Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File:                     tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier:          bZ6+YG4PHYDBvbk76BZm/JhICNjUsILk1EeM31JW2ko=
Subject key identifier:   63:F3:81:16:71:B7:92:D2:86:17:2E:C8:56:B2:ED:2F:68:ED:16:58
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer:       /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial:       019F8ED919FD0C96BE454E0468D023B6986B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number:          01A8
Signing time:             Thu 23 Jul 2026 12:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:20 +0000
Files and hashes:         1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
                          2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
                          3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
                          4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
                          5: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
                          6: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
                          7: kxDbA6iZREXlK1I1czYegr69at8.roa (hash: HM/zW/CXYydb9LF7o8Y/uhilRHboojJsiV3+XcX8M+c=)
                          8: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
                          9: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: t3ILCZk4/GnC6aRoH9u8vr9aS6oUADZWsHpD8CPT1Ng=)
                          10: wkfR_PFHY2-Koea7USbX3fW8XrY.roa (hash: 3oMLg27nzZvi9O3H6FdMZO/ELbhkETS7+9KaBGDoj0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:19:fd:0c:96:be:45:4e:04:68:d0:23:b6:98:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
        Validity
            Not Before: Jul 23 12:00:20 2026 GMT
            Not After : Jul 24 12:00:20 2026 GMT
        Subject: CN=63f3811671b792d286172ec856b2ed2f68ed1658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:a0:b4:5c:3b:3d:a5:1d:b1:78:6b:bd:8d:
                    73:c4:f8:b9:af:a9:c8:76:b0:81:22:d5:ce:d8:73:
                    55:8b:8a:55:55:07:6d:0a:1d:aa:d9:99:81:4c:12:
                    18:0f:ac:66:dd:8b:79:68:c7:2b:de:40:1a:80:12:
                    24:d0:a0:71:c2:82:d2:bf:c8:f8:ec:03:2c:51:4e:
                    c0:15:b2:20:3e:9c:7a:0f:bd:7f:f0:91:97:da:cd:
                    d2:38:bc:f6:97:c8:be:e0:4f:a3:ea:4c:91:98:ef:
                    e1:89:5a:42:a6:5b:fe:cd:5e:e0:ce:8d:cc:01:f2:
                    c1:04:bf:2c:15:57:f4:99:c4:f3:ab:84:1a:6e:ee:
                    d4:31:f2:5a:43:48:c5:10:cf:79:bf:a4:28:de:25:
                    a7:f7:cf:e7:69:03:e5:7a:79:c0:e8:e4:d5:d0:a9:
                    b7:b4:0e:14:a0:bb:f9:15:d4:8b:c8:0b:e3:33:03:
                    e0:ef:be:ff:b7:1b:69:37:e8:b7:8a:8b:b9:58:df:
                    e3:59:7c:3f:f0:e6:8a:8a:3b:f7:43:99:ae:d4:3d:
                    6a:ae:c8:8c:34:c2:d5:a5:51:a8:57:9f:ad:d8:a0:
                    1e:c5:86:11:3e:d2:41:fa:ce:5d:3d:7d:e2:8b:61:
                    69:e5:ff:7a:34:3d:41:ab:0a:5f:e2:22:51:ad:af:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:81:16:71:B7:92:D2:86:17:2E:C8:56:B2:ED:2F:68:ED:16:58
            X509v3 Authority Key Identifier:
                keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:24:fb:f7:85:c5:2d:5a:aa:c9:40:7a:91:11:0d:15:7e:e6:
         52:b4:5c:20:cb:7f:4d:91:0d:ea:ac:e9:a7:61:4d:1e:18:b9:
         eb:90:5a:89:be:d4:e0:87:d3:1d:2d:70:9a:75:a1:31:68:8a:
         b9:7a:5e:7f:e8:77:9c:49:20:7e:8e:b3:7b:13:1d:05:b0:20:
         72:6b:48:f3:73:26:6d:a9:bf:f0:a3:7e:21:b0:25:77:f2:05:
         8d:bb:22:aa:ce:ca:75:cd:12:0d:42:d8:48:69:d4:a0:68:ef:
         01:07:3a:09:77:ab:5d:2e:a7:b2:58:e3:47:4a:3d:55:f1:82:
         2a:2a:f0:0c:f9:87:37:f2:f5:bc:a9:f7:84:18:56:36:51:d4:
         4f:fd:40:74:d6:7a:52:30:12:c2:4e:03:79:ff:8d:d2:c4:c6:
         9c:ac:94:ad:18:35:28:ac:1d:21:af:fe:5a:b2:d5:22:92:49:
         d1:13:49:49:b6:b1:89:f9:4b:32:36:62:ea:b8:52:07:36:ff:
         f3:10:69:16:ac:43:13:4d:dd:6d:16:e0:b7:1c:b1:b0:89:e3:
         47:ed:e7:30:f8:2b:0b:59:7e:cf:39:e4:a5:4d:66:6e:84:ae:
         a8:65:1e:ea:af:7f:86:17:29:53:85:bf:f6:75:db:de:56:1d:
         34:7c:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:39 2026 by rpki-client