Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File:                     fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier:          NpDk9SpIhDztklSCWF/o+3BTxdoZ01eqziz1dzJueEI=
Subject key identifier:   46:87:E4:2E:10:44:C5:94:44:DD:5F:B3:69:FF:F2:27:DE:7D:D1:31
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer:       /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial:       019F92EE0044DD76FFE975A0A0699992C5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number:          0206
Signing time:             Fri 24 Jul 2026 07:01:38 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:38 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:38 +0000
Files and hashes:         1: 11GxtSy7oVessoMzmqoa6-GVaFM.roa (hash: dEcJU2H7eMFkWZ5hiqB+aM7WjgMaOQg3rLiI2kSrzMA=)
                          2: 4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa (hash: EtytVm/6AHxWfObsQVWGolI13NzE3vnrzO+hEwitye4=)
                          3: 67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa (hash: TMkj0G/KqGW0hoDAPTbK60VfZv79MVnxbAmNA4wAIxY=)
                          4: B_7QNLEyOLRHkGziKQcoP3jS9N8.roa (hash: wt94oNA2beZskoVPKNrRXzQfjQMHidYZl0oibApgTyU=)
                          5: Ed26D8U4hy9Q3LQu5_4P5xQ88Fs.roa (hash: kLzLVcajWbXNwZhhTO7Kf1y0Py6ohIR9eaLpz+kos+s=)
                          6: Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa (hash: OWm/SoXebYfD0ymYVnkD6nJ1M+OinzGR+vHe5dJGhIk=)
                          7: JoonRKwDkzGDADAYbWqY6h6w-K8.roa (hash: cPQ1mkuIkwhP6i3plXOgbNc6BnD5TBFu2q0RZqT67s8=)
                          8: ObEFLA71GS6PBSPXvLN1tQxOPjg.roa (hash: CQurRH2QtNh+H5vZ26uy12WpU20lxprNhR0FVldn9Ok=)
                          9: R0lbPN66JhHTAlizwtgpkO4cz3Y.roa (hash: X9vNqzFtl+nRCTrfZFlpEmLshxNhNE7U0YtwgkXsL6o=)
                          10: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
                          11: bAiv0w09X4HnDoPXtry_uVbCG9A.roa (hash: 0EeSizCgG9dwzt3jvwALQHRTpOevtke5hHF/nPETtCw=)
                          12: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: rzx9N+OzrxnWI/egdHpTQlBC0Uxw+hM2EfQonXYcaes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ee:00:44:dd:76:ff:e9:75:a0:a0:69:99:92:c5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
        Validity
            Not Before: Jul 24 07:01:38 2026 GMT
            Not After : Jul 25 07:01:38 2026 GMT
        Subject: CN=4687e42e1044c59444dd5fb369fff227de7dd131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:9d:12:63:96:99:bc:ac:aa:8e:c9:69:ec:
                    a9:0f:42:31:77:55:28:cc:d5:23:4a:bc:fa:ee:33:
                    a8:c9:a3:c6:e0:c9:fa:0b:09:36:21:57:e2:aa:bc:
                    a4:da:64:f5:15:be:2a:f7:95:72:34:0e:e0:6f:ce:
                    80:84:72:80:9e:a7:91:0d:1c:1d:c8:4e:e0:54:e9:
                    e5:51:45:66:36:4e:34:20:f7:dd:6c:5a:b8:55:46:
                    68:2d:53:7c:7f:bc:f6:b9:3b:f4:ee:84:1f:b3:e0:
                    f3:c2:d3:7b:84:7c:80:14:8e:07:2d:f9:e9:00:47:
                    f0:cf:43:a6:83:bb:57:46:fa:e9:58:36:bb:17:f5:
                    11:4e:37:71:9f:d1:c3:06:a8:39:76:0c:00:8f:cb:
                    d5:fa:61:a3:b5:3c:d7:eb:48:07:95:e6:03:9f:30:
                    ab:56:cb:65:c2:d0:cb:4d:86:79:13:1f:86:c0:47:
                    e3:8f:31:18:b9:7b:d5:64:6e:dc:7a:e6:dc:e5:b2:
                    6c:99:a0:d9:0c:59:04:08:60:79:38:60:b2:f0:c2:
                    25:11:13:7f:66:83:6b:97:8b:0b:7b:08:9f:a5:38:
                    4b:d4:27:b4:8a:c6:bf:33:fb:9c:18:bc:f4:5a:c7:
                    30:fb:7c:1f:2c:7d:cb:48:1e:74:97:8c:72:35:de:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:E4:2E:10:44:C5:94:44:DD:5F:B3:69:FF:F2:27:DE:7D:D1:31
            X509v3 Authority Key Identifier:
                keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:7f:86:fd:f7:74:a5:4e:0f:2d:7f:8d:c4:f7:fc:5b:77:
         a6:ad:0c:e8:05:d5:35:ab:6b:48:5b:c6:f0:ad:11:36:f2:fb:
         40:5e:a5:b9:63:1d:e2:d4:ba:04:f3:55:c6:e0:4f:27:c8:04:
         3b:47:6e:b4:f0:a8:5f:55:51:b9:d0:6d:5d:18:95:a0:19:0a:
         fd:bc:35:b9:e2:10:55:2c:15:14:99:ca:f2:4d:93:68:36:ec:
         96:a2:66:e0:30:8e:5d:bc:8d:60:bb:d1:82:ac:eb:3f:22:ed:
         93:b6:6a:8f:10:41:a2:1f:1e:a8:7a:d9:4a:5b:a5:96:d7:86:
         65:6d:f8:da:6f:d5:e9:a8:63:84:16:ce:57:0d:fa:ba:cc:6f:
         24:1c:89:92:40:e9:09:2c:4f:cc:23:6b:e4:49:e4:ed:3e:cb:
         8f:ae:12:54:cf:7c:8a:b3:ae:35:3c:a5:34:95:3a:3f:26:52:
         24:a7:a7:a3:4b:78:45:7c:1e:2c:85:aa:a0:8b:ac:b5:ff:47:
         1c:c1:7f:f0:64:b7:3d:67:00:f2:5f:e4:a4:13:80:5c:92:62:
         44:a4:ed:5e:ad:f9:3d:58:9f:d8:50:96:0d:0c:7b:f8:dd:5f:
         63:c6:74:fc:1e:00:50:bf:1b:76:95:b0:03:2c:0c:f5:b8:df:
         ae:1d:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:50 2026 by rpki-client