Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File:                     r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier:          gi2bo+ebj+nuu7uybuntTWFxWJX2V/Re6X0R/8J2Tt0=
Subject key identifier:   0F:0A:61:45:35:A3:0E:AB:12:B2:33:ED:02:9C:F9:9C:84:98:50:99
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer:       /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial:       019F92119FA78DA79BFA033EDD570C675593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number:          66
Signing time:             Fri 24 Jul 2026 03:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:56 +0000
Files and hashes:         1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
                          2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: TUPGps/qS8iF6dRVuogzLTjV0a5O8Gl85nqwViyytcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:9f:a7:8d:a7:9b:fa:03:3e:dd:57:0c:67:55:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
        Validity
            Not Before: Jul 24 03:00:56 2026 GMT
            Not After : Jul 25 03:00:56 2026 GMT
        Subject: CN=0f0a614535a30eab12b233ed029cf99c84985099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:ea:d8:48:6f:83:2c:4f:a6:e8:2a:d1:4f:
                    e2:1d:e0:07:d4:5d:63:23:de:7a:4c:fa:51:44:c6:
                    04:aa:aa:1e:9e:b8:6a:cf:e4:8a:e9:2e:7e:aa:07:
                    f7:64:54:6d:4a:11:69:6e:d4:63:3a:52:32:66:5d:
                    98:c3:d0:c0:e8:22:04:63:08:19:b4:6c:60:76:68:
                    2f:e6:5e:b0:29:4e:b5:7a:72:ac:97:2e:8f:e7:34:
                    d2:b2:4a:26:bd:95:00:28:f6:1b:de:c1:28:68:33:
                    9f:87:81:7b:1d:92:61:62:1e:9e:d4:e4:9a:5e:a8:
                    0b:11:d1:09:b7:b0:28:6b:a7:6b:0d:c0:c4:e3:e6:
                    01:67:9f:dc:fa:b9:a0:79:59:b7:82:0b:22:fd:ae:
                    6e:92:09:2d:a0:2d:b1:5f:93:fd:8e:50:a8:fc:e9:
                    b3:02:e2:a8:db:51:97:55:72:97:16:3a:72:fe:5b:
                    a2:e7:28:60:d6:34:f9:e0:19:83:68:e3:63:b4:b7:
                    a7:2a:06:05:b4:85:0a:df:7b:15:a0:18:61:51:18:
                    06:81:1a:c5:97:eb:6b:d6:b6:1c:2f:64:94:f6:44:
                    50:19:bc:95:7b:42:d9:74:fb:de:b6:c5:64:7d:52:
                    ad:9c:2b:a8:2e:bc:13:fe:1a:ce:59:2e:3e:07:ac:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:61:45:35:A3:0E:AB:12:B2:33:ED:02:9C:F9:9C:84:98:50:99
            X509v3 Authority Key Identifier:
                keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:33:72:d1:3e:28:08:2c:ee:b8:f8:cd:37:09:04:c2:d1:
         e6:31:7a:18:ee:3f:39:40:8f:34:ac:96:a5:ce:1e:8c:b8:26:
         7f:ef:1b:da:21:e0:d3:06:9c:2a:7c:1b:c4:1f:d2:56:ab:c9:
         4e:e8:6b:f4:b1:20:4c:04:3c:0b:a6:9c:f6:b7:1a:0d:a8:6c:
         62:8b:af:f0:38:5f:a4:6e:70:e2:69:a6:21:79:f4:b1:a5:49:
         e0:c2:be:8b:64:31:33:12:bb:35:3c:2e:24:5c:ef:b9:f5:34:
         dc:2f:79:cd:bc:1c:5f:04:53:e1:c9:79:ef:a5:c9:00:1c:12:
         f6:33:58:9a:7c:ae:82:1c:69:f1:78:76:1f:e6:30:d2:47:25:
         bb:e1:cc:e7:88:a7:e6:17:e2:eb:5a:04:d4:20:0c:32:90:30:
         c3:a1:63:8c:c7:e3:38:69:97:c7:ac:02:1d:77:d7:8a:41:49:
         4b:46:65:8e:f5:74:56:c0:a9:bd:a6:6c:e3:20:2d:00:45:07:
         fc:c7:a3:ad:3d:7b:ff:4a:b0:59:ab:b5:94:de:08:50:e9:36:
         b8:56:70:57:fd:ed:92:fb:65:91:54:9e:0b:94:8f:0a:18:86:
         c6:0e:a2:47:a4:4a:01:c3:29:71:59:f9:b4:51:02:2b:ee:dc:
         eb:02:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:26 2026 by rpki-client