Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File:                     _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier:          sF887zqaABJKP2k11D18YJWnQq0v1IxJOR0i4E3WBqM=
Subject key identifier:   C5:E7:E8:AC:3E:5D:EC:D3:B0:D9:C3:2C:CA:C6:47:6E:49:5A:A4:4B
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer:       /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial:       019F905A7B5A188D8E0296C43557255AC9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number:          1076
Signing time:             Thu 23 Jul 2026 19:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:16 +0000
Files and hashes:         1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
                          2: TcH4GIuktxSUfHtquYZnE0nBhtE.roa (hash: rpQl9MUfMf8qQcoJFxTK9nJpUXGjE7ncDisSQXNZN4E=)
                          3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: aTTqQ7m5ABnE6DfrCqo/+IM51xzxZW+oMmeL9Vzr8zs=)
                          4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
                          5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:7b:5a:18:8d:8e:02:96:c4:35:57:25:5a:c9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
        Validity
            Not Before: Jul 23 19:01:16 2026 GMT
            Not After : Jul 24 19:01:16 2026 GMT
        Subject: CN=c5e7e8ac3e5decd3b0d9c32ccac6476e495aa44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:d0:4f:89:ad:fd:b6:65:12:b6:14:b6:ca:
                    0c:fd:6e:13:5f:d9:66:63:7a:3e:82:62:a0:29:d0:
                    a9:91:27:4f:09:a5:33:cd:57:f6:eb:21:eb:eb:92:
                    a7:f1:5b:60:3c:76:5e:30:d4:a4:e3:51:d8:4b:fa:
                    82:c6:35:10:e0:e0:56:17:23:03:b3:66:0a:02:2b:
                    91:c7:fd:fd:75:07:c4:7e:73:ca:18:42:c3:0c:6a:
                    97:13:97:a3:fd:0d:8c:38:81:81:f4:7a:95:ee:63:
                    03:04:0b:49:dc:a1:7a:ab:20:a2:2a:a4:d0:c9:e6:
                    75:4b:11:3d:17:49:6f:86:b8:d2:9f:31:aa:7c:6b:
                    d9:d4:71:0c:9a:e9:83:57:9e:f5:76:a4:17:b5:a1:
                    9b:47:20:b1:2a:e7:c9:92:f5:4c:d5:dd:06:8e:0e:
                    d5:87:21:07:7d:f2:ae:4b:64:29:d4:b9:eb:f0:fa:
                    e2:90:88:ab:6e:0a:8b:18:cc:9c:f7:07:1f:b6:a9:
                    29:a1:4d:a8:bc:7d:ea:a1:99:85:21:e5:f6:62:b4:
                    37:d7:9e:f9:6f:9e:16:47:90:29:d3:2e:e6:08:c8:
                    0b:0b:5f:64:25:12:87:4a:ea:67:4d:c3:f1:54:ef:
                    4b:a8:73:0a:f1:77:f0:e7:87:ce:88:0f:f9:59:59:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:E8:AC:3E:5D:EC:D3:B0:D9:C3:2C:CA:C6:47:6E:49:5A:A4:4B
            X509v3 Authority Key Identifier:
                keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:fa:74:d6:ff:50:03:f3:b9:9c:53:39:69:f6:ea:bf:1a:
         2b:f7:5f:2e:61:c1:99:a6:98:0d:9d:81:b4:1a:98:0a:03:5e:
         33:f7:b3:b7:bd:71:14:3d:c4:3f:4a:d0:12:09:e1:cb:42:53:
         86:70:1a:80:a7:28:67:34:b9:72:18:7e:8a:8a:fd:0f:d0:c6:
         45:fe:9d:79:a2:ef:28:cd:cd:bb:f8:9d:73:a4:a2:78:b8:db:
         97:7a:98:f1:cb:c2:41:61:c2:e1:d6:cb:de:ef:73:b1:66:4e:
         c4:81:db:10:3a:a2:8d:81:e8:6f:b9:2b:d1:09:09:06:79:61:
         49:53:af:51:b2:24:8a:4b:f1:02:79:6f:84:2e:83:91:f8:cb:
         a2:15:7d:13:56:e8:74:0d:66:d0:1f:86:c6:07:ed:de:cc:00:
         d3:31:41:53:e0:4b:57:40:f2:da:eb:84:aa:46:19:d7:e6:71:
         fe:fe:76:cb:c3:ab:03:e7:3e:32:27:cd:78:1b:b8:2d:cd:6e:
         4a:67:28:01:9d:13:f5:96:1b:30:3b:31:15:12:7f:cd:78:58:
         7c:c4:89:01:75:3e:2a:29:f0:5e:9f:32:76:2e:7b:30:6b:18:
         23:d3:01:c5:62:72:5a:9e:bf:69:9e:24:62:1f:a9:72:18:4d:
         7a:e1:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:33 2026 by rpki-client