDQI9nY4+MqwPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:01:c9:9a:9f:a6:48:a0:a3:bb:a0:48:c0:0d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
        Validity
            Not Before: Jul 24 10:00:47 2026 GMT
            Not After : Jul 25 10:00:47 2026 GMT
        Subject: CN=6e433adabf22fc91aa316df0882f6cbd52dd3193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:dd:0e:72:c4:08:4b:5a:f3:15:19:b1:dc:
                    f7:05:d1:5f:c9:cc:40:a3:06:08:8b:b2:39:d5:bb:
                    bb:a6:42:ea:dd:02:2e:ba:19:3f:22:11:7e:0c:22:
                    58:d4:67:66:81:a4:21:dd:5a:b5:fd:33:ba:56:23:
                    14:da:ad:1b:54:d9:c4:3c:38:a9:a7:de:04:54:44:
                    0c:8d:ed:1d:41:82:45:b4:b8:cf:dd:31:df:bc:4b:
                    24:75:c3:6e:c0:6d:68:27:6b:7a:a0:21:80:85:58:
                    85:fb:29:78:d8:49:ce:05:62:1c:4e:d3:f4:e5:92:
                    92:e0:53:81:0f:45:cc:ce:5f:2f:a8:9a:f2:30:6e:
                    86:be:c7:d4:10:a1:60:9b:cf:2f:17:6e:34:2b:23:
                    0d:ca:e7:7f:54:eb:f0:37:7e:d1:bf:1b:74:53:85:
                    1f:d8:7f:8a:23:1e:f1:5b:cf:5f:b4:96:3d:db:46:
                    05:fe:7b:38:27:6f:b9:18:81:a4:6b:ad:f2:70:6b:
                    61:d9:15:de:bc:28:95:37:71:66:b7:dd:c7:39:62:
                    e0:35:4c:54:64:a2:52:fb:f0:d4:e2:8b:f1:23:02:
                    e7:bd:6e:2a:88:93:1c:2b:7d:06:a0:51:f2:90:89:
                    3a:1d:8b:33:f5:71:f3:18:d2:68:95:7a:ce:0a:5b:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:3A:DA:BF:22:FC:91:AA:31:6D:F0:88:2F:6C:BD:52:DD:31:93
            X509v3 Authority Key Identifier:
                keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:90:8c:13:70:ac:c1:fe:9c:28:cc:db:5d:d9:59:8f:46:06:
         95:d4:f7:94:0e:73:05:49:d6:d4:e8:37:26:0b:66:07:e7:01:
         91:d3:34:e4:71:80:51:b5:38:2b:5d:68:2c:e0:f3:7b:48:a8:
         74:7b:4c:4c:f0:7e:2e:8c:75:90:5d:fa:a8:0f:52:33:6c:35:
         21:83:7a:c2:8c:7a:0f:58:55:86:93:aa:ac:11:0b:ba:c3:cf:
         92:27:e7:c2:cd:73:1b:6e:72:a0:af:98:bb:37:14:fd:da:6d:
         b5:c7:30:54:82:c7:cb:59:b8:8c:b8:c3:12:f5:1e:f1:99:28:
         b1:5a:05:c4:49:99:7b:d2:4b:18:6a:78:b1:38:5b:e6:2a:07:
         69:65:ed:68:62:a7:4b:e8:f0:6b:cc:8e:ad:3e:04:d8:bf:7a:
         81:ca:22:98:b2:0f:42:99:90:c2:82:bb:34:59:14:91:71:bc:
         c0:d5:bc:47:7a:64:7a:68:cf:c1:f8:46:bb:f9:67:71:a3:6e:
         86:97:1b:e2:89:8a:25:93:d1:fc:1d:b7:47:e8:18:94:fd:52:
         e4:c3:db:60:5f:0f:ef:2d:d3:4c:8b:9b:96:e8:a7:30:08:8b:
         99:3d:dc:5c:01:f6:0b:7a:35:88:0f:72:f9:d3:49:11:eb:c0:
         5f:f9:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:06 2026 by rpki-client