Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File:                     b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier:          EiKYqOLeGUIFwwkWGSyAYVeEp6LoMHmlmYkcOjsVOTA=
Subject key identifier:   C8:B0:89:89:C7:6A:7E:C6:2B:9C:49:D8:02:95:17:2D:96:5A:F2:42
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer:       /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial:       019F965C051DEACFDA5C203608A08E6D9E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 23:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 23:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 23:00:40 +0000
Files and hashes:         1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
                          2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: 4oqK+z9bkFD9xUuWNWukgpCaeL13Fr6wdD8NtPPLmu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:5c:05:1d:ea:cf:da:5c:20:36:08:a0:8e:6d:9e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
        Validity
            Not Before: Jul 24 23:00:40 2026 GMT
            Not After : Jul 25 23:00:40 2026 GMT
        Subject: CN=c8b08989c76a7ec62b9c49d80295172d965af242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:78:45:fd:24:9e:97:f3:16:30:8c:43:52:
                    bb:ec:d9:49:32:be:19:ff:74:71:f8:ec:65:9c:ae:
                    6f:5b:c1:61:02:a9:e2:cc:b9:9d:bb:6b:2a:bc:99:
                    eb:42:23:a4:c7:06:4b:fc:01:05:72:3c:ee:0b:2b:
                    27:18:14:41:44:36:6e:cc:68:fb:b6:29:1f:34:76:
                    c1:6d:d4:d0:75:87:65:83:55:f4:56:c5:51:b5:89:
                    7d:d3:9c:1e:46:fa:18:3a:45:49:63:0f:21:2a:2a:
                    84:e2:82:38:61:83:b7:51:af:a3:23:8b:76:3c:87:
                    8c:f6:70:ae:f8:a7:10:f8:24:5f:28:8e:1b:42:72:
                    68:91:8a:7f:16:50:75:7b:a1:9a:d2:05:4a:6a:38:
                    d1:7a:81:69:4d:06:19:2e:29:da:f5:d4:4c:f2:1a:
                    ce:2d:13:f1:49:92:30:ed:32:b6:4f:26:58:27:a3:
                    ed:c6:96:7e:02:a1:5b:5f:f6:bf:f7:b2:b7:b9:a5:
                    15:82:e5:11:2e:75:45:5d:93:de:04:6d:0a:69:95:
                    b1:d8:eb:23:f4:9c:06:1b:2e:3b:ab:ce:99:c1:1e:
                    10:8d:db:25:79:b0:e2:9a:82:11:1b:9e:6c:19:7b:
                    85:95:2b:34:53:a3:57:68:56:ec:56:14:de:34:ee:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B0:89:89:C7:6A:7E:C6:2B:9C:49:D8:02:95:17:2D:96:5A:F2:42
            X509v3 Authority Key Identifier:
                keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:72:4c:14:3e:bf:ec:ce:45:da:04:49:03:06:f2:d7:a2:e9:
         61:eb:7d:e3:8d:8e:78:1e:51:3d:06:5f:ea:05:7f:06:3e:bc:
         b6:41:23:83:bd:d6:a6:0c:04:8e:0f:82:c7:2f:91:55:28:3d:
         a5:cd:0c:de:3d:95:e8:5e:9a:fd:7f:3e:e1:4c:45:5a:51:1d:
         0f:d3:c2:84:4e:e1:64:e6:8d:0e:01:a0:45:f0:59:2f:b5:05:
         7f:c6:2b:91:3d:85:cf:69:47:c5:ae:dd:19:6d:0a:a0:a6:36:
         43:c9:5a:36:f8:b7:1d:6a:d1:07:17:18:fa:2c:a3:0f:9f:74:
         17:f0:91:dd:ef:2b:14:1f:31:21:4e:7a:3a:bf:b1:20:5d:f2:
         1b:bb:dc:eb:df:2f:76:48:e7:95:44:30:c7:3a:c4:87:ed:e3:
         75:ae:38:c3:8b:16:3c:e2:91:c5:79:fb:43:8f:57:01:f6:50:
         ef:64:93:5f:a7:4c:74:2b:b4:d2:61:1e:c7:55:6a:9a:37:86:
         d6:2f:6d:3e:a9:d3:42:14:99:a6:8e:c2:c2:50:be:da:d9:11:
         8c:8b:87:d8:cc:dc:14:b2:bb:32:44:eb:72:43:b1:fd:b0:d7:
         6d:98:a3:08:71:9a:58:2f:e7:94:07:d7:bb:bd:d8:c0:12:90:
         2d:9e:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:51 2026 by rpki-client